UpdatedJul 29, 2026
Penetration_Testing_POC — Updated!
POC, EXP, scripts, privilege escalation, small tools related to penetration testing---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Penetration_Testing_POC
Collect and share POCs, scripts, tools, articles, and other techniques used in penetration testing, as a note. Contributions welcome.
Please note that all tools may have backdoors or other anomalous behavior; it is recommended to operate in a virtual environment.
- Penetration_Testing_POC
- Please make good use of search [
Ctrl+F] - IOT Device&Mobile Phone
- Web APP
- Privilege Escalation Assistance Related
- PC
- tools - Collection of Small Tools
- Articles/Books/Tutorials Related
- Description
Please make good use of search [Ctrl+F]
IOT Device&Mobile Phone
- Tianyi Skyworth awifi router has multiple unauthorized access vulnerabilities
- Huawei WS331a product management page has CSRF vulnerability
- CVE-2019-16313 Fengwang Interconnect Enterprise Router v4.31 Password Disclosure Vulnerability
- D-Link Router RCE Vulnerability
- CVE-2019-13051 - Pi-Hole Router Ad-blocking Software Command Injection & Privilege Escalation
- D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621)
- Huawei HG255 Directory Traversal|Local backup file
- D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)CVE-2019-20215(Metasploit)%20CVE-2019-20215.rb)
- From Interfaces.d to RCE: Vulnerability Discovery in Mozilla WebThings IoT Gateway
- Xiaomi Series Router Remote Command Execution Vulnerabilities (CVE-2019-18370, CVE-2019-18371)
- Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload - Replace firmware without authentication)
- cve-2020-8634&cve-2020-8635|Wing FTP Server 6.2.3 Privilege Escalation Vulnerability Discovery Analysis and Reproduce Process|Wing FTP Server 6.2.5 Privilege Escalation
- CVE-2020-9374-TP LINK TL-WR849N - RCE
- CVE-2020-12753 - LG Smartphone Arbitrary Code Execution Vulnerability
- CVE-2020-12695 - UPnP Security Vulnerability
- 79 Netgear Routers Hit by Remote Takeover 0day
- dlink-dir610-exploits-Exploits for CVE-2020-9376 and CVE-2020-9377
- wacker: A set of scripts to assist in performing online dictionary attacks against WPA3 access points
- CVE-2020-24581 D-Link DSL-2888A Remote Command Execution Vulnerability Analysis-Original URL
- CNVD-2021-14536 Ruijie RG-UAC Unified Internet Behavior Management Audit System Account Password Information Disclosure Vulnerability
- CNVD-2021-14544: Hikvision Stream Media Management Server Arbitrary File Read
- CNVD-2020-25078: D-link Sensitive Information Leakage, can directly obtain account passwords to view monitoring
- ios-gamed-0day
- ios-nehelper-wifi-info-0day
- ios-nehelper-enum-apps-0day
- iOS 15.0.1 RCE PoC
- DarkSword-RCE: Apple iOS Remote Code Execution Exploit|darksword-kexploit: Apple iOS Kernel Exploit|DarkSword: Apple iOS Exploit
- CVE-2021-36260: Hikvision Product Command Injection Vulnerability
- CVE-2021-33044, CVE-2021-33045 Dahua Camera POC|Related Analysis|Login bypass Chrome extension
- CVE-2021-36260: Hikvision Command Injection Vulnerability|Another CVE-2021-36260 exploit script
- CVE-2021-41653: TP-Link TL-WR840N V5(EU) - RCE%20-%20RCE%20-%20CVE-2021-41653.pdf)
- DirtyPipe-Android: Dirty Pipe root exploit for Android
- CVE-2022-30075: Tp-Link Archer AX50 Authenticated RCE
- NotQuite0day: D-Link 1960 Related Vulnerabilities
- HuaYuReportRCE: Huayu Digital Report Component GetShell
- IOT_Vul: Collection of IOT Related Vulnerabilities
- CameraHack: Batch scan and exploit common vulnerabilities in Hikvision, Dahua, etc. cameras
- CVE-2022-32832: Apple macOS APFS Kernel Arbitrary Code Execution Vulnerability
- HookWechatRecall: Intercept WeChat Recall Demo via Frida
- IOT_vuln: IOT Related Vulnerability Repository
- hikvision_CVE-2017-7921_auth_bypass_config_decryptor: Decrypt Hikvision configuration files affected by CVE-2017-7921
- CVE-2022-20866: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Check
- WLAN-AP-WEA453e RCE: Samsung Router Remote Command Execution Vulnerability
- Buffer overflow in Xiongmai DVRs|Backup
- CVE-2023-27350: PaperCut NG Authentication Bypass leading to RCE
- ivms-8700-0day-poc: Hikvision iVMS-8700 Integrated Security Management Platform Arbitrary File Upload Vulnerability
- badspin: Android Kernel Use-After-Free Vulnerability
- HikvisionIVMSGetShell: Hikvision IVMS Integrated Security Management Platform Software GetShell
- iot: Exploitation of DIR-816 823g series routers
- VulIoT: DIR-816 823g series router vulnerability exploitation
- NsePocsuite-lua: Network camera vulnerability detection script. Nmap (Nse Nmap script engine)
- Device Vulnerability Discovery Ideas
- Vivotek CC8160 Firmware Stack Overflow Vulnerability Reproduction Analysis
- Xiaomi AX9000 Router CVE-2023-26315 Vulnerability Discovery
- IOT-CVE-2018-17066 (D-Link Command Injection Vulnerability).html)
- Extraction & Brute-force Tool for OpenSSL Encryption of IoT Firmware
- Xiaomi Router Firmware Emulation Scheme
- QEMU Setup ARM64 Environment _ ZIKH26's Blog
- SSD Advisory - NVMS9000 Information Disclosure - SSD Secure Disclosure
- DIR-820 CVE-2022-26258 Vulnerability Reproduction
- From jhttpd Analysis to System Command Injection (CVE-2021-46227-D-Link Di-7200G Command Injection Vulnerability).html)
- 2024 RWCTF Synology BC500 Camera RCE - Unauthorized_Stack Overflow
- Router dd manual firmware extraction --- Fast PoEAC router all-in-one FR100P-AC firmware extraction
- NX_Firmware: Nintendo Switch firmware database for all versions
- vphone-aio: One-click run iOS virtual phone (vphone) script with jailbreak and full bootstrap installed
- AssppJailbroken: A tool for decrypting the latest IPA files downloaded from the App Store, supporting running on jailbroken iOS devices and iPhone simulators
- FirmWire: Full-system dynamic analysis platform supporting Samsung Shannon and MediaTek baseband firmware, can be used for fuzzing, vulnerability root cause analysis and debugging
- Podroid: Run Linux containers on Android phones without root, start Alpine Linux VM based on QEMU and provide complete Podman container runtime
- PrismSpace: App dual-instance manager based on Android managed profile
- Tsec-Salon: Tencent Security Salon past event materials|BLACKHAT_Asia2026: Black Hat Asia 2026 topic materials summary|Java Ghost Bits - Black Hat Asia 2026 Presentation PDF (Ghost Bits: High-order truncation)|GBitsTools: Ghost Bits attack tool (Python GUI/CLI)|GbitsGen: Ghost Bits character generation tool|ghost-bits-lab: Ghost Bits interactive security lab target (Java)
- CVE-2026-34908-check: UniFi OS Server Authentication Bypass and Unauthenticated Remote Code Execution (RCE) Detection Tool | Related Technical Analysis: Popping Root on UniFi OS Server
Web APP- Zhiyuan OA A8 getShell 0day
- Couch through 2.0 Path Disclosure Vulnerability
- Cobub Razor 0.7.2 Cross-Site Request Forgery Vulnerability
- joyplus-cms 1.6.0 CSRF Vulnerability Leading to Admin Account Addition
- MiniCMS 1.10 CSRF Vulnerability Leading to Admin Account Addition
- Z-Blog 1.5.1.1740 XSS Vulnerability
- YzmCMS 3.6 XSS Vulnerability
- Cobub Razor 0.7.2 Privilege Escalation to Add Admin Account
- Cobub Razor 0.8.0 SQL Injection Vulnerability
- Cobub Razor 0.8.0 Physical Path Disclosure Vulnerability
- Wuzhi CMS 4.1.0 CSRF Vulnerability Leading to Admin Account Addition
- DomainMod XSS Collection
- GreenCMS v2.3.0603 CSRF Vulnerability Leading to WebShell Acquisition & Admin Account Addition
- yii2-statemachine v2.x.x XSS Vulnerability
- maccms_v10 CSRF Vulnerability Leading to Arbitrary Account Addition
- LFCMS 3.7.0 CSRF Vulnerability Leading to Addition of Arbitrary User or Admin Accounts
- Finecms_v5.4 CSRF Vulnerability Leading to Admin Password Modification
- Amazon Kindle Fire HD (3rd Generation) Kernel Driver Denial of Service Vulnerability内核驱动拒绝服务漏洞.md)
- Metinfo-6.1.2 XSS & SQL Injection Vulnerabilities
- Hucart cms v5.7.4 CSRF Vulnerability for Arbitrary Admin Account Addition
- indexhibit cms v2.1.5 Direct PHP File Editing Getshell
- S-CMS Enterprise Website Building System PHP v3.0 Backend CSRF Leading to Admin Privilege Account Addition
- S-CMS PHP v3.0 SQL Injection Vulnerability
- MetInfoCMS 5.X GETSHELL Vulnerability Collection
- MetInfo7.5.0 Code Audit (Backend SQL Injection + md5 Weak Type Comparison).pdf.pdf)
- discuz ml RCE Vulnerability Detection Tool
- thinkphp5 Framework Flaw Leading to Remote Code Execution
- FineCMS_v5.0.8 Two Getshells
- Struts2_045 Vulnerability Batch Detection|Search Engine Collection Scan
- thinkphp5 Command Execution
- typecho Deserialization Vulnerability
- CVE-2019-10173 Xstream 1.4.10 Remote Code Execution
- IIS/CVE-2017-7269-Echo-PoC
- CVE-2019-15107 Webmin RCE
- thinkphp5 RCE Vulnerability Detection Tool
- thinkphp5_RCE Collection
- thinkphp3.X-thinkphp5.x
- ThinkPHP Framework Historical Vulnerability Analysis Collection
- CVE-2019-11510
- Redis(<=5.0.5) RCE
- Redis 4.x/5.x RCE (Master-Slave Replication Leading to RCE)
- Generate Redis Malicious Module .so File for Master-Slave Replication RCE to Achieve Command Execution | Related Article
- RedisWriteFile - Write Lossless Files via Redis Master-Slave, Used for Writing Lossless EXE, DLL, LNK on Windows and OS Binary on Linux
- WeblogicScanLot Series, Weblogic Vulnerability Batch Detection Tool
- TongWeb EJB Exploitation and Plugin Tool | TongwebPlugin
- jboss_CVE-2017-12149
- WordPress Denial of Service (DoS) - CVE-2018-6389
- Webmin Remote Code Execution (authenticated) - CVE-2019-15642
- CVE-2019-16131 OKLite v1.2.25 Arbitrary File Upload Vulnerability
- CVE-2019-16132 OKLite v1.2.25 Arbitrary File Deletion Vulnerability
- CVE-2019-16309 FlameCMS 3.3.5 SQL Injection Vulnerability at Backend Login
- CVE-2019-16314 indexhibit cms v2.1.5 Reinstallation Leading to Getshell
- Weaver OA Management System RCE Exploit Script
- CVE-2019-16759 vBulletin 5.x 0day pre-auth RCE exploit
- zentao-getshell ChanDao 8.2 - 9.2.1 Frontend Getshell
- Weaver e-cology OA Frontend SQL Injection Vulnerability
- Joomla-3.4.6-RCE
- Easy File Sharing Web Server 7.2 - GET Buffer Overflow (SEH).md)
- Construct ASMX to Bypass WAF Restrictions for Command Execution (Applicable to ASP.NET Environment)
- CVE-2019-17662-ThinVNC 1.0b1 - Authentication Bypass
- CVE-2019-16278 and CVE-2019-16279 about nostromo nhttpd
- CVE-2019-11043-PHP Remote Code Execution Vulnerability
- ThinkCMF Vulnerability Collection
- CVE-2019-7609-kibana Below 6.6.0 Unauthorized Remote Code Execution
- ecologyExp.jar - Weaver ecology OA System Database Configuration File Reader
- freeFTP1.0.8-'PASS' Remote Buffer Overflow
- rConfig v3.9.2 RCE Vulnerability
- apache_solr_rce
- CVE-2019-7580 thinkcmf-5.0.190111 Backend Arbitrary File Write Leading to Code Execution
- Apache Flink Arbitrary Jar Upload Leading to Remote Code Execution
- Jwt_Tool - Tool for verifying, forging, scanning and tampering JWT (JSON Web Tokens)
- cve-2019-17424 nipper-ng_0.11.10-Remote_Buffer_Overflow Remote Buffer Overflow with PoC
- CVE-2019-12409_Apache_Solr RCE
- Shiro RCE (Padding Oracle Attack)
- CVE-2019-19634 class.upload.php <= 2.0.4 Arbitrary File Upload
- Apache Solr RCE via Velocity Template Injection
- CVE-2019-10758 mongo-express before 0.54.0 is vulnerable to Remote Code Execution
- CVE-2019-2107 Android Play Video RCE POC (Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0)
- CVE-2019-19844 Django Password Reset Vulnerability (Affected versions: Django master branch, Django 3.0, Django 2.2, Django 1.11)
- CVE-2019-17556 unsafe-deserialization-in-apache-olingo (Apache Olingo Deserialization Vulnerability, Affects: 4.0.0 to 4.6.0)
- ZZCMS201910 SQL Injections | ZZCMS201910 Code Audit
- WDJACMS1.5.2 Template Injection Vulnerability
- CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway
- CVE-2019-19781.nse - Use Nmap to check Citrix ADC Remote Code Execution
- Mysql Client Arbitrary File Read Attack Chain Extension
- CVE-2020-5504 phpMyAdmin Injection (Requires Login) - Another reproduction of this vulnerability
- CVE-2020-5509 Car Rental Project 1.0 Remote Code Execution Vulnerability
- CryptoAPI PoC CVE-2020-0601 | Another PoC for CVE-2020-0601
- New Weblogic RCE (CVE-2020-2546, CVE-2020-2551) CVE-2020-2546 | WebLogic WLS Core Component RCE Analysis (CVE-2020-2551) | CVE-2020-2551 Weblogic IIOP Deserialization EXP
- CVE-2020-5398 - RFD (Reflected File Download) Attack for Spring MVC
- PHPOK v5.3 & v5.4 getshell | phpok V5.4.137 Frontend getshell Analysis | PHPOK 4.7 From Injection to Getshell
- thinkphp6 Session Arbitrary File Creation Vulnerability Reproduction with POC - Original text on the vulnerability notification public account
- ThinkPHP 6.x Deserialization POP Chain (Part 1) | Original Link
- ThinkPHP 6.x Deserialization POP Chain (Part 2) | Original Link
- ThinkPHP 6.x Deserialization POP Chain (Part 3) | Original Link
- WordPress InfiniteWP - Client Authentication Bypass (Metasploit)
- Linux/RCE OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution
- CVE-2020-7471 django 1.11-1.11.28, 2.2-2.2.10, 3.0-3.0.3 StringAgg(delimiter) uses unsafe data causing SQL injection vulnerability environment and POC
- CVE-2019-17564: Apache Dubbo Deserialization Vulnerability
- CVE-2019-2725 (CNVD-C-2019-48814, WebLogic wls9-async)
- YzmCMS 5.4 Backend Getshell
- About Ghostcat (CVE-2020-1938): CNVD-2020-10487 (CVE-2020-1938), tomcat ajp file read vulnerability poc | Java version POC | Tomcat-Ajp protocol file read vulnerability | Another python version CVE-2020-1938 vulnerability detection | CVE-2020-1938 Vulnerability Reproduction Environment and EXP
- CVE-2020-8840: Jackson-databind Remote Code Execution Vulnerability (may affect fastjson)
- CVE-2020-8813 Cacti v1.2.8 RCE Remote Code Execution EXP and Analysis (Requires authentication / or enable guest access to bypass login) (A Linux-based network traffic monitoring graphical analysis tool developed with PHP, MySQL, SNMP, and RRDTool) | EXP | CVE-2020-8813 MSF Exploit Script
- CVE-2020-7246 PHP Project Management System qdPM < 9.1 RCE
- CVE-2020-9547: FasterXML/jackson-databind Remote Code Execution Vulnerability
- CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability
- Apache ActiveMQ 5.11.1 Directory Traversal / Shell Upload
- CVE-2020-2555: WebLogic RCE Vulnerability POC | CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE
- CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability
- CVE-2020-0554: phpMyAdmin Backend SQL Injection
- Weaver E-Mobile Ognl Expression Injection | Expression Injection.pdf
- Weaver 10 Frontend Upload Getshell | Python version getshell
- Tongda OA RCE Vulnerability | Tongda OA v11.6 RCE Reproduction Analysis + EXP - EXP Download
- CVE-2020-10673 jackson-databind JNDI Injection Leading to Remote Code Execution
- CVE-2020-10199, CVE-2020-10204 One-click Detection Tool, Graphical Interface (Sonatype Nexus < 3.21.1)
- CVE-2020-2555 Oracle Coherence Deserialization Vulnerability | Analysis Article
- cve-2020-5260 Git Credential Leak Vulnerability
- Tongda OA Frontend Arbitrary User Forgery Login Vulnerability Batch Detection
- CVE-2020-11890 Joomla RCE < 3.9.17 Remote Command Execution Vulnerability (Requires valid credentials)
- CVE-2020-10238 [Joomla RCE <= 3.9.15 Remote Command Execution (Requires valid credentials)] & CVE-2020-10239 [Joomla RCE 3.7.0 to 3.9.15 Remote Command Execution (Requires valid credentials)]
- CVE-2020-2546, CVE-2020-2915, CVE-2020-2801, CVE-2020-2798, CVE-2020-2883, CVE-2020-2884, CVE-2020-2950 WebLogic T3 payload exploit poc python3 | CVE-2020-2883 Weblogic coherence.jar RCE | WebLogic-Shiro-shell WebLogic using CVE-2020-2883 to exploit Shiro rememberMe deserialization vulnerability, one-click register filter memory shell | shiro_rce_tool: Possibly the best shiro exploitation tool | ShiroExploit: ShiroExploit is a Shiro visualization exploitation tool integrating key brute force, command echo memory shell injection and other functions
- tongda_oa_rce - Tongda OA Unauthorized Login + File Upload Getshell
- CVE-2020-11651 SaltStack Proof of Concept [Authentication Bypass RCE] | CVE-2020-11651 && CVE-2020-11652 EXP
- showdoc api_page Arbitrary File Upload Getshell
- Fastjson <= 1.2.47 Remote Code Execution Exploitation Tool and Method
- SpringBoot_Actuator_RCE
- jizhicms (Extreme CMS) v1.7.1 Code Audit - Arbitrary File Upload Getshell + SQL Injection + Reflected XSSv1.7.1代码审计引发的思考.pdf)
- CVE-2020-9484: Apache Tomcat Session Deserialization Code Execution Vulnerability | CVE-2020-9484: Apache Tomcat Deserialization RCE Vulnerability Analysis and Exploitation
- PHPOK Latest Version Vulnerability Combo GETSHELL
- Apache Kylin 3.0.1 Command Injection Vulnerability
- weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory
- CVE-2020-5410 Spring Cloud Config Directory Traversal Vulnerability
- NewZhan CMS All Versions SQL Injection (0day)
- Blind Injection or Union? A Strange Injection Point Encountered in SEMCMS3.9 (0day)
- A SEMCMS Code Audit
- Another Audit of SEMCMS
- From PbootCMS (2.0.3 & 2.0.7 Frontend RCE + 2.0.8 Backend RCE) Audit to Bypassing Some Dog审计到某狗绕过.pdf)
- CVE-2020-1948: Apache Dubbo Remote Code Execution Vulnerability
- CVE-2020-5902 F5 BIG-IP Remote Code Execution (RCE) & Arbitrary File Inclusion/Read | Another EXP for CVE-2020-5902 with test docker file
- CVE-2020-8193 Citrix Unauthorized Access Arbitrary File Read
- Thorough Audit of Tianmu MVC_T Framework with Home Version (temmokumvc) v2.01_v2.01.pdf)
- CVE-2020-14645 WebLogic Remote Code Execution Vulnerability | Weblogic_CVE-2020-14645
- CVE-2020-6287 SAP NetWeaver AS JAVA Authorization Issue Vulnerability - Create User EXP | SAP_RECON PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)
- CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 jenkins-rce
- CVE-2020-3452: Cisco ASA/FTD Arbitrary File Read Vulnerability
- 74CMS_v5.0.1 Backend RCE Analysis
- CVE-2020-8163 - Remote code execution of user-provided local names in Rails
- 0day RCE Horde Groupware Webmail Edition RCE
- pulse-gosecure-rce Tool to test for existence of CVE-2020-8218
- Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
- Zblog Default Theme csrf + Stored XSS + Getshell
- Yonyou GRP-u8 Injection + TopSec TopApp-LB Load Balancing System SQL Injection | NSFOCUS UTS Comprehensive Threat Probe Admin Arbitrary Login Reproduction | HW Ammo Library: Sangfor EDR 3.2.21 Arbitrary Code Execution Vulnerability Analysis
- CVE-2020-13935 Tomcat WebSocket Security Vulnerability Leading to Denial of Service Attack
- Douphp Website Backend Stored XSS Vulnerability Analysis - Original Article
- Adminer Simple Exploitation - Original Article
- Knight CMS assign_resume_tpl Remote Code Execution Analysis - Original Article
- kibana RCE Caused by Prototype Pollution (CVE-2019-7609) - YouTube Related Report
- cve-2019-17558 Apache Solr Velocity Injection Remote Command Execution Vulnerability
- Weblogic Server (CVE-2021-2109) Remote Code Execution Vulnerability - Original Article
- Chenguang PHP Customer Service System Source Code 3.6 Frontend Getshell - 0day | Original Article
- zzzcms (asp) Frontend Getshell前台Getshell.md)
- wjdhcms Frontend Getshell (Race Condition).pdf) - Original Article
- glpi_cve-2020-11060 - Related Article
- CVE-2021-21315 PoC Node.js component systeminformation Code Injection Vulnerability
- CVE-2021-23132 Joomla! Directory Traversal Leading to RCE Vulnerability EXP | Reproduction Article - Original Link
- An Audit Thought on ShirneCMS - Deserialization Getshell - Original Article - CMS Address 1 - CMS Address 2
- Apache Solr Latest Version Arbitrary File Read 0day | Original Article
- KiteCMS Vulnerability Discovery Journey (Arbitrary File Write, Arbitrary File Read, and Deserialization).pdf) | Original Article
- CVE-2021-22986 F5 BIG-IP Remote Code Execution Vulnerability EXP | CVE-2021-22986 Batch Detection
- CNVD-2021-10543: MessageSolution Enterprise Email Archive Management System EEA Information Disclosure Vulnerability
- CVE-2021-26295 POC
- eyouRCE: (CNVD-2021-26422) Eyou Email System Remote Command Execution Vulnerability Python Version | EYouMailRCE: Jar Single File Version
- ThinkPHP3.2.x RCE Vulnerability
- Apache Solr SSRF (CVE-2021-27905)
- Coremail Arbitrary File Upload Vulnerability POC, Supports Single or Batch Detection
- CVE-2021-26086: Atlassian Jira Server/Data Center 8.4.0 File Read Vulnerability
- CVE-2021-41773 CVE-2021-42013 Vulnerability Batch Detection Tool: Apache 2.4.49 and 2.4.50 Arbitrary File Read and Command Execution Vulnerability Bypass Exploitation Tool
- CVE-2021-24499: Workreap Theme Less Than 2.2.1 Unauthenticated Arbitrary File Upload Leading to RCE
- CVE-2021-30632: Chrome V8 Out-of-Bounds Write Vulnerability Leading to Memory Corruption
- laravel-exploits: Exploit for CVE-2021-3129
- CVE-2021-21234: Spring Boot Directory Traversal
- CVE-2021-22205: GitLab CE File Upload ExifTool Leading to Command Execution RCE Vulnerability
- Hadoop Yarn RPC Unauthorized RCE
- CVE-2021-41277: Metabase Sensitive Information Disclosure
- Alibaba Sentinel Frontend SSRF
- CVE-2021-37580: Apache ShenYu Permission Authentication Bypass
- log4j2_rce | apache-log4j-poc | CVE-2021-44228: Log4j2 | log4shell-vulnerable-app: Another log4j practice app
- cve-2021-45232-exp: Apache apisix dashboard unauthcation rce
- Spring Boot + H2 Database JNDI Injection | Original Article
- CVE-2021-43297: Apache Dubbo Hessian2 Exception Handling Deserialization
- CVE-2022-21371: Oracle WebLogic Server LFI
- CVE-2022-0332: Moodle 3.11 to 3.11.4 - SQL injection
- CVE-2022-0185: Linux Kernel Vulnerability Leading to Container Escape in Kubernetes
- cve-2022-23131: zabbix-saml-bypass-exp | Another cve-2022-23131
- CVE-2022-22947: Spring Cloud Gateway Remote Code Execution | CVE-2022-22947: golang version | cve-2022-22947-godzilla-memshell: CVE-2022-22947 Inject Godzilla Memory Shell
- spring-cloud-function-SpEL-RCE: Spring Cloud Function SpEL RCE | Related Article
- CVE-2022-22963: Spring-cloud-function-SpEL-RCE
- CVE-2022-22965: spring mvc RCE Analysis | CVE-2022-22965: Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive) | CVE-2022-22965: Spring4Shell golang version detection implementation
- CVE-2022-22954-VMware-RCE: VMware Workspace ONE Access RCE | VMware-CVE-2022-22954
- CVE-2021-31805: S2-062 Apache Struts2 Remote Code Execution Vulnerability
- CVE-2021-21300: Git Symlink Code Execution Vulnerability
- YonyouNC_Tip: Yonyou NC Historical Vulnerabilities
- CVE-2022-1388-EXP: CVE-2022-1388 F5 BIG-IP RCE Batch Detection | CVE-2022-1388 nuclei template | CVE-2022-1388: Another scanning script
- CVE-2022-24734: MyBB Forum Backend RCE
- CVE-2022-0540: Atlassian Jira Seraph Authentication Bypass RCE
- CVE-2022-25237: Bonitasoft Platform from Authentication Bypass to RCE | CVE-2022-25237 Bonitasoft Platform from Authentication Bypass to Undisclosed Deserialization Vulnerability Discovery Journey
- CVE-2022-22978: Spring Security Authentication Bypass Vulnerability | Related Analysis
- FastjsonPoc: Fastjson 1.2.80 Deserialization Code Demo and Environment
- CVE-2022-26133: Atlassian Bitbucket Data Center Deserialization Vulnerability Batch Verification and Exploitation
- CVE-2022-26134: Confluence OGNL Injection RCE Vulnerability | Another cve-2022-26134 exploitation tool
- CVE-2022-32275: GRAFANA 8.4.3 DASHBOARD Directory Traversal | CVE-2022-32276: Unauthorized Bypass Vulnerability
- SXF_SSLVPN_arbitrary_get_session: SSLVPN Arbitrary User Login Vulnerability
- CVE-2022-28346: Django SQL Injection QuerySet.annotate(), aggregate(), and extra() Environment | Another CVE-2022-28346 Environment | CVE-2022-28346 Related Article Analysis
- CVE-2022-32532: Apache Shiro Authentication Bypass Vulnerability
- CVE-2022-34265: Django SQL Injection Vulnerability
- CVE-2022-33980 Apache-Commons-Configuration-RCE
- cve-2022-33891: Apache Spark Shell Command Injection | Another cve-2022-33891 exploitation tool
- LandrayOATreexmlRCE: Landray OA Treexml Remote Command Execution
- ZentaoSqli: Zentao v16.5 SQL Injection Vulnerability POC
- CVE-2022-36446 Webmin Software Package Updates RCE: Webmin Remote Code Execution Vulnerability
- CVE-2022-33980 Apache Commons Configuration Remote Command Execution Vulnerability
- CVE-2022-31101: PrestaShop bockwishlist module 2.1.0 SQLi
- CVE-2022-30525: CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability POC & EXPC
- CVE-2022-2185: gitlab Remote Code Execution (Requires Authentication)
- CVE-2022-27925 PoC: Zimbra Collaboration Path Traversal Leading to RCE | zaber: CVE-2019-9670 XXE Exploitation Tool written in golang
- CVE-2022-1040: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
- CVE-2022-31269: Nortek Control Linear eMerge E3-Series Information Disclosure
- CNVD-2022-60632 Chanjet Arbitrary File Upload Vulnerability Reproduction | Backup | Backup 2
- Teleport Bastion Host Arbitrary User Login Vulnerability | Backup | Backup 1 | Backup 2
- CVE-2022-40127: Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC
- CVE-2022-36537: ZK framework authentication bypass & connectWise r1Soft server backup manager remote code execution
- CVE-2022-40684: Fortinet FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Vulnerability
- Weblogic-CVE-2023-21839: Oracle WebLogic Server Remote Code Execution | Weblogic CVE-2023-21839 RCE (No Java Dependency One-Click RCE)
- CVE-2022-39952: FortiNAC keyUpload zipslip Remote Code Execution Vulnerability
- CVE-2022-21587: Oracle E-Business Suite Unauthorized RCE | Oracle E-BS CVE-2022-21587 Exploit Plugin for woodpecker-framework
- Alibab-Nacos-Unauthorized-Login: Alibaba Nacos <= 2.2.0 Unauthorized Access "Default key generate jwt token" | Nacos-Authentication-Bypass-Poc | nacos_vul: Nacos Authentication Bypass Batch Detection (QVD-2023-6271) + Direct User Addition
- CVE-2023-27524: Insecure Default Configuration in Apache Superset
- CVE-2023-1671: Sophos Web Appliance Remote Command Execution Vulnerability
- CVE-2023-28771 PoC: Zyxel firewalls Command Injection Vulnerability
- CVE-2023-25690 POC: Apache HTTP Server Request Smuggling Vulnerability
- realor-sql-Injection-exp: Ruiyou Tianyi Application Virtualization - Remote Code Execution / SQL Injection
- Apache-Solr-8.3.1-RCE: Apache Solr 8.3.1 admin panel RCE (Windows)
- CVE-2023-27997-check: Fortinet FortiOS SSL-VPN Remote Code Execution Vulnerability
- CVE-2023-20178: Cisco AnyConnect Secure Mobility Client for Windows System Privilege Escalation Vulnerability
- CVE-2023-34960: Chamilon Command Execution
- CVE-2023-23333: Contec SolarView Compact Command Execution
- CVE-2023-7028: GitLab Arbitrary User Password Reset Vulnerability
- CVE-2023-22527: Atlassian Confluence - Remote Code Execution | nuclei-template CVE-2023-22527: Atlassian Confluence - Remote Code Execution
- CVE-2024-23897: Jenkins CLI Arbitrary File Read Vulnerability Leading to RCE
- CVE-2024-21887: ivanti policy secure 22.6 Command Injection Vulnerability
- CVE-2024-0204: Goanywhere MFT Unauthenticated Admin Creation Vulnerability
- CVE-2024-4577: PHP CGI Windows Platform Remote Code Execution Vulnerability | 1 | 2
- CVE-2024-34102: Magento estimate-shipping-methods XXE Vulnerability
- CVE-2024-37032: Ollama Directory Traversal Leading to Code Execution Vulnerability
- CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability
- thinkphp3.2.5 A Pseudo 0day
- Hikvision Integrated Security Management Platform productFile Remote Command Execution Vulnerability Analysis
- Dahua Smart Park System Login Bypass Analysis
- 2023 Attack and Defense Heavy Weapon: Dahua Smart Park Comprehensive Management Platform Code Audit
- Obtaining CNVD High-Risk Certificate by Code Auditing Yonyou NC6.5 (workflowService and PaWfm2 SQL Injection).html)
- Casual Archaeology of an Enterprise Digital Platform (Yonyou NC actionhandlerservlet Deserialization).html)
- Xinhu OA 2.6.0 An Audit Half a Year Ago
- Xinhu OA (v2.6.3) Backend GETSHELL Analysis后台GETSHELL分析.html)
- Xinhu OA Backend GETSHELL Analysis
- Kingdee Apusic Application Server Arbitrary File Upload Vulnerability - A Domestic Middleware File Upload Vulnerability Analysis
- nginxwebui Backend RCE Up to 3.9.9
- A Code Audit Record (nginxWebUI <= 4.1.1) RCE Test Learning Processrce测试学习过程.html)
- High-Risk CNVD_ Yonyou U8-OA Basic Version (operaFileActionController.jsp) File Overwrite Vulnerability Getshell存在文件覆写漏洞getshell.html)
- Feiqi Interconnection Ognl Expression Injection Leading to RCE - An OA Command Execution Vulnerability Discovery Thought
- CVE-2023-51444 Vulnerability Analysis to Memory Shell Injection
- Analysis of Template Injection Vulnerabilities in PHP
- RuoYi-Flowable-Plus 0day Expression Injection (v0.8.3).pdf)
- SSRF Bypassing file Protocol Restrictions
- ShowDoc SQL Injection and Deserialization Vulnerability Analysis
- ThinkPHP8 Deserialization Call Chain
- [Translation] GHSL-2023-229_GHSL-2023-230: Remote Code Execution (RCE) in Apache Kafka UI - CVE-2023-52251, CVE-2024-32030
- [Translation] From Setting Charset to RCE: Exploiting PHP Engine with GLIBC (Part 1)
- [Translation] From Setting Charset to RCE: Exploiting PHP Engine with GLIBC (Part 2)
- jepaas Low-Code Platform Code Audit Analysis (Permission Bypass, File Upload, SQL Injection).html)
- ofbiz Directory Traversal Leading to Code Execution Vulnerability (CVE-2024-32113) Analysis
- php Bypassing (360) a Security Software to Execute System Commands某防护软件执行系统命令.html)
- tomcat Memory Shell Analysis
- A Classic Case Study from JS Map Leak to OSS Object Storage Takeover
- Brief Analysis of Vulnerability Discovery in New Version of DolphinPHP
- Generic Tomcat InvokerServlet RCE Attack Chain Discovery
- From Tomcat JMX Proxy to RCE: AccessLogValve Injection Exploitation | jmx2rce: Tomcat JMX Proxy Unauthorized AccessLogValve Injection Exploitation Tool (Scanning/File Read/RCE/Cleanup Integrated)
- Jinhe OA C6 Office System Global Bypass Vulnerability Analysis
- Brief Description of PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577)
- MSSQL Injection Bypassing 360 to Execute Commands
- Java Fastjson Versions Vulnerability Countermeasure History and Summary
- Java SpringBoot Vulnerability Exploitation Postures Collection Summary Detailed Version
- FastJson1 & FastJson2 Deserialization Exploitation Chain Analysis
- A Ridiculous Memory Shell GetShell
- Exploring Echo Methods for EL Expression Injection
- Modifying JS Files in Browser_ Using mitmproxy for Plaintext Fuzzing of Encrypted Requests
- Mobile Penetration Testing Solution
- A Little Story of Forcibly Bypassing Three WAFs for Injection
- Vulnerability Discovery at a Double First-Class University
- Re-excavating CC Chains
- CVE-2024-36401 GeoServer Remote Code Execution
- GeoServer Property Evaluate Remote Code Execution Vulnerability (CVE-2024-36401) Analysis%20分析.html)
- GeoServer property RCE Injection Memory Shell
- GeoServer Historical Vulnerability Analysis
- .Net ViewState Deserialization to Achieve Fileless Godzilla Memory Shell (Wanhu ezEip).html)
- nginx deny Restriction Path Bypass
- Qiyuesuo Code Audit Analysis
- Code Audit of Hongjing eHR Human Resources System (Permission Bypass, downlawbase Injection, Arbitrary File Delete/Download, Deserialization RCE).html)
- FanRuan channel Deserialization Vulnerability Analysis
- FanRuan channel v5 Deserialization Bypass
- Lanling EKP Frontend Remote Command Execution Vulnerability Analysis
- A Park System Login Bypass Analysis (Dahua Smart Park Comprehensive Management Platform - Login Bypass, ZIP Upload Directory Traversal).html)
- In-depth Analysis of PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577, CVE-2012-1823)
- Vulnerability Discovery: Re-exploring a Park System (Dahua Smart Park Comprehensive Management Platform - Unauthorized User Add/View/Modify, XStream Deserialization RCE).html)
- A University Smart Cloud Platform: Weak Password Brute Force, Horizontal Privilege Escalation Information Leak, Wx_SessionKey Tampering Arbitrary User Login Vulnerability
- (Nday) Weaver E-office 10 OfficeServer.php Download/Upload Vulnerability Analysis泛微E-office%2010%20OfficeServer.php%20下载_上传漏洞分析.html)
- CVE-2024-30188 Apache DolphinScheduler Arbitrary File Read/Write Vulnerability Analysis
- CVE-2024-36412 SuiteCRM Unauthenticated SQL Injection Analysis
- CVE-2024-38856 Apache OFBiz Authentication Bypass
- CVE-2024-43044 Jenkins Remoting Remote Code Execution Vulnerability Analysis
- Some Methods for DedeCMS Backend RCE – fushulingのblog
- H3C-iMC Intelligent Management Center autoDeploy.xhtml Page Code Execution Vulnerability Analysis
- Nacos 0day (derby_source) Analysis _ No Outbound Network Exploitation
- Nacos <= 2.4.0.1 Arbitrary File Read/Write/Delete
- Spring Cloud Data Flow Vulnerability Analysis (CVE-2024-22263, CVE-2024-37084)
- Unnamed page: Detailed Sample Analysis of .NET Malware Dark Crystal RAT
- wookteam Collaboration Platform searchinfo Interface SQL Injection Vulnerability Analysis
- [Original] Xinhu RockOA v2.6.2 SQL Injection Vulnerability _ Security Team Contribution Platform](./books/【原创】Xinhu%20RockOA%20v2.6.2%20SQL注入漏洞%20_%20安全团队贡献平台.html)
- [Original] (CVE-2024-7919) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Unauthorized Access Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7919）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20未授权访问漏洞%20_%20安全团队贡献平台.html)
- [Original] (CVE-2024-7920) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Information Disclosure Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7920）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20信息泄露漏洞%20_%20安全团队贡献平台.html)
- [Original] (CVE-2024-7921) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Information Disclosure Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7921）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20信息泄露漏洞%20_%20安全团队贡献平台.html)
- Wanhu graph include.jsp SQL Injection Vulnerability Analysis
- Wanhu OA receivefile_gd SQL Injection
- Esafenet New Generation Electronic Document Security Management System SecretKeyService SQL Injection Vulnerability
- Esafenet New Generation Electronic Document Security Management System logincontroller JNDI Injection Leading to Remote Code Execution (XVE-2024-8758).html)
- Esafenet New Generation Electronic Document Security Management System - LogDownLoadService mssql SQL Injection Vulnerability Analysis
- Esafenet Electronic Document Security Management System CDGAuthoriseTempletService1 SecretLevelId SQL Injection Vulnerability Code Analysis
- Esafenet Electronic Document Security Management System CDGAuthoriseTempletService1 SecretLevelId SQL Injection Vulnerability Code Analysis 2
- Esafenet Electronic Document Security Management System DecryptionApp Deserialization Vulnerability RCE
- Learn Code Audit from seacms12.9
- Code Audit of nbcio-boot from Information Leak to Getshell
- Xinhu OA nickName SQL Injection Vulnerability Reproduction (XVE-2024-19304).html)
- Android Reverse Engineering - Advanced Usage of Frida
- FanRuan FineReport ReportServer SQL Injection Leading to RCE Vulnerability
- Yueku Enterprise Network Disk userlogin.html SQL Injection Vulnerability
- Yibao OA Software Two Places - ExecuteSqlForSingle Injection Analysis and Reproduction
- Smart Campus (Anxiao Yi) Management System ReceiveClassVideo.ashx File Upload Vulnerability管理系统%20ReceiveClassVideo.ashx%20存在文件上传漏洞.html)
- Weaver e-cology testConnByBasePassword JNDI Injection Leading to Remote Code Execution Vulnerability Analysis (XVE-2024-20913).html)
- Weaver Cloud Bridge e-Bridge addResume Arbitrary File Upload Vulnerability Analysis
- Brief Analysis of Tongtianxing CMSV6 Vehicle Positioning Monitoring Platform Remote Code Execution Vulnerability
- Hikvision iSecure Center Comprehensive Security Management Platform Authentication Bypass Analysis
- Hikvision Comprehensive Security Management Platform clusters Page File Upload Vulnerability
- Hikvision Comprehensive Security Management Platform uploadAllPackage Arbitrary File Upload Vulnerability Reproduction Analysis
- Hikvision Comprehensive Security System detection Interface Remote Command Execution
- Shenlan Authentication and Billing System Code Audit (Login Bypass, Frontend/Backend RCE, File Read, Information Leak, XSS, SSRF)
- Yonyou NC complainbilldetail SQL Injection Vulnerability
- Yonyou Zhiyuan OA Backend RCE constDef.do Command Execution Vulnerability Analysis
- Jimu Report AviatorScript Code Injection RCE Analysis
- Zhang Guan Jia Seal Intelligent Management Platform listUploadIntelligent Interface SQL Injection Vulnerability Analysis and Reproduction
- Lanling OA WechatLoginHelper.do SQL Injection Vulnerability Reproduction Analysis
- A Spring Boot Framework Code Audit and Reflection
- An Analysis and Reproduction of Multiple Vulnerabilities in Tongtianxing CMSV6 Vehicle Video Surveillance Platform (getImage, delete.do, disable, merge, upload, SESSION Forgery, StandardLoginAction_getAllUser, Deserialization, xz_center)分析复现.html)
- An Interesting Tongda OA Audit Process
- CVE-2023-46604 ActiveMQ RCE No Outbound Network Exploitation
- CVE-2024-41667 OpenAM FreeMarker Template Injection Analysis
- CVE-2024-42913 RuoYi Management System SQL Injection Blacklist Bypass Vulnerability Analysis
- Craft CMS Remote Code Execution Vulnerability
- Hikvision Comprehensive Security Management Platform isecure center File Read Deep Exploitation
- Can Thymeleaf Template Injection Still Be Exploited?
- ofbiz Permission Bypass Remote Execution Vulnerability (CVE-2024-45195).html)
- thinkphp8 RCE via baseQuery Method
- thinkphp Latest CVE-2024-44902 Deserialization Vulnerability
- Code Audit - Apple CMS8 (maccms8) No Echo SSRF Wonderful Audit Journey (Race Condition File Read + SQL Injection + File Upload Getshell)
- Baolande Middleware Deserialization Chain Zigzag Debugging
- Law Enforcement Video Audio Comprehensive Management Platform Unauthorized RCE Vulnerability Analysis
- Fangzheng Changxiang News Editing System binary.do SQL Injection Vulnerability Analysis and Reproduction
- Brief Analysis of Apache Ofbiz CVE-2024-45195 & CVE-2024-45507
- Lanling EKP V16 Old Version bypass dataxml.jsp Auth
- A Union-based sqlmap Custom Payload
- Bypassing fastjson waf in a Real-World Scenario
- Jinhe OA SignUpload SQL Injection Analysis
- Penetration Testing of Ruoyi System in a Real-World Scenario
- Penetration Testing of a BladeX Site Based on Spring Secondary Development
- Nacos Configuration File Attack and Defense Thought Summary
- Weaver E9 Path browser.jsp Permission Bypass Leading to SQL Injection Vulnerability
- Wanhu ezOFFICE Collaborative Management Platform GeneralWeb XXE to RCE
- Xinzhongxin Campus Card Management System ProductInfoJF SQL Injection Vulnerability
- Meite CRM mcc_login.jsp SQL Injection Vulnerability
- Yonyou NC getOtherData SQL Injection Vulnerability
- Yonyou NC isAgentLimit SQL Injection Vulnerability
- CVE-2024-55215: Jrohy/trojan Unauthenticated Admin Password Modification Vulnerability
- Yonyou NC M0dUlE/redeploy SQL Injection Vulnerability
- Yonyou NC setting/renew SQL Injection Vulnerability
- Yonyou NC portalpage/doNew SQL Injection Vulnerability
- Yonyou NC System Image Management - Image Upload imageupload SQL Injection Vulnerability
- Yonyou NC deleteOftenMenu SQL Injection Vulnerability
- Yonyou NC rmImage/download SQL Injection Vulnerability
- IBOS Enterprise Collaboration Management Software main/api/OrgUser SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/doPageGuiz SQL Injection Vulnerability
- Yonyou NC oauidesigner/getMdPropertyJson SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/doPageGetFormCon SQL Injection Vulnerability
- Zentao Open Source Version 21.4 Latest Version search Module words SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/doPageptpinfo SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/dopageduoproductsinfo SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/dopagefxcount SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/dopagefxszhongx SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/doPagemycoupon SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/doPageindexCop SQL Injection Vulnerability
- Universal Store Mini Program Management System /api/wxapps/_Postrequest File Read Vulnerability
- Universal Store Mini Program Management System /comadmin/Remote/onepic_uploade File Upload Vulnerability
- Lingdang CRM /crm/upload.php File Upload Vulnerability
- Lingdang CRM /crm/uploaddify/uploadify.php File Upload Vulnerability
- Fujian Keli Communication Command Dispatching Management Platform custom/zx/upload.php Arbitrary File Upload Vulnerability
- Fujian Keli Communication Command Dispatching Management Platform api/get_sos/items.php SQL Injection Vulnerability
- NetMizer Log Management System cmd.php Remote Command Execution Vulnerability
- Wanhu ezEIP onlyvalid.aspx SQL Injection Vulnerability
- Maternity Center ERP Management Cloud Platform UploadComponentHandler.ashx Arbitrary File Upload Vulnerability
- Maternity Center ERP Management Cloud Platform ModuleUpHandler.ashx Arbitrary File Upload Vulnerability
- Maternity Center ERP Management Cloud Platform AttachedHandler.ashx Arbitrary File Upload Vulnerability
- Jinhe OA C6 IncentivePlanFulfillAppprove.aspx SQL Injection Vulnerability
- Maternity Center ERP Management Cloud Platform UpLoadHandler.ashx Arbitrary File Upload Vulnerability
- NUUO Camera handle_site_config.php Remote Command Execution Vulnerability
- Maternity Center ERP Management Cloud Platform Page/upload/UploadHandler.ashx Arbitrary File Read Vulnerability
- Wanhu ezEIP productlist.aspx SQL Injection Vulnerability
- Angjie ERP cwsqry.asmx SQL Injection Vulnerability
- Angjie ERP cwsoa.asmx SQL Injection Vulnerability
- Maternity Center ERP Management Cloud Platform Page/ContractManager/ashx/Handler.ashx Arbitrary File Upload Vulnerability
- Angjie ERP cwsapprove.asmx SQL Injection Vulnerability
- Maternity Center ERP Management Cloud Platform Page/MicroMall/ashx/Handler.ashx Arbitrary File Upload Vulnerability
- Maternity Center ERP Management Cloud Platform Page/ICManager/ashx/Handler.ashx Arbitrary File Upload Vulnerability
- Anmei Digital Hotel Broadband Operation System get_user_enrollment.php SQL Injection Vulnerability
- Yonyou NC rmwebImage/download SQL Injection Vulnerability
- Yonyou U8 Cloud MARosterPhotoServlet SQL Injection Vulnerability
- Synway SMG Gateway Management Software 9-12ping.php Remote Code Execution Vulnerability (CVE-2025-1448)
- Shikong Zhiyou Enterprise Process Control System updater.getStudioFile Arbitrary File Read Vulnerability
- Shikong Zhiyou Enterprise Process Control System updater.startUpdateStudio XXE Vulnerability
- Yinda Huizhi Comprehensive Management Platform login.aspx SQL Injection Vulnerability
- Baiyi Cloud Asset Management Operation System feeStandard.Apply.save2.php SQL Injection Vulnerability
- Baiyi Cloud Asset Management Operation System admin.house.collect.php SQL Injection Vulnerability (CVE-2025-1464)
- Weaver e-office sms_page.php SQL Injection Vulnerability
- Weaver e-office flow_xml.php SQL Injection Vulnerability
- Weaver e-office attendance.wsdl.php SQL Injection Vulnerability
- Weaver e-office notify.wsdl.php SQL Injection Vulnerability
- Weaver e-office online_person.wsdl.php SQL Injection Vulnerability
- Weaver e-office validate_sort.php SQL Injection Vulnerability
- Weaver e-office content_-4.php SQL Injection Vulnerability
- Weaver e-office block_content.php SQL Injection Vulnerability
- Weaver e-office word_update.php SQL Injection Vulnerability
- Weaver e-office freerunimgflow.php SQL Injection Vulnerability
- Weaver e-office runimgflow.php SQL Injection Vulnerability
- Anmei Digital Hotel Broadband Operation System list_qry.php SQL Injection Vulnerability
- Anmei Digital Hotel Broadband Operation System get_ip.php SQL Injection Vulnerability
- Yonyou NC/NCC File Server Configuration Management FsConsoleService SQL Injection Vulnerability
- Yonyou NC and NC Cloud System IBapIOService SQL Injection Vulnerability
- Wanhu ezOFFICE selectCommentField.jsp SQL Injection Vulnerability
- Weaver e-office sms.wsdl.php SQL Injection Vulnerability
- Weaver e-office user.wsdl.php SQL Injection Vulnerability
- Weaver e-office mobile.wsdl.php SQL Injection Vulnerability
- Weaver e-office list.wsdl.php SQL Injection Vulnerability
- Weaver e-office dept.wsdl.php SQL Injection Vulnerability
- Weaver e-office login.wsdl.php SQL Injection Vulnerability
- Weaver e-office email.wsdl.php SQL Injection Vulnerability
- DedeCMS V5.7.117 (Latest Version) RCE
- Yonyou NC LfwFileUploadServlet Arbitrary File Upload Vulnerability
- Yonyou NC importTemplate XML Entity Injection (XXE) Vulnerability
- EKing Management Easy FileDownload.ihtm Arbitrary File Read Vulnerability
- Yonyou U8 Cloud console.loadRes.d Arbitrary File Read Vulnerability
- Ruijie-EWEB timeout.php Command Injection Vulnerability
- Yonyou NC pkevalset SQL Injection Vulnerability
- Ruijie-EWEB timeout.php File Read Vulnerability
- Yonyou NC portalpage/importPml SQL Injection Vulnerability
- Ruijie-EWEB timeout.php File Upload Vulnerability
- Yonyou NC complainjudge SQL Injection Vulnerability
- FastJson Malformed Unicode Bypass WAF, Traffic Detection
- Ruijie-EWEB patch.php Command Injection Vulnerability
- Hanta Technology Internet Behavior Management System tracert.php Command Injection Vulnerability
- Hanta Technology Internet Behavior Management System ping.php Command Injection Vulnerability
- Bosi Foreign Trade Management System DCreceiveBox.jsp Multiple SQL Injection Vulnerabilities
- Wanhu OA ajax_checkUserNum.jsp SQL Injection Vulnerability
- Wanhu OA selectAmountField.jsp SQL Injection Vulnerability
- Wanhu OA DocumentHistory.jsp SQL Injection Vulnerability
- Yonyou U8 Cloud QuerySoapServlet SQL Injection Vulnerability
- Wanhu OA getNextAutoCode.jsp SQL Injection Vulnerability
- Lanling Smart Collaboration Platform fl_define_edit.aspx SQL Injection Vulnerability
- Weaver OA ReceiveTodoRequestByXml XML Entity Injection Vulnerability
- Wanhu OA public/iSignatureHTML.jsp/Service.jsp SQL Injection Vulnerability
- Wanhu OA selectPopTable.jsp SQL Injection Vulnerability
- Wanhu OA govdocumentmanager_sendfile_gd.jsp SQL Injection Vulnerability
- Lanling EKP sys/webservice/elecPsealUseWebService File Read Vulnerability
- Baizhuo Smart Management Platform autheditpwd.php SQL Injection Vulnerability
- Baizhuo Smart Management Platform licence.php File Upload Vulnerability
- Baizhuo Smart Management Platform uploadfile.php File Upload Vulnerability
- Baizhuo Smart Management Platform useratte/layer_swich_conf.php Arbitrary File Deletion Vulnerability
- Ruijie-EWEB flwo.control.php Command Injection Vulnerability
- Unibox Router /billing/logout.php Command Execution Vulnerability
- Shikong Zhiyou Enterprise Process Control System indexService.notice SQL Injection Vulnerability
- Ruijie-EWEB check.php File Read Vulnerability
- JeeWMS cgAutoListController.do SQL Injection Vulnerability
- JeeWMS druid Unauthorized Access Vulnerability
- Yonyou NC cpRadarImage/download SQL Injection Vulnerability
- NetMizer Log Management System troubleip.php Command Execution Vulnerability
- NetMizer Log Management System weixin.php Command Execution Vulnerability
- NetMizer Log Management System weibo.php Command Execution Vulnerability
- NetMizer Log Management System search.php Command Execution Vulnerability
- NetMizer Log Management System qq.php Command Execution Vulnerability
- NetMizer Log Management System mail.php Command Execution Vulnerability
- NetMizer Log Management System dologin.php SQL Injection Vulnerability
- NetMizer Log Management System connect.php Command Execution Vulnerability
- NetMizer Log Management System hostdelay.php Command Execution Vulnerability
- NetMizer Log Management System getlogin.php SQL Injection Vulnerability
- NetMizer Log Management System dirlist.php Directory Traversal Vulnerability (CNVD-2017-37549)
- NetMizer Log Management System position.php Command Execution Vulnerability
- Yonyou NC IServiceEntryPoint XXE Vulnerability
- Yonyou NC listUserSharingEvents SQL Injection Vulnerability
- Yonyou NC viewPsnCard/download SQL Injection Vulnerability
- JeeWMS iconController.do Arbitrary File Upload Vulnerability
- JeeWMS commonController.do Arbitrary File Upload Vulnerability (CVE-2024-57761)
- Synway SMG Gateway Management Software 9-13pcap.php Command Injection Vulnerability
- Synway SMG Gateway Management Software 9-2radius.php Command Injection Vulnerability
- Sanhui SMG Gateway Management Software down.php Arbitrary File Read Vulnerability
- Hanta Technology Internet Behavior Management System cappkt.php Command Injection Vulnerability
- Salia PLCC check.php Unauthorized Access Leading to Information Disclosure
- Yinda Huizhi Comprehensive Management Platform PPlugList.ashx SQL Injection Vulnerability
- Wanhu ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL Injection Vulnerability
- Yinda Huizhi Comprehensive Management Platform ADTag_Info.ashx SQL Injection Vulnerability
- JeeWMS AuthInterceptor Permission Bypass Vulnerability
- Yinda Huizhi Comprehensive Management Platform SysMenuScheme.ashx SQL Injection Vulnerability
- Salia PLCC nwcheckexec.php Command Execution Vulnerability
- Yonyou U8 CRM biztype.php SQL Injection Vulnerability
- Lingdang CRM Playforrecord.php File Read Vulnerability
- Salia PLCC check_req.php Command Execution Vulnerability
- JeeWMS cgformTemplateController.do File Read Vulnerability
- Yonyou NC and NC Cloud System getBapTableDatas SQL Injection Vulnerability
- Optilink Management System gene.php Command Execution Vulnerability
- NetMizer Log Management System terminals.php SQL Injection Vulnerability
- Yonyou U8 CRM checkselectworksheet.php SQL Injection Vulnerability
- Weaver e-office SignatureDel.php SQL Injection Vulnerability
- Weaver e-office upload.php File Upload Vulnerability
- Weaver e-office OfficeServer.php File Upload Vulnerability
- Weaver e-office OfficeServer.php File Read Vulnerability
- Weaver e-office OfficeServer2.php File Read Vulnerability
- Ruijie-EWEB common.php File Read Vulnerability
- Ruijie-EWEB dns.php File Read Vulnerability
- Weaver e-office OfficeServer2.php File Upload Vulnerability
- Yonyou U8 CRM ajaxgetborrowdata.php SQL Injection Vulnerability
- Ruijie-EWEB download.php File Read Vulnerability
- Yonyou U8 CRM objectview.php SQL Injection Vulnerability
- Ruijie-EWEB dhcp.php File Read Vulnerability
- Ruijie-EWEB ipam.php File Read Vulnerability
- Unibox Router authentication/test_userlogin.php Command Execution Vulnerability
- Ruijie-EWEB cli.php Command Injection Vulnerability
- Unibox Router network/checkstatus_ping.php Command Execution Vulnerability
- MetaCRM Customer Relationship Management System sendfile.jsp Arbitrary File Upload Vulnerability
- Beijing Shikong Zhiyou ERP System updater.uploadStudioFile File Upload Vulnerability
- Weaver E-cology js/hrm/getdata.jsp SQL Injection Vulnerability
- Hanwang eFacePass Smart Park Management Platform Authorization Activation Bypass + Enable JVM Remote Debugging
- Yonyou NC uncancelEvent SQL Injection Vulnerability
- Yonyou NC ActivityNotice/export SQL Injection Vulnerability
- Tongda OA OfficeTask udp 2397 Port SQL Injection Vulnerability Detection Tool
- Tongda OA OfficeTask udp 2397 Port Remote Code Execution RCE Detection Tool
- Hongjing Human Resources Management System HrpService Multiple XXE Vulnerabilities
- Unibox postprosa.php SQL Injection Vulnerability
- Yonyou NC deleteEvent SQL Injection Vulnerability
- Hongjing Human Resources Management System HrpService SQL Injection Vulnerability
- Hongjing Human Resources Management System DigestDownLoad SQL Injection Vulnerability
- Hongjing Human Resources Management System HrChangeInfoService SQL Injection Vulnerability + XXE Vulnerability
- Yonyou NC changeEvent SQL Injection Vulnerability
- Yonyou NC /mp/view SQL Injection Vulnerability
- Shikong Zhiyou Enterprise Process Control System getRemoteAddr Design Flaw Vulnerability
- Yonyou NC oacofile/down File Read/Delete Vulnerability
- Yonyou NC qrySubPurchaseOrgByParentPk SQL Injection Vulnerability
- Meite CRM ws XXE Vulnerability
- Meite CRM fileUpAndDown Deserialization Code Execution Vulnerability
- Meite CRM getFile Arbitrary File Read and Deserialization Vulnerability
- Baiyi Cloud Asset Management Operation System make SQL Injection Vulnerability
- Yonyou NC loadDoc.ajax File Read Vulnerability
- Western Digital My Cloud NAS multi_uploadify.php File Upload Vulnerability
- Western Digital My Cloud NAS chk_vv_sharename.php Command Execution Vulnerability
- Western Digital My Cloud NAS login_checker.php Permission Bypass Vulnerability
- Yinda Huizhi Comprehensive Management Platform ADTag.ashx SQL Injection Vulnerability
- Salia PLCC firmware.php Arbitrary File Upload Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryVehicleAccessRecord.do SQL Injection Vulnerability
- Esafenet Electronic Document Security Management System AppExamList.jsp SQL Injection Vulnerability
- Wanhu OA jigeObj_iframe.jsp SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform quertDgmOpenRecord.do SQL Injection Vulnerability
- Wanhu OA name_judge.jsp SQL Injection Vulnerability
- Jinhe OA DealXml.aspx XXE Vulnerability
- Jinhe OA CheckPwd.aspx XXE Vulnerability
- Hanwang eFacePass Comprehensive Management Platform searchSystemRoles.do SQL Injection Vulnerability
- Jinhe OA FileUpload.aspx File Read Vulnerability
- Dongsheng Logistics Software DsWebService.asmx Multiple SQL Injection Vulnerabilities
- Dongsheng Logistics Software UpdateCustomMainfast XXE Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryUserLogs.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryDoorInfoList.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryOpenDoorLogs.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryFeedBackRecords.do SQL Injection Vulnerability
- Dongsheng Logistics Software Chfee_hexiao/GetDataList SQL Injection Vulnerability
- Esafenet Electronic Document Security Management System WorkFlowAction SQL Injection Vulnerability
- Jinhe OA DailyTaskListInfo.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software WorkFlowGridSource.aspx SQL Injection Vulnerability
- Puhua Powerpms FileBrowserPdf.ashx SQL Injection Vulnerability
- Puhua Powerpms GetFilesData SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform PermissionPersonController Multiple SQL Injection Vulnerabilities
- Hanwang eFacePass Comprehensive Management Platform resourceUploadFile.do Arbitrary File Upload Vulnerability
- Meite CRM headimgsave SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform mobiMeetingApp/uploadMeetingFile.do Arbitrary File Upload Vulnerability
- Meite CRM mobileupload.jsp Arbitrary File Upload Vulnerability
- Hanwang eFacePass Comprehensive Management Platform exportResourceByFilePath.do Arbitrary File Read Vulnerability
- MetaCRM Customer Relationship Management System download-new.jsp Arbitrary File Read Vulnerability
- Hanwang eFacePass Comprehensive Management Platform getValidPersonForFirst.do SQL Injection Vulnerability
- Fumeng Cloud CRM GetPic.aspx SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform getFirstEmp.do SQL Injection Vulnerability
- Dongsheng Logistics Software GetDataListCA SQL Injection Vulnerability
- Fumeng Cloud CRM GetImage.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software WmsZXFeeGridSource.aspx SQL Injection Vulnerability
- Jinhe OA ModuleTaskView.aspx SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform getDoors.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform meetingPersonal/uploadMeetingFile.do Arbitrary File Upload Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryAntisubmarineList.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform Meeting Multiple SQL Injection Vulnerabilities
- Jinhe OA IsHaveFTask.aspx XXE + SQL Injection Vulnerability
- Jinhe OA IsHaveFTask.aspx XXE + SQL Injection Vulnerability (duplicate)
- Fumeng Cloud CRM GetIcon.aspx SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform uploadMapFile.do Arbitrary File Upload Vulnerability
- Hanwang eFacePass Comprehensive Management Platform updateVisitorMapConfig.do Arbitrary File Upload Vulnerability
- Jinhe OA TaskReportConfirm.aspx SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform getValidEmpForGroup.do SQL Injection Vulnerability
- Jinhe OA AddTask.aspx XXE + SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryMeetingFile.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform wxLogin.do Unauthorized Access Leading to Sensitive Information Leak
- Hanwang eFacePass Comprehensive Management Platform addVisitDeviceAppointmentInfoTest.do fastjson Deserialization RCE Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryAlarmEvent.do SQL Injection Vulnerability
- Jinhe OA TaskTreeJSON.aspx SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryBlackList.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform fileDownload.do Arbitrary File Read Vulnerability
- Hanwang eFacePass Comprehensive Management Platform imgDownload.do Arbitrary File Read Vulnerability
- Hanwang eFacePass Comprehensive Management Platform getGroupEmployee.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform queryManyPeopleGroupList.do SQL Injection Vulnerability
- Hanwang eFacePass Comprehensive Management Platform Permission Bypass Vulnerability
- MetaCRM Customer Relationship Management System sendsms.jsp Arbitrary File Upload Vulnerability
- CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool (Scan + Exploit)
- Tiandi Weiye Easy7 exportGisObj File Read Vulnerability
- Sangfor Operational Security Management System add_DNS Remote Command Execution Vulnerability
- Tiandi Weiye Easy7 getCurrentUserInquestRooms_ZHGL SQL Injection Vulnerability
- Yonyou U8Cloud /u8cloud/openapi/ce.paper.query SQL Injection Vulnerability
- Feiniu System (fnOS) app-center-static Directory Traversal Leading to Arbitrary File Read + Command Execution Vulnerability
- Jinhe OA EpassInitTakenSnCheck.aspx, EpassInitTakenSnExec.aspx, EpassInitTakenSnInva.aspx, EpassValidate.aspx XXE + SQL Injection Vulnerabilities
- Dongsheng Logistics Software /MvcShipping/MsBaseInfo/GetProParentModuTreeList SQL Injection Vulnerability
- Jinhe OA JHSoft.Web.H5SiteControl/xmlhttp.aspx XXE Vulnerability
- Dongsheng Logistics Software CompanysAccountGridSource.aspx SQL Injection Vulnerability
- Jinhe OA Jhsoft.Web.dossier/XMLHttp.aspx XXE Vulnerability
- Jinhe OA JHSoft.Web.Departments/XmlHttp.aspx XXE + SQL Injection Vulnerability
- Fumeng Cloud CRM lkpClientsCust.aspx SQL Injection Vulnerability
- Jinhe OA JHSoft.Web.CrmSystemSet/XMLHttp.aspx XXE Vulnerability
- Fumeng Cloud CRM AjaxWriteMail.ashx SQL Injection Vulnerability
- Jinhe OA ExamineNodCommisionDefault.aspx XXE Vulnerability
- BigAnt Instant Messaging System upload_file Arbitrary File Upload Vulnerability
- Tiandi Weiye Easy7 getActiveEffectTemp SQL Injection Vulnerability
- Tiandi Weiye Easy7 downloadWordRecord File Read Vulnerability
- Tiandi Weiye Easy7 queryPassword Information Disclosure Vulnerability
- Tiandi Weiye Easy7 queryUserbyDesc SQL Injection Vulnerability
- Tiandi Weiye Easy7 downloadNote File Read Vulnerability
- Tiandi Weiye Easy7 uploadCheckImg File Upload Vulnerability
- Tiandi Weiye Easy7 uploadMapServerBgImage File Upload Vulnerability
- Tiandi Weiye Easy7 queryDataByTypeEx SQL Injection Vulnerability
- Tiandi Weiye Easy7 downloadResource File Read Vulnerability
- Dongsheng Logistics Software OpSailingDateListHtmlGridSource.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software OpSailingDateInfoGridSource.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software HtmlSearchServiceLCL.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software CrmProxyMailListHtmlGridSource.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software CrmProxyMailListGridSource.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software ModuleGridSource.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software AttributeGridSource.aspx SQL Injection Vulnerability
- Dongsheng Logistics Software StorageController Multiple SQL Injection Vulnerabilities
- Dongsheng Logistics Software MsOpSeaeController Multiple SQL Injection Vulnerabilities
- Dongsheng Logistics Software IPLimitController SQL Injection Vulnerability
- BigAnt Instant Messaging System DispersedOrgController Arbitrary File Upload Vulnerability
- BigAnt Instant Messaging System plus_get_favicon Arbitrary File Upload Vulnerability
- Dongsheng Logistics Software MsAnnounceController SQL Injection Vulnerability
- BigAnt Instant Messaging System PublicController Arbitrary File Read Vulnerability
- Dongsheng Logistics Software MsChDuiController Multiple SQL Injection Vulnerabilities
- Jiujiayi Management System picHY.ashx SQL Injection Vulnerability
- BigAnt Instant Messaging System Installer Second-Order Injection Leading to Remote Code Execution Vulnerability
- Qinglong Panel Latest Version v2.20.1 Authentication Bypass Leading to RCE | Qinglong Panel Authentication Bypass Leading to Unauthorized Remote Code Execution (RCE) Vulnerability Analysis and Reproduction.md面板权限绕过致未授权远程代码执行(RCE)漏洞分析复现.md)
- BigAnt Instant Messaging System moveDept SQL Injection Vulnerability
- Jiujiayi Management System Ajax_XT.ashx SQL Injection Vulnerability
- Jiujiayi Management System PrivilegedCodeDestroy.asmx SQL Injection Vulnerability
- BigAnt Instant Messaging System updateLoginName SQL Injection Vulnerability
- Sangfor Operational Security Management System change_net Remote Command Execution Vulnerability
- Sangfor Operational Security Management System del_net Remote Command Execution Vulnerability
- Sangfor Operational Security Management System del_route Remote Command Execution Vulnerability
- Sangfor Operational Security Management System getLdap Remote Command Execution Vulnerability
- Sangfor Operational Security Management System save_SNMP Remote Command Execution Vulnerability
- Sangfor Operational Security Management System csspost/update Remote Command Execution Vulnerability
- Sangfor Operational Security Management System upload_file Remote Command Execution Vulnerability
- Sangfor Operational Security Management System del_patch Remote Command Execution Vulnerability
- Sangfor Operational Security Management System install_patch Remote Command Execution Vulnerability
- Sangfor Operational Security Management System remote_get_clip_img Remote Command Execution Vulnerability
- Sangfor Operational Security Management System uninstall_patch Remote Command Execution Vulnerability
- Sangfor Operational Security Management System get_clip_img Remote Command Execution Vulnerability
- Sangfor Operational Security Management System down_load Remote Command Execution Vulnerability
- Sangfor Operational Security Management System port_validate Remote Command Execution Vulnerability
- Sangfor Operational Security Management System save_strategy Remote Command Execution Vulnerability
- Sangfor Operational Security Management System generate_certificate Remote Command Execution Vulnerability
- Sangfor Operational Security Management System update_date Remote Command Execution Vulnerability
- Sangfor Operational Security Management System upload_CN Remote Command Execution Vulnerability
- Shenkete LEAN MES System ChooseLineAndRes.ashx SQL Injection Vulnerability
- Shenkete LEAN MES System /Handler/SMTLoadingMaterial.ashx SQL Injection Vulnerability
- Shenkete LEAN MES System EquipmentTree.ashx SQL Injection Vulnerability
- Shenkete LEAN MES System UploadPortraits.ashx File Upload Vulnerability
- Shenkete LEAN MES System /Handler/FileSync.ashx Arbitrary File Read/Upload/Delete/SSRF and Other Multiple Vulnerabilities
- Shenkete LEAN MES System DownLoad.aspx Arbitrary File Read Vulnerability
- Shenkete LEAN MES System /Handler/MobileAppLogin.ashx SQL Injection Vulnerability
- Shenkete LEAN MES System PrintUpdate.ashx Arbitrary File Read/Upload/Delete Vulnerability
- Shenkete LEAN MES System TestManagePlatform.ashx SQL Injection Vulnerability
- Shenkete LEAN MES System UploadHander.ashx File Upload Vulnerability
- Shenkete LEAN MES System CreateMenus.aspx Arbitrary File Upload Vulnerability
- Shenkete LEAN MES System AutoComplete.ashx SQL Injection Vulnerability
- Shenkete LEAN MES System ChooseImage.aspx Arbitrary File Upload/Delete Vulnerability
- Shenkete LEAN MES System SetDataSource.aspx SQL Injection Vulnerability
- CLIProxyAPI /v1internal:method Unauthorized Access Vulnerability
- shannon: Autonomous AI Penetration Testing Tool for Web Applications and APIs, Supporting Code-Aware Dynamic Vulnerability Discovery and Automated PoC Verification
- Fumeng Cloud CRM AjaxTrackInfo.ashx SQL Injection Vulnerability
- Fumeng Cloud CRM DingHandler.ashx SQL Injection Vulnerability
- Fumeng Cloud CRM PriceList.ashx SQL Injection Vulnerability
- Fumeng Cloud CRM WorkFlowHandler.ashx SQL Injection Vulnerability
- Fumeng Cloud CRM AddInquiry.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM OrderLook.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM FormDefault.aspx, FormDefaultCommon.aspx Multiple SQL Injection Vulnerabilities
- Tiandi Weiye Easy7 queryRoomName SQL Injection Vulnerability
- Tiandi Weiye Easy7 queryRoomConfigs SQL Injection Vulnerability
- Tiandi Weiye Easy7 UploadOwnerImage.jsp File Upload Vulnerability
- mdserver-web (Kuafu Panel) <= 0.18.4 Multiple Unauthorized Access + Information Leak + RCE Vulnerability Analysis
- Tiandi Weiye Easy7 GetOtherDomainServer.jsp SSRF Vulnerability
- Tiandi Weiye Easy7 getInquestIdByRoomId SQL Injection Vulnerability
- Tiandi Weiye Easy7 getInquestRoomChannelInfo SQL Injection Vulnerability
- V2Board Information Leak Vulnerability Leading to Privilege Bypass and Account Takeover (CVE-2026-39912) Analysis and Reproduction
- Tiandi Weiye Easy7 isHashCameraAuth SQL Injection Vulnerability
- Tiandi Weiye Easy7 getConfigInfoList SQL Injection Vulnerability
- Tiandi Weiye Easy7 capture Command Execution Vulnerability
- Tiandi Weiye Easy7 uploadLedImage File Upload Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/file/delete File Delete Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/file/downloadFile File Read Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/file/uploadIdsHttpFile SSRF + File Write Vulnerability
- Fumeng Cloud CRM CustomizeReportSelectMould.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM ClientNameCard.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM BusinessPrice.aspx SQL Injection Vulnerability
- cPanel WHM Permission Bypass Leading to RCE [CVE-2026-41940] | CVE-2026-41940 Vulnerability Analysis
- Fumeng Cloud CRM BusinessPriceListList.aspx SQL Injection Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/file/uploadFile File Upload Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/file/deleteFile File Delete Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/file/download File Read Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/user/getAuthorityByUserId SQL Injection Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/user/IsPermissible SQL Injection Vulnerability
- Tiandi Weiye Easy7 /Easy7/rest/user/getAuthorityByUserId SQL Injection Vulnerability (duplicate)
- Fumeng Cloud CRM BusinessPriceOk.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM BusinessPriceReport.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM BusiPriceOkPrint.aspx SQL Injection Vulnerability
- Yonyou NC System IMsgCenterWebService SQL Injection Vulnerability
- Fumeng Cloud CRM LoadMailAttachFile.aspx Arbitrary File Read/Move
- Fumeng Cloud CRM Inquiry.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM Price_detail.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM ProductGrid.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM AjaxProductList.ashx SQL Injection Vulnerability
- Fumeng Cloud CRM ProductList.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM Product_field.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM ProductDetail.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM ProductSelect.aspx SQL Injection Vulnerability
- CVE-2026-8054 High-Risk Pre-auth SQL Injection Vulnerability Analysis and Reproduction | CVE-2026-8054
- Fumeng Cloud CRM ProviderList.aspx SQL Injection Vulnerability
- Fumeng Cloud CRM ProductDetail.aspx SQL Injection Vulnerability
- BigAnt Instant Messaging System user_expire_post SQL Injection Vulnerability
- BigAnt Instant Messaging System uploadMultipleFile Arbitrary File Upload Vulnerability
- BigAnt Instant Messaging System Pan/Upload/upload File Upload Vulnerability
- BigAnt Instant Messaging System getFileTrueAddress SQL Injection Vulnerability
- BigAnt Instant Messaging System downloadSharedFile Arbitrary File Read Vulnerability
- BigAnt Instant Messaging System clearUserDevice SQL Injection Vulnerability