CVE-2021-31805

CVE-2021-31805 CVE-2021-31805（Apache Struts2）的PoC 这是CVE-2021-31805解説文章中使用的应用程序。 设置 root@kitploit: $ docker-compose build $ docker-compose up -d 运行确认 访问 http://localhost:8080/struts2-showcase-2.5.29/index.html 并确认Welcome页面显示。 Exploit root@kitploit: $ curl -I...

CVE-2026-19335

CVE-2026-19335 concerns the Jane-xiaoer skill-vision-control project, affecting the function getSkillVersionsDir in src/svc/utils/config.ts. The vulnerability arises from how the argument skillName is handled, enabling a path traversal condition. The issue is restricted to a local attack vector a...