关于

2019-01-25 · 1 min read

About Me

一个普通的安全研究员

GitHub：https://github.com/yulate
Email: yulate531@gmail.com

漏洞挖掘

CVE-2024-21182 : Oracle Critical Patch Update Advisory - July 2024
CVE-2024-21216 : Oracle Critical Patch Update Advisory - October 2024
CVE-2024-42323 : Apache HertzBeat: RCE by snakeYaml deser load malicious xml
CVE-2024-45505 : Apache HertzBeat (incubating): Exists Native Deser RCE and file writing vulnerabilities
CVE-2024-56180 : Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution
CVE-2025-27103：Dataease Mysql JDBC Connection Parameters Not Verified Leads to Arbitrary File Read Vulnerability

议题分享

2025 阿里云白帽大会 : 击碎共识：从 Raft Leader 劫持到分布式系统接管

友情链接

以下链接不分先后