漏洞 | C1G军火库 https://blog.c1gstudio.com 关注互联网、网页设计、Web开发、服务器运维优化、项目管理、网站运营、网站安全... Sun, 27 Jul 2025 07:59:39 +0000 zh-Hans hourly 1 Ollama 未授权访问漏洞,攻击者可以下载或删除私有模型文件 https://blog.c1gstudio.com/archives/2060 https://blog.c1gstudio.com/archives/2060#respond Mon, 03 Mar 2025 05:52:17 +0000 http://blog.c1gstudio.com/?p=2060 Ollama 是一个开源的大语言模型（LLM）运行环境和工具集，旨在帮助开发者轻松部署、管理和使用模型（如 D […]

The post Ollama 未授权访问漏洞,攻击者可以下载或删除私有模型文件 first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/2060/feed 0 Windows版PHP命令注入漏洞(CVE-2024-5585)的风险提示 https://blog.c1gstudio.com/archives/2005 https://blog.c1gstudio.com/archives/2005#respond Thu, 01 Aug 2024 09:48:58 +0000 https://blog.c1gstudio.com/?p=2005 一、背景介绍 近日，技术支撑单位监测到PHP官方发布了一则Windows版本PHP命令注入漏洞CVE-2024 […]

The post Windows版PHP命令注入漏洞(CVE-2024-5585)的风险提示 first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/2005/feed 0 阿里提示Discuz uc.key泄露导致代码注入漏洞uc.php的解决方法 https://blog.c1gstudio.com/archives/1809 https://blog.c1gstudio.com/archives/1809#respond Tue, 23 Aug 2016 08:28:56 +0000 http://blog.c1gstudio.com/?p=1809 文件路径：bbs/api/uc.php 1查找 updatebadwords 函数： if(!API_UPDA […]

The post 阿里提示Discuz uc.key泄露导致代码注入漏洞uc.php的解决方法 first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/1809/feed 0 关于ImageMagick存在远程代码执行高危漏洞的安全公告 https://blog.c1gstudio.com/archives/1805 https://blog.c1gstudio.com/archives/1805#respond Tue, 14 Jun 2016 07:45:25 +0000 http://blog.c1gstudio.com/?p=1805 近日，国家信息安全漏洞共享平台（CNVD）收录了ImageMagick远程代码执行漏洞（CNVD-2016-0 […]

The post 关于ImageMagick存在远程代码执行高危漏洞的安全公告 first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/1805/feed 0 OpenSSH SFTP远程溢出漏洞 https://blog.c1gstudio.com/archives/1710 https://blog.c1gstudio.com/archives/1710#respond Sat, 11 Oct 2014 02:17:48 +0000 http://blog.c1gstudio.com/?p=1710 近日曝出OpenSSH SFTP 远程溢出漏洞。OpenSSH服务器中如果OpenSSH服务器中没有配置 […]

The post OpenSSH SFTP远程溢出漏洞 first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/1710/feed 0 Discuz! X2.5 远程代码执行漏洞及EXP[XDAY] https://blog.c1gstudio.com/archives/1438 https://blog.c1gstudio.com/archives/1438#respond Sat, 28 Apr 2012 01:35:09 +0000 http://blog.c1gstudio.com/?p=1438 发布时间: 2012-04-27 漏洞版本:Discuz! X2.5Release20120407 漏洞描述: […]

The post Discuz! X2.5 远程代码执行漏洞及EXP[XDAY] first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/1438/feed 0 Oracle MySQL Server两个不明细节本地漏洞 https://blog.c1gstudio.com/archives/1395 https://blog.c1gstudio.com/archives/1395#respond Thu, 12 Apr 2012 05:50:44 +0000 http://blog.c1gstudio.com/?p=1395 发布时间: 2012-04-09 漏洞版本: Oracle MySQL 5.x 漏洞描述: MySQL是一个小 […]

The post Oracle MySQL Server两个不明细节本地漏洞 first appeared on C1G军火库.

]]> https://blog.c1gstudio.com/archives/1395/feed 0