Skip to content
KitploitKITPLOIT
उपकरणब्लॉग
जमा करें
उपकरणब्लॉग
जमा करें

हैकिंग, पेनटेस्ट और साइबर सुरक्षा उपकरण आपके सुरक्षा शस्त्रागार के लिए!

Kitploit हैकिंग, साइबर सुरक्षा और पेंटेस्टिंग टूल्स की एक निर्देशिका है। कमजोरियों को खोजने, सिस्टम का विश्लेषण करने, परीक्षण को स्वचालित करने और अपनी सुरक्षा को मजबूत करने के लिए नवीनतम प्रोजेक्ट अपडेट खोजें।

··फ़ीड·संपर्क·गोपनीयता·© 2026 Kitploit

टूल निर्देशिका

श्रेणियाँ

सभी श्रेणियाँ देखें
Loading categories
Penetration_Testing_POC — 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms | Kitploit
उपकरण/GitHubGitHub/mr-xn/penetration_testing_poc
Privilege EscalationIoT SecurityVulnerability AnalysisExploitationWeb Application ExploitationFuzzingPenetration TestingLearning & EducationCurated Resources

सबसे लोकप्रिय

सभी देखें →

हमारे समुदाय द्वारा सबसे अधिक उपयोग किए जाने वाले उपकरण खोजें।

सभी उपकरण खोजें

हमारे उपकरणों का संग्रह ब्राउज़ करें

सभी उपकरण देखें →
साझा करें
GitHubmr-xn/penetration_testing_poc

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

रिपॉजिटरी देखेंवेबसाइट
7.4k2.0k656घं 10मि पहलेKitploit द्वारा समीक्षित
अनुरोधित भाषा में सामग्री उपलब्ध नहीं है। अंग्रेज़ी संस्करण दिखाया जा रहा है।

Penetration_Testing_POC

Collect and share POCs, scripts, tools, articles, and other techniques used in penetration testing, as a note. Contributions welcome.

Please note that all tools may have backdoors or other anomalous behavior; it is recommended to operate in a virtual environment.

  • Penetration_Testing_POC
  • Please make good use of search [Ctrl+F]
  • IOT Device&Mobile Phone
  • Web APP
  • Privilege Escalation Assistance Related
  • PC
  • tools - Collection of Small Tools
  • Articles/Books/Tutorials Related
  • Description

Please make good use of search [Ctrl+F]

IOT Device&Mobile Phone

  • Tianyi Skyworth awifi router has multiple unauthorized access vulnerabilities
  • Huawei WS331a product management page has CSRF vulnerability
  • CVE-2019-16313 Fengwang Interconnect Enterprise Router v4.31 Password Disclosure Vulnerability
  • D-Link Router RCE Vulnerability
  • CVE-2019-13051 - Pi-Hole Router Ad-blocking Software Command Injection & Privilege Escalation
  • D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621)
  • Huawei HG255 Directory Traversal|Local backup file
  • D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)CVE-2019-20215(Metasploit)%20CVE-2019-20215.rb)
  • From Interfaces.d to RCE: Vulnerability Discovery in Mozilla WebThings IoT Gateway
  • Xiaomi Series Router Remote Command Execution Vulnerabilities (CVE-2019-18370, CVE-2019-18371)
  • Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload - Replace firmware without authentication)

Web APP- Zhiyuan OA A8 getShell 0day

  • Couch through 2.0 Path Disclosure Vulnerability
  • Cobub Razor 0.7.2 Cross-Site Request Forgery Vulnerability
  • joyplus-cms 1.6.0 CSRF Vulnerability Leading to Admin Account Addition
  • MiniCMS 1.10 CSRF Vulnerability Leading to Admin Account Addition
  • Z-Blog 1.5.1.1740 XSS Vulnerability
  • YzmCMS 3.6 XSS Vulnerability
  • Cobub Razor 0.7.2 Privilege Escalation to Add Admin Account
  • Cobub Razor 0.8.0 SQL Injection Vulnerability
  • Cobub Razor 0.8.0 Physical Path Disclosure Vulnerability
  • Wuzhi CMS 4.1.0 CSRF Vulnerability Leading to Admin Account Addition
  • DomainMod XSS Collection

Read more

टूल डाउनलोड करें
  • cve-2020-8634&cve-2020-8635|Wing FTP Server 6.2.3 Privilege Escalation Vulnerability Discovery Analysis and Reproduce Process|Wing FTP Server 6.2.5 Privilege Escalation
  • CVE-2020-9374-TP LINK TL-WR849N - RCE
  • CVE-2020-12753 - LG Smartphone Arbitrary Code Execution Vulnerability
  • CVE-2020-12695 - UPnP Security Vulnerability
  • 79 Netgear Routers Hit by Remote Takeover 0day
  • dlink-dir610-exploits-Exploits for CVE-2020-9376 and CVE-2020-9377
  • wacker: A set of scripts to assist in performing online dictionary attacks against WPA3 access points
  • CVE-2020-24581 D-Link DSL-2888A Remote Command Execution Vulnerability Analysis-Original URL
  • CNVD-2021-14536 Ruijie RG-UAC Unified Internet Behavior Management Audit System Account Password Information Disclosure Vulnerability
  • CNVD-2021-14544: Hikvision Stream Media Management Server Arbitrary File Read
  • CNVD-2020-25078: D-link Sensitive Information Leakage, can directly obtain account passwords to view monitoring
  • ios-gamed-0day
  • ios-nehelper-wifi-info-0day
  • ios-nehelper-enum-apps-0day
  • iOS 15.0.1 RCE PoC
  • DarkSword-RCE: Apple iOS Remote Code Execution Exploit|darksword-kexploit: Apple iOS Kernel Exploit|DarkSword: Apple iOS Exploit
  • CVE-2021-36260: Hikvision Product Command Injection Vulnerability
  • CVE-2021-33044, CVE-2021-33045 Dahua Camera POC|Related Analysis|Login bypass Chrome extension
  • CVE-2021-36260: Hikvision Command Injection Vulnerability|Another CVE-2021-36260 exploit script
  • CVE-2021-41653: TP-Link TL-WR840N V5(EU) - RCE%20-%20RCE%20-%20CVE-2021-41653.pdf)
  • DirtyPipe-Android: Dirty Pipe root exploit for Android
  • CVE-2022-30075: Tp-Link Archer AX50 Authenticated RCE
  • NotQuite0day: D-Link 1960 Related Vulnerabilities
  • HuaYuReportRCE: Huayu Digital Report Component GetShell
  • IOT_Vul: Collection of IOT Related Vulnerabilities
  • CameraHack: Batch scan and exploit common vulnerabilities in Hikvision, Dahua, etc. cameras
  • CVE-2022-32832: Apple macOS APFS Kernel Arbitrary Code Execution Vulnerability
  • HookWechatRecall: Intercept WeChat Recall Demo via Frida
  • IOT_vuln: IOT Related Vulnerability Repository
  • hikvision_CVE-2017-7921_auth_bypass_config_decryptor: Decrypt Hikvision configuration files affected by CVE-2017-7921
  • CVE-2022-20866: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Check
  • WLAN-AP-WEA453e RCE: Samsung Router Remote Command Execution Vulnerability
  • Buffer overflow in Xiongmai DVRs|Backup
  • CVE-2023-27350: PaperCut NG Authentication Bypass leading to RCE
  • ivms-8700-0day-poc: Hikvision iVMS-8700 Integrated Security Management Platform Arbitrary File Upload Vulnerability
  • badspin: Android Kernel Use-After-Free Vulnerability
  • HikvisionIVMSGetShell: Hikvision IVMS Integrated Security Management Platform Software GetShell
  • iot: Exploitation of DIR-816 823g series routers
  • VulIoT: DIR-816 823g series router vulnerability exploitation
  • NsePocsuite-lua: Network camera vulnerability detection script. Nmap (Nse Nmap script engine)
  • Device Vulnerability Discovery Ideas
  • Vivotek CC8160 Firmware Stack Overflow Vulnerability Reproduction Analysis
  • Xiaomi AX9000 Router CVE-2023-26315 Vulnerability Discovery
  • IOT-CVE-2018-17066 (D-Link Command Injection Vulnerability).html)
  • Extraction & Brute-force Tool for OpenSSL Encryption of IoT Firmware
  • Xiaomi Router Firmware Emulation Scheme
  • QEMU Setup ARM64 Environment _ ZIKH26's Blog
  • SSD Advisory - NVMS9000 Information Disclosure - SSD Secure Disclosure
  • DIR-820 CVE-2022-26258 Vulnerability Reproduction
  • From jhttpd Analysis to System Command Injection (CVE-2021-46227-D-Link Di-7200G Command Injection Vulnerability).html)
  • 2024 RWCTF Synology BC500 Camera RCE - Unauthorized_Stack Overflow
  • Router dd manual firmware extraction --- Fast PoEAC router all-in-one FR100P-AC firmware extraction
  • NX_Firmware: Nintendo Switch firmware database for all versions
  • vphone-aio: One-click run iOS virtual phone (vphone) script with jailbreak and full bootstrap installed
  • AssppJailbroken: A tool for decrypting the latest IPA files downloaded from the App Store, supporting running on jailbroken iOS devices and iPhone simulators
  • FirmWire: Full-system dynamic analysis platform supporting Samsung Shannon and MediaTek baseband firmware, can be used for fuzzing, vulnerability root cause analysis and debugging
  • Podroid: Run Linux containers on Android phones without root, start Alpine Linux VM based on QEMU and provide complete Podman container runtime
  • PrismSpace: App dual-instance manager based on Android managed profile
  • Tsec-Salon: Tencent Security Salon past event materials|BLACKHAT_Asia2026: Black Hat Asia 2026 topic materials summary|Java Ghost Bits - Black Hat Asia 2026 Presentation PDF (Ghost Bits: High-order truncation)|GBitsTools: Ghost Bits attack tool (Python GUI/CLI)|GbitsGen: Ghost Bits character generation tool|ghost-bits-lab: Ghost Bits interactive security lab target (Java)
  • CVE-2026-34908-check: UniFi OS Server Authentication Bypass and Unauthenticated Remote Code Execution (RCE) Detection Tool | Related Technical Analysis: Popping Root on UniFi OS Server
  • GreenCMS v2.3.0603 CSRF Vulnerability Leading to WebShell Acquisition & Admin Account Addition
  • yii2-statemachine v2.x.x XSS Vulnerability
  • maccms_v10 CSRF Vulnerability Leading to Arbitrary Account Addition
  • LFCMS 3.7.0 CSRF Vulnerability Leading to Addition of Arbitrary User or Admin Accounts
  • Finecms_v5.4 CSRF Vulnerability Leading to Admin Password Modification
  • Amazon Kindle Fire HD (3rd Generation) Kernel Driver Denial of Service Vulnerability内核驱动拒绝服务漏洞.md)
  • Metinfo-6.1.2 XSS & SQL Injection Vulnerabilities
  • Hucart cms v5.7.4 CSRF Vulnerability for Arbitrary Admin Account Addition
  • indexhibit cms v2.1.5 Direct PHP File Editing Getshell
  • S-CMS Enterprise Website Building System PHP v3.0 Backend CSRF Leading to Admin Privilege Account Addition
  • S-CMS PHP v3.0 SQL Injection Vulnerability
  • MetInfoCMS 5.X GETSHELL Vulnerability Collection
  • MetInfo7.5.0 Code Audit (Backend SQL Injection + md5 Weak Type Comparison).pdf.pdf)
  • discuz ml RCE Vulnerability Detection Tool
  • thinkphp5 Framework Flaw Leading to Remote Code Execution
  • FineCMS_v5.0.8 Two Getshells
  • Struts2_045 Vulnerability Batch Detection|Search Engine Collection Scan
  • thinkphp5 Command Execution
  • typecho Deserialization Vulnerability
  • CVE-2019-10173 Xstream 1.4.10 Remote Code Execution
  • IIS/CVE-2017-7269-Echo-PoC
  • CVE-2019-15107 Webmin RCE
  • thinkphp5 RCE Vulnerability Detection Tool
  • thinkphp5_RCE Collection
  • thinkphp3.X-thinkphp5.x
  • ThinkPHP Framework Historical Vulnerability Analysis Collection
  • CVE-2019-11510
  • Redis(<=5.0.5) RCE
  • Redis 4.x/5.x RCE (Master-Slave Replication Leading to RCE)
  • Generate Redis Malicious Module .so File for Master-Slave Replication RCE to Achieve Command Execution | Related Article
  • RedisWriteFile - Write Lossless Files via Redis Master-Slave, Used for Writing Lossless EXE, DLL, LNK on Windows and OS Binary on Linux
  • WeblogicScanLot Series, Weblogic Vulnerability Batch Detection Tool
  • TongWeb EJB Exploitation and Plugin Tool | TongwebPlugin
  • jboss_CVE-2017-12149
  • WordPress Denial of Service (DoS) - CVE-2018-6389
  • Webmin Remote Code Execution (authenticated) - CVE-2019-15642
  • CVE-2019-16131 OKLite v1.2.25 Arbitrary File Upload Vulnerability
  • CVE-2019-16132 OKLite v1.2.25 Arbitrary File Deletion Vulnerability
  • CVE-2019-16309 FlameCMS 3.3.5 SQL Injection Vulnerability at Backend Login
  • CVE-2019-16314 indexhibit cms v2.1.5 Reinstallation Leading to Getshell
  • Weaver OA Management System RCE Exploit Script
  • CVE-2019-16759 vBulletin 5.x 0day pre-auth RCE exploit
  • zentao-getshell ChanDao 8.2 - 9.2.1 Frontend Getshell
  • Weaver e-cology OA Frontend SQL Injection Vulnerability
  • Joomla-3.4.6-RCE
  • Easy File Sharing Web Server 7.2 - GET Buffer Overflow (SEH).md)
  • Construct ASMX to Bypass WAF Restrictions for Command Execution (Applicable to ASP.NET Environment)
  • CVE-2019-17662-ThinVNC 1.0b1 - Authentication Bypass
  • CVE-2019-16278 and CVE-2019-16279 about nostromo nhttpd
  • CVE-2019-11043-PHP Remote Code Execution Vulnerability
  • ThinkCMF Vulnerability Collection
  • CVE-2019-7609-kibana Below 6.6.0 Unauthorized Remote Code Execution
  • ecologyExp.jar - Weaver ecology OA System Database Configuration File Reader
  • freeFTP1.0.8-'PASS' Remote Buffer Overflow
  • rConfig v3.9.2 RCE Vulnerability
  • apache_solr_rce
  • CVE-2019-7580 thinkcmf-5.0.190111 Backend Arbitrary File Write Leading to Code Execution
  • Apache Flink Arbitrary Jar Upload Leading to Remote Code Execution
  • Jwt_Tool - Tool for verifying, forging, scanning and tampering JWT (JSON Web Tokens)
  • cve-2019-17424 nipper-ng_0.11.10-Remote_Buffer_Overflow Remote Buffer Overflow with PoC
  • CVE-2019-12409_Apache_Solr RCE
  • Shiro RCE (Padding Oracle Attack)
  • CVE-2019-19634 class.upload.php <= 2.0.4 Arbitrary File Upload
  • Apache Solr RCE via Velocity Template Injection
  • CVE-2019-10758 mongo-express before 0.54.0 is vulnerable to Remote Code Execution
  • CVE-2019-2107 Android Play Video RCE POC (Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0)
  • CVE-2019-19844 Django Password Reset Vulnerability (Affected versions: Django master branch, Django 3.0, Django 2.2, Django 1.11)
  • CVE-2019-17556 unsafe-deserialization-in-apache-olingo (Apache Olingo Deserialization Vulnerability, Affects: 4.0.0 to 4.6.0)
  • ZZCMS201910 SQL Injections | ZZCMS201910 Code Audit
  • WDJACMS1.5.2 Template Injection Vulnerability
  • CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway
  • CVE-2019-19781.nse - Use Nmap to check Citrix ADC Remote Code Execution
  • Mysql Client Arbitrary File Read Attack Chain Extension
  • CVE-2020-5504 phpMyAdmin Injection (Requires Login) - Another reproduction of this vulnerability
  • CVE-2020-5509 Car Rental Project 1.0 Remote Code Execution Vulnerability
  • CryptoAPI PoC CVE-2020-0601 | Another PoC for CVE-2020-0601
  • New Weblogic RCE (CVE-2020-2546, CVE-2020-2551) CVE-2020-2546 | WebLogic WLS Core Component RCE Analysis (CVE-2020-2551) | CVE-2020-2551 Weblogic IIOP Deserialization EXP
  • CVE-2020-5398 - RFD (Reflected File Download) Attack for Spring MVC
  • PHPOK v5.3 & v5.4 getshell | phpok V5.4.137 Frontend getshell Analysis | PHPOK 4.7 From Injection to Getshell
  • thinkphp6 Session Arbitrary File Creation Vulnerability Reproduction with POC - Original text on the vulnerability notification public account
  • ThinkPHP 6.x Deserialization POP Chain (Part 1) | Original Link
  • ThinkPHP 6.x Deserialization POP Chain (Part 2) | Original Link
  • ThinkPHP 6.x Deserialization POP Chain (Part 3) | Original Link
  • WordPress InfiniteWP - Client Authentication Bypass (Metasploit)
  • Linux/RCE OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution
  • CVE-2020-7471 django 1.11-1.11.28, 2.2-2.2.10, 3.0-3.0.3 StringAgg(delimiter) uses unsafe data causing SQL injection vulnerability environment and POC
  • CVE-2019-17564: Apache Dubbo Deserialization Vulnerability
  • CVE-2019-2725 (CNVD-C-2019-48814, WebLogic wls9-async)
  • YzmCMS 5.4 Backend Getshell
  • About Ghostcat (CVE-2020-1938): CNVD-2020-10487 (CVE-2020-1938), tomcat ajp file read vulnerability poc | Java version POC | Tomcat-Ajp protocol file read vulnerability | Another python version CVE-2020-1938 vulnerability detection | CVE-2020-1938 Vulnerability Reproduction Environment and EXP
  • CVE-2020-8840: Jackson-databind Remote Code Execution Vulnerability (may affect fastjson)
  • CVE-2020-8813 Cacti v1.2.8 RCE Remote Code Execution EXP and Analysis (Requires authentication / or enable guest access to bypass login) (A Linux-based network traffic monitoring graphical analysis tool developed with PHP, MySQL, SNMP, and RRDTool) | EXP | CVE-2020-8813 MSF Exploit Script
  • CVE-2020-7246 PHP Project Management System qdPM < 9.1 RCE
  • CVE-2020-9547: FasterXML/jackson-databind Remote Code Execution Vulnerability
  • CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability
  • Apache ActiveMQ 5.11.1 Directory Traversal / Shell Upload
  • CVE-2020-2555: WebLogic RCE Vulnerability POC | CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE
  • CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability
  • CVE-2020-0554: phpMyAdmin Backend SQL Injection
  • Weaver E-Mobile Ognl Expression Injection | Expression Injection.pdf
  • Weaver 10 Frontend Upload Getshell | Python version getshell
  • Tongda OA RCE Vulnerability | Tongda OA v11.6 RCE Reproduction Analysis + EXP - EXP Download
  • CVE-2020-10673 jackson-databind JNDI Injection Leading to Remote Code Execution
  • CVE-2020-10199, CVE-2020-10204 One-click Detection Tool, Graphical Interface (Sonatype Nexus < 3.21.1)
  • CVE-2020-2555 Oracle Coherence Deserialization Vulnerability | Analysis Article
  • cve-2020-5260 Git Credential Leak Vulnerability
  • Tongda OA Frontend Arbitrary User Forgery Login Vulnerability Batch Detection
  • CVE-2020-11890 Joomla RCE < 3.9.17 Remote Command Execution Vulnerability (Requires valid credentials)
  • CVE-2020-10238 [Joomla RCE <= 3.9.15 Remote Command Execution (Requires valid credentials)] & CVE-2020-10239 [Joomla RCE 3.7.0 to 3.9.15 Remote Command Execution (Requires valid credentials)]
  • CVE-2020-2546, CVE-2020-2915, CVE-2020-2801, CVE-2020-2798, CVE-2020-2883, CVE-2020-2884, CVE-2020-2950 WebLogic T3 payload exploit poc python3 | CVE-2020-2883 Weblogic coherence.jar RCE | WebLogic-Shiro-shell WebLogic using CVE-2020-2883 to exploit Shiro rememberMe deserialization vulnerability, one-click register filter memory shell | shiro_rce_tool: Possibly the best shiro exploitation tool | ShiroExploit: ShiroExploit is a Shiro visualization exploitation tool integrating key brute force, command echo memory shell injection and other functions
  • tongda_oa_rce - Tongda OA Unauthorized Login + File Upload Getshell
  • CVE-2020-11651 SaltStack Proof of Concept [Authentication Bypass RCE] | CVE-2020-11651 && CVE-2020-11652 EXP
  • showdoc api_page Arbitrary File Upload Getshell
  • Fastjson <= 1.2.47 Remote Code Execution Exploitation Tool and Method
  • SpringBoot_Actuator_RCE
  • jizhicms (Extreme CMS) v1.7.1 Code Audit - Arbitrary File Upload Getshell + SQL Injection + Reflected XSSv1.7.1代码审计引发的思考.pdf)
  • CVE-2020-9484: Apache Tomcat Session Deserialization Code Execution Vulnerability | CVE-2020-9484: Apache Tomcat Deserialization RCE Vulnerability Analysis and Exploitation
  • PHPOK Latest Version Vulnerability Combo GETSHELL
  • Apache Kylin 3.0.1 Command Injection Vulnerability
  • weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory
  • CVE-2020-5410 Spring Cloud Config Directory Traversal Vulnerability
  • NewZhan CMS All Versions SQL Injection (0day)
  • Blind Injection or Union? A Strange Injection Point Encountered in SEMCMS3.9 (0day)
  • A SEMCMS Code Audit
  • Another Audit of SEMCMS
  • From PbootCMS (2.0.3 & 2.0.7 Frontend RCE + 2.0.8 Backend RCE) Audit to Bypassing Some Dog审计到某狗绕过.pdf)
  • CVE-2020-1948: Apache Dubbo Remote Code Execution Vulnerability
  • CVE-2020-5902 F5 BIG-IP Remote Code Execution (RCE) & Arbitrary File Inclusion/Read | Another EXP for CVE-2020-5902 with test docker file
  • CVE-2020-8193 Citrix Unauthorized Access Arbitrary File Read
  • Thorough Audit of Tianmu MVC_T Framework with Home Version (temmokumvc) v2.01_v2.01.pdf)
  • CVE-2020-14645 WebLogic Remote Code Execution Vulnerability | Weblogic_CVE-2020-14645
  • CVE-2020-6287 SAP NetWeaver AS JAVA Authorization Issue Vulnerability - Create User EXP | SAP_RECON PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)
  • CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 jenkins-rce
  • CVE-2020-3452: Cisco ASA/FTD Arbitrary File Read Vulnerability
  • 74CMS_v5.0.1 Backend RCE Analysis
  • CVE-2020-8163 - Remote code execution of user-provided local names in Rails
  • 0day RCE Horde Groupware Webmail Edition RCE
  • pulse-gosecure-rce Tool to test for existence of CVE-2020-8218
  • Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
  • Zblog Default Theme csrf + Stored XSS + Getshell
  • Yonyou GRP-u8 Injection + TopSec TopApp-LB Load Balancing System SQL Injection | NSFOCUS UTS Comprehensive Threat Probe Admin Arbitrary Login Reproduction | HW Ammo Library: Sangfor EDR 3.2.21 Arbitrary Code Execution Vulnerability Analysis
  • CVE-2020-13935 Tomcat WebSocket Security Vulnerability Leading to Denial of Service Attack
  • Douphp Website Backend Stored XSS Vulnerability Analysis - Original Article
  • Adminer Simple Exploitation - Original Article
  • Knight CMS assign_resume_tpl Remote Code Execution Analysis - Original Article
  • kibana RCE Caused by Prototype Pollution (CVE-2019-7609) - YouTube Related Report
  • cve-2019-17558 Apache Solr Velocity Injection Remote Command Execution Vulnerability
  • Weblogic Server (CVE-2021-2109) Remote Code Execution Vulnerability - Original Article
  • Chenguang PHP Customer Service System Source Code 3.6 Frontend Getshell - 0day | Original Article
  • zzzcms (asp) Frontend Getshell前台Getshell.md)
  • wjdhcms Frontend Getshell (Race Condition).pdf) - Original Article
  • glpi_cve-2020-11060 - Related Article
  • CVE-2021-21315 PoC Node.js component systeminformation Code Injection Vulnerability
  • CVE-2021-23132 Joomla! Directory Traversal Leading to RCE Vulnerability EXP | Reproduction Article - Original Link
  • An Audit Thought on ShirneCMS - Deserialization Getshell - Original Article - CMS Address 1 - CMS Address 2
  • Apache Solr Latest Version Arbitrary File Read 0day | Original Article
  • KiteCMS Vulnerability Discovery Journey (Arbitrary File Write, Arbitrary File Read, and Deserialization).pdf) | Original Article
  • CVE-2021-22986 F5 BIG-IP Remote Code Execution Vulnerability EXP | CVE-2021-22986 Batch Detection
  • CNVD-2021-10543: MessageSolution Enterprise Email Archive Management System EEA Information Disclosure Vulnerability
  • CVE-2021-26295 POC
  • eyouRCE: (CNVD-2021-26422) Eyou Email System Remote Command Execution Vulnerability Python Version | EYouMailRCE: Jar Single File Version
  • ThinkPHP3.2.x RCE Vulnerability
  • Apache Solr SSRF (CVE-2021-27905)
  • Coremail Arbitrary File Upload Vulnerability POC, Supports Single or Batch Detection
  • CVE-2021-26086: Atlassian Jira Server/Data Center 8.4.0 File Read Vulnerability
  • CVE-2021-41773 CVE-2021-42013 Vulnerability Batch Detection Tool: Apache 2.4.49 and 2.4.50 Arbitrary File Read and Command Execution Vulnerability Bypass Exploitation Tool
  • CVE-2021-24499: Workreap Theme Less Than 2.2.1 Unauthenticated Arbitrary File Upload Leading to RCE
  • CVE-2021-30632: Chrome V8 Out-of-Bounds Write Vulnerability Leading to Memory Corruption
  • laravel-exploits: Exploit for CVE-2021-3129
  • CVE-2021-21234: Spring Boot Directory Traversal
  • CVE-2021-22205: GitLab CE File Upload ExifTool Leading to Command Execution RCE Vulnerability
  • Hadoop Yarn RPC Unauthorized RCE
  • CVE-2021-41277: Metabase Sensitive Information Disclosure
  • Alibaba Sentinel Frontend SSRF
  • CVE-2021-37580: Apache ShenYu Permission Authentication Bypass
  • log4j2_rce | apache-log4j-poc | CVE-2021-44228: Log4j2 | log4shell-vulnerable-app: Another log4j practice app
  • cve-2021-45232-exp: Apache apisix dashboard unauthcation rce
  • Spring Boot + H2 Database JNDI Injection | Original Article
  • CVE-2021-43297: Apache Dubbo Hessian2 Exception Handling Deserialization
  • CVE-2022-21371: Oracle WebLogic Server LFI
  • CVE-2022-0332: Moodle 3.11 to 3.11.4 - SQL injection
  • CVE-2022-0185: Linux Kernel Vulnerability Leading to Container Escape in Kubernetes
  • cve-2022-23131: zabbix-saml-bypass-exp | Another cve-2022-23131
  • CVE-2022-22947: Spring Cloud Gateway Remote Code Execution | CVE-2022-22947: golang version | cve-2022-22947-godzilla-memshell: CVE-2022-22947 Inject Godzilla Memory Shell
  • spring-cloud-function-SpEL-RCE: Spring Cloud Function SpEL RCE | Related Article
  • CVE-2022-22963: Spring-cloud-function-SpEL-RCE
  • CVE-2022-22965: spring mvc RCE Analysis | CVE-2022-22965: Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive) | CVE-2022-22965: Spring4Shell golang version detection implementation
  • CVE-2022-22954-VMware-RCE: VMware Workspace ONE Access RCE | VMware-CVE-2022-22954
  • CVE-2021-31805: S2-062 Apache Struts2 Remote Code Execution Vulnerability
  • CVE-2021-21300: Git Symlink Code Execution Vulnerability
  • YonyouNC_Tip: Yonyou NC Historical Vulnerabilities
  • CVE-2022-1388-EXP: CVE-2022-1388 F5 BIG-IP RCE Batch Detection | CVE-2022-1388 nuclei template | CVE-2022-1388: Another scanning script
  • CVE-2022-24734: MyBB Forum Backend RCE
  • CVE-2022-0540: Atlassian Jira Seraph Authentication Bypass RCE
  • CVE-2022-25237: Bonitasoft Platform from Authentication Bypass to RCE | CVE-2022-25237 Bonitasoft Platform from Authentication Bypass to Undisclosed Deserialization Vulnerability Discovery Journey
  • CVE-2022-22978: Spring Security Authentication Bypass Vulnerability | Related Analysis
  • FastjsonPoc: Fastjson 1.2.80 Deserialization Code Demo and Environment
  • CVE-2022-26133: Atlassian Bitbucket Data Center Deserialization Vulnerability Batch Verification and Exploitation
  • CVE-2022-26134: Confluence OGNL Injection RCE Vulnerability | Another cve-2022-26134 exploitation tool
  • CVE-2022-32275: GRAFANA 8.4.3 DASHBOARD Directory Traversal | CVE-2022-32276: Unauthorized Bypass Vulnerability
  • SXF_SSLVPN_arbitrary_get_session: SSLVPN Arbitrary User Login Vulnerability
  • CVE-2022-28346: Django SQL Injection QuerySet.annotate(), aggregate(), and extra() Environment | Another CVE-2022-28346 Environment | CVE-2022-28346 Related Article Analysis
  • CVE-2022-32532: Apache Shiro Authentication Bypass Vulnerability
  • CVE-2022-34265: Django SQL Injection Vulnerability
  • CVE-2022-33980 Apache-Commons-Configuration-RCE
  • cve-2022-33891: Apache Spark Shell Command Injection | Another cve-2022-33891 exploitation tool
  • LandrayOATreexmlRCE: Landray OA Treexml Remote Command Execution
  • ZentaoSqli: Zentao v16.5 SQL Injection Vulnerability POC
  • CVE-2022-36446 Webmin Software Package Updates RCE: Webmin Remote Code Execution Vulnerability
  • CVE-2022-33980 Apache Commons Configuration Remote Command Execution Vulnerability
  • CVE-2022-31101: PrestaShop bockwishlist module 2.1.0 SQLi
  • CVE-2022-30525: CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability POC & EXPC
  • CVE-2022-2185: gitlab Remote Code Execution (Requires Authentication)
  • CVE-2022-27925 PoC: Zimbra Collaboration Path Traversal Leading to RCE | zaber: CVE-2019-9670 XXE Exploitation Tool written in golang
  • CVE-2022-1040: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
  • CVE-2022-31269: Nortek Control Linear eMerge E3-Series Information Disclosure
  • CNVD-2022-60632 Chanjet Arbitrary File Upload Vulnerability Reproduction | Backup | Backup 2
  • Teleport Bastion Host Arbitrary User Login Vulnerability | Backup | Backup 1 | Backup 2
  • CVE-2022-40127: Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC
  • CVE-2022-36537: ZK framework authentication bypass & connectWise r1Soft server backup manager remote code execution
  • CVE-2022-40684: Fortinet FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Vulnerability
  • Weblogic-CVE-2023-21839: Oracle WebLogic Server Remote Code Execution | Weblogic CVE-2023-21839 RCE (No Java Dependency One-Click RCE)
  • CVE-2022-39952: FortiNAC keyUpload zipslip Remote Code Execution Vulnerability
  • CVE-2022-21587: Oracle E-Business Suite Unauthorized RCE | Oracle E-BS CVE-2022-21587 Exploit Plugin for woodpecker-framework
  • Alibab-Nacos-Unauthorized-Login: Alibaba Nacos <= 2.2.0 Unauthorized Access "Default key generate jwt token" | Nacos-Authentication-Bypass-Poc | nacos_vul: Nacos Authentication Bypass Batch Detection (QVD-2023-6271) + Direct User Addition
  • CVE-2023-27524: Insecure Default Configuration in Apache Superset
  • CVE-2023-1671: Sophos Web Appliance Remote Command Execution Vulnerability
  • CVE-2023-28771 PoC: Zyxel firewalls Command Injection Vulnerability
  • CVE-2023-25690 POC: Apache HTTP Server Request Smuggling Vulnerability
  • realor-sql-Injection-exp: Ruiyou Tianyi Application Virtualization - Remote Code Execution / SQL Injection
  • Apache-Solr-8.3.1-RCE: Apache Solr 8.3.1 admin panel RCE (Windows)
  • CVE-2023-27997-check: Fortinet FortiOS SSL-VPN Remote Code Execution Vulnerability
  • CVE-2023-20178: Cisco AnyConnect Secure Mobility Client for Windows System Privilege Escalation Vulnerability
  • CVE-2023-34960: Chamilon Command Execution
  • CVE-2023-23333: Contec SolarView Compact Command Execution
  • CVE-2023-7028: GitLab Arbitrary User Password Reset Vulnerability
  • CVE-2023-22527: Atlassian Confluence - Remote Code Execution | nuclei-template CVE-2023-22527: Atlassian Confluence - Remote Code Execution
  • CVE-2024-23897: Jenkins CLI Arbitrary File Read Vulnerability Leading to RCE
  • CVE-2024-21887: ivanti policy secure 22.6 Command Injection Vulnerability
  • CVE-2024-0204: Goanywhere MFT Unauthenticated Admin Creation Vulnerability
  • CVE-2024-4577: PHP CGI Windows Platform Remote Code Execution Vulnerability | 1 | 2
  • CVE-2024-34102: Magento estimate-shipping-methods XXE Vulnerability
  • CVE-2024-37032: Ollama Directory Traversal Leading to Code Execution Vulnerability
  • CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability
  • thinkphp3.2.5 A Pseudo 0day
  • Hikvision Integrated Security Management Platform productFile Remote Command Execution Vulnerability Analysis
  • Dahua Smart Park System Login Bypass Analysis
  • 2023 Attack and Defense Heavy Weapon: Dahua Smart Park Comprehensive Management Platform Code Audit
  • Obtaining CNVD High-Risk Certificate by Code Auditing Yonyou NC6.5 (workflowService and PaWfm2 SQL Injection).html)
  • Casual Archaeology of an Enterprise Digital Platform (Yonyou NC actionhandlerservlet Deserialization).html)
  • Xinhu OA 2.6.0 An Audit Half a Year Ago
  • Xinhu OA (v2.6.3) Backend GETSHELL Analysis后台GETSHELL分析.html)
  • Xinhu OA Backend GETSHELL Analysis
  • Kingdee Apusic Application Server Arbitrary File Upload Vulnerability - A Domestic Middleware File Upload Vulnerability Analysis
  • nginxwebui Backend RCE Up to 3.9.9
  • A Code Audit Record (nginxWebUI <= 4.1.1) RCE Test Learning Processrce测试学习过程.html)
  • High-Risk CNVD_ Yonyou U8-OA Basic Version (operaFileActionController.jsp) File Overwrite Vulnerability Getshell存在文件覆写漏洞getshell.html)
  • Feiqi Interconnection Ognl Expression Injection Leading to RCE - An OA Command Execution Vulnerability Discovery Thought
  • CVE-2023-51444 Vulnerability Analysis to Memory Shell Injection
  • Analysis of Template Injection Vulnerabilities in PHP
  • RuoYi-Flowable-Plus 0day Expression Injection (v0.8.3).pdf)
  • SSRF Bypassing file Protocol Restrictions
  • ShowDoc SQL Injection and Deserialization Vulnerability Analysis
  • ThinkPHP8 Deserialization Call Chain
  • [Translation] GHSL-2023-229_GHSL-2023-230: Remote Code Execution (RCE) in Apache Kafka UI - CVE-2023-52251, CVE-2024-32030
  • [Translation] From Setting Charset to RCE: Exploiting PHP Engine with GLIBC (Part 1)
  • [Translation] From Setting Charset to RCE: Exploiting PHP Engine with GLIBC (Part 2)
  • jepaas Low-Code Platform Code Audit Analysis (Permission Bypass, File Upload, SQL Injection).html)
  • ofbiz Directory Traversal Leading to Code Execution Vulnerability (CVE-2024-32113) Analysis
  • php Bypassing (360) a Security Software to Execute System Commands某防护软件执行系统命令.html)
  • tomcat Memory Shell Analysis
  • A Classic Case Study from JS Map Leak to OSS Object Storage Takeover
  • Brief Analysis of Vulnerability Discovery in New Version of DolphinPHP
  • Generic Tomcat InvokerServlet RCE Attack Chain Discovery
  • From Tomcat JMX Proxy to RCE: AccessLogValve Injection Exploitation | jmx2rce: Tomcat JMX Proxy Unauthorized AccessLogValve Injection Exploitation Tool (Scanning/File Read/RCE/Cleanup Integrated)
  • Jinhe OA C6 Office System Global Bypass Vulnerability Analysis
  • Brief Description of PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577)
  • MSSQL Injection Bypassing 360 to Execute Commands
  • Java Fastjson Versions Vulnerability Countermeasure History and Summary
  • Java SpringBoot Vulnerability Exploitation Postures Collection Summary Detailed Version
  • FastJson1 & FastJson2 Deserialization Exploitation Chain Analysis
  • A Ridiculous Memory Shell GetShell
  • Exploring Echo Methods for EL Expression Injection
  • Modifying JS Files in Browser_ Using mitmproxy for Plaintext Fuzzing of Encrypted Requests
  • Mobile Penetration Testing Solution
  • A Little Story of Forcibly Bypassing Three WAFs for Injection
  • Vulnerability Discovery at a Double First-Class University
  • Re-excavating CC Chains
  • CVE-2024-36401 GeoServer Remote Code Execution
  • GeoServer Property Evaluate Remote Code Execution Vulnerability (CVE-2024-36401) Analysis%20分析.html)
  • GeoServer property RCE Injection Memory Shell
  • GeoServer Historical Vulnerability Analysis
  • .Net ViewState Deserialization to Achieve Fileless Godzilla Memory Shell (Wanhu ezEip).html)
  • nginx deny Restriction Path Bypass
  • Qiyuesuo Code Audit Analysis
  • Code Audit of Hongjing eHR Human Resources System (Permission Bypass, downlawbase Injection, Arbitrary File Delete/Download, Deserialization RCE).html)
  • FanRuan channel Deserialization Vulnerability Analysis
  • FanRuan channel v5 Deserialization Bypass
  • Lanling EKP Frontend Remote Command Execution Vulnerability Analysis
  • A Park System Login Bypass Analysis (Dahua Smart Park Comprehensive Management Platform - Login Bypass, ZIP Upload Directory Traversal).html)
  • In-depth Analysis of PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577, CVE-2012-1823)
  • Vulnerability Discovery: Re-exploring a Park System (Dahua Smart Park Comprehensive Management Platform - Unauthorized User Add/View/Modify, XStream Deserialization RCE).html)
  • A University Smart Cloud Platform: Weak Password Brute Force, Horizontal Privilege Escalation Information Leak, Wx_SessionKey Tampering Arbitrary User Login Vulnerability
  • (Nday) Weaver E-office 10 OfficeServer.php Download/Upload Vulnerability Analysis泛微E-office%2010%20OfficeServer.php%20下载_上传漏洞分析.html)
  • CVE-2024-30188 Apache DolphinScheduler Arbitrary File Read/Write Vulnerability Analysis
  • CVE-2024-36412 SuiteCRM Unauthenticated SQL Injection Analysis
  • CVE-2024-38856 Apache OFBiz Authentication Bypass
  • CVE-2024-43044 Jenkins Remoting Remote Code Execution Vulnerability Analysis
  • Some Methods for DedeCMS Backend RCE – fushulingのblog
  • H3C-iMC Intelligent Management Center autoDeploy.xhtml Page Code Execution Vulnerability Analysis
  • Nacos 0day (derby_source) Analysis _ No Outbound Network Exploitation
  • Nacos <= 2.4.0.1 Arbitrary File Read/Write/Delete
  • Spring Cloud Data Flow Vulnerability Analysis (CVE-2024-22263, CVE-2024-37084)
  • Unnamed page: Detailed Sample Analysis of .NET Malware Dark Crystal RAT
  • wookteam Collaboration Platform searchinfo Interface SQL Injection Vulnerability Analysis
  • [Original] Xinhu RockOA v2.6.2 SQL Injection Vulnerability _ Security Team Contribution Platform](./books/【原创】Xinhu%20RockOA%20v2.6.2%20SQL注入漏洞%20_%20安全团队贡献平台.html)
  • [Original] (CVE-2024-7919) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Unauthorized Access Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7919）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20未授权访问漏洞%20_%20安全团队贡献平台.html)
  • [Original] (CVE-2024-7920) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Information Disclosure Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7920）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20信息泄露漏洞%20_%20安全团队贡献平台.html)
  • [Original] (CVE-2024-7921) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Information Disclosure Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7921）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20信息泄露漏洞%20_%20安全团队贡献平台.html)
  • Wanhu graph include.jsp SQL Injection Vulnerability Analysis
  • Wanhu OA receivefile_gd SQL Injection
  • Esafenet New Generation Electronic Document Security Management System SecretKeyService SQL Injection Vulnerability
  • Esafenet New Generation Electronic Document Security Management System logincontroller JNDI Injection Leading to Remote Code Execution (XVE-2024-8758).html)
  • Esafenet New Generation Electronic Document Security Management System - LogDownLoadService mssql SQL Injection Vulnerability Analysis
  • Esafenet Electronic Document Security Management System CDGAuthoriseTempletService1 SecretLevelId SQL Injection Vulnerability Code Analysis
  • Esafenet Electronic Document Security Management System CDGAuthoriseTempletService1 SecretLevelId SQL Injection Vulnerability Code Analysis 2
  • Esafenet Electronic Document Security Management System DecryptionApp Deserialization Vulnerability RCE
  • Learn Code Audit from seacms12.9
  • Code Audit of nbcio-boot from Information Leak to Getshell
  • Xinhu OA nickName SQL Injection Vulnerability Reproduction (XVE-2024-19304).html)
  • Android Reverse Engineering - Advanced Usage of Frida
  • FanRuan FineReport ReportServer SQL Injection Leading to RCE Vulnerability
  • Yueku Enterprise Network Disk userlogin.html SQL Injection Vulnerability
  • Yibao OA Software Two Places - ExecuteSqlForSingle Injection Analysis and Reproduction
  • Smart Campus (Anxiao Yi) Management System ReceiveClassVideo.ashx File Upload Vulnerability管理系统%20ReceiveClassVideo.ashx%20存在文件上传漏洞.html)
  • Weaver e-cology testConnByBasePassword JNDI Injection Leading to Remote Code Execution Vulnerability Analysis (XVE-2024-20913).html)
  • Weaver Cloud Bridge e-Bridge addResume Arbitrary File Upload Vulnerability Analysis
  • Brief Analysis of Tongtianxing CMSV6 Vehicle Positioning Monitoring Platform Remote Code Execution Vulnerability
  • Hikvision iSecure Center Comprehensive Security Management Platform Authentication Bypass Analysis
  • Hikvision Comprehensive Security Management Platform clusters Page File Upload Vulnerability
  • Hikvision Comprehensive Security Management Platform uploadAllPackage Arbitrary File Upload Vulnerability Reproduction Analysis
  • Hikvision Comprehensive Security System detection Interface Remote Command Execution
  • Shenlan Authentication and Billing System Code Audit (Login Bypass, Frontend/Backend RCE, File Read, Information Leak, XSS, SSRF)
  • Yonyou NC complainbilldetail SQL Injection Vulnerability
  • Yonyou Zhiyuan OA Backend RCE constDef.do Command Execution Vulnerability Analysis
  • Jimu Report AviatorScript Code Injection RCE Analysis
  • Zhang Guan Jia Seal Intelligent Management Platform listUploadIntelligent Interface SQL Injection Vulnerability Analysis and Reproduction
  • Lanling OA WechatLoginHelper.do SQL Injection Vulnerability Reproduction Analysis
  • A Spring Boot Framework Code Audit and Reflection
  • An Analysis and Reproduction of Multiple Vulnerabilities in Tongtianxing CMSV6 Vehicle Video Surveillance Platform (getImage, delete.do, disable, merge, upload, SESSION Forgery, StandardLoginAction_getAllUser, Deserialization, xz_center)分析复现.html)
  • An Interesting Tongda OA Audit Process
  • CVE-2023-46604 ActiveMQ RCE No Outbound Network Exploitation
  • CVE-2024-41667 OpenAM FreeMarker Template Injection Analysis
  • CVE-2024-42913 RuoYi Management System SQL Injection Blacklist Bypass Vulnerability Analysis
  • Craft CMS Remote Code Execution Vulnerability
  • Hikvision Comprehensive Security Management Platform isecure center File Read Deep Exploitation
  • Can Thymeleaf Template Injection Still Be Exploited?
  • ofbiz Permission Bypass Remote Execution Vulnerability (CVE-2024-45195).html)
  • thinkphp8 RCE via baseQuery Method
  • thinkphp Latest CVE-2024-44902 Deserialization Vulnerability
  • Code Audit - Apple CMS8 (maccms8) No Echo SSRF Wonderful Audit Journey (Race Condition File Read + SQL Injection + File Upload Getshell)
  • Baolande Middleware Deserialization Chain Zigzag Debugging
  • Law Enforcement Video Audio Comprehensive Management Platform Unauthorized RCE Vulnerability Analysis
  • Fangzheng Changxiang News Editing System binary.do SQL Injection Vulnerability Analysis and Reproduction
  • Brief Analysis of Apache Ofbiz CVE-2024-45195 & CVE-2024-45507
  • Lanling EKP V16 Old Version bypass dataxml.jsp Auth
  • A Union-based sqlmap Custom Payload
  • Bypassing fastjson waf in a Real-World Scenario
  • Jinhe OA SignUpload SQL Injection Analysis
  • Penetration Testing of Ruoyi System in a Real-World Scenario
  • Penetration Testing of a BladeX Site Based on Spring Secondary Development
  • Nacos Configuration File Attack and Defense Thought Summary
  • Weaver E9 Path browser.jsp Permission Bypass Leading to SQL Injection Vulnerability
  • Wanhu ezOFFICE Collaborative Management Platform GeneralWeb XXE to RCE
  • Xinzhongxin Campus Card Management System ProductInfoJF SQL Injection Vulnerability
  • Meite CRM mcc_login.jsp SQL Injection Vulnerability
  • Yonyou NC getOtherData SQL Injection Vulnerability
  • Yonyou NC isAgentLimit SQL Injection Vulnerability
  • CVE-2024-55215: Jrohy/trojan Unauthenticated Admin Password Modification Vulnerability
  • Yonyou NC M0dUlE/redeploy SQL Injection Vulnerability
  • Yonyou NC setting/renew SQL Injection Vulnerability
  • Yonyou NC portalpage/doNew SQL Injection Vulnerability
  • Yonyou NC System Image Management - Image Upload imageupload SQL Injection Vulnerability
  • Yonyou NC deleteOftenMenu SQL Injection Vulnerability
  • Yonyou NC rmImage/download SQL Injection Vulnerability
  • IBOS Enterprise Collaboration Management Software main/api/OrgUser SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageGuiz SQL Injection Vulnerability
  • Yonyou NC oauidesigner/getMdPropertyJson SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageGetFormCon SQL Injection Vulnerability
  • Zentao Open Source Version 21.4 Latest Version search Module words SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageptpinfo SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/dopageduoproductsinfo SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/dopagefxcount SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/dopagefxszhongx SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPagemycoupon SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageindexCop SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/_Postrequest File Read Vulnerability
  • Universal Store Mini Program Management System /comadmin/Remote/onepic_uploade File Upload Vulnerability
  • Lingdang CRM /crm/upload.php File Upload Vulnerability
  • Lingdang CRM /crm/uploaddify/uploadify.php File Upload Vulnerability
  • Fujian Keli Communication Command Dispatching Management Platform custom/zx/upload.php Arbitrary File Upload Vulnerability
  • Fujian Keli Communication Command Dispatching Management Platform api/get_sos/items.php SQL Injection Vulnerability
  • NetMizer Log Management System cmd.php Remote Command Execution Vulnerability
  • Wanhu ezEIP onlyvalid.aspx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform UploadComponentHandler.ashx Arbitrary File Upload Vulnerability
  • Maternity Center ERP Management Cloud Platform ModuleUpHandler.ashx Arbitrary File Upload Vulnerability
  • Maternity Center ERP Management Cloud Platform AttachedHandler.ashx Arbitrary File Upload Vulnerability
  • Jinhe OA C6 IncentivePlanFulfillAppprove.aspx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform UpLoadHandler.ashx Arbitrary File Upload Vulnerability
  • NUUO Camera handle_site_config.php Remote Command Execution Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/upload/UploadHandler.ashx Arbitrary File Read Vulnerability
  • Wanhu ezEIP productlist.aspx SQL Injection Vulnerability
  • Angjie ERP cwsqry.asmx SQL Injection Vulnerability
  • Angjie ERP cwsoa.asmx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/ContractManager/ashx/Handler.ashx Arbitrary File Upload Vulnerability
  • Angjie ERP cwsapprove.asmx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/MicroMall/ashx/Handler.ashx Arbitrary File Upload Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/ICManager/ashx/Handler.ashx Arbitrary File Upload Vulnerability
  • Anmei Digital Hotel Broadband Operation System get_user_enrollment.php SQL Injection Vulnerability
  • Yonyou NC rmwebImage/download SQL Injection Vulnerability
  • Yonyou U8 Cloud MARosterPhotoServlet SQL Injection Vulnerability
  • Synway SMG Gateway Management Software 9-12ping.php Remote Code Execution Vulnerability (CVE-2025-1448)
  • Shikong Zhiyou Enterprise Process Control System updater.getStudioFile Arbitrary File Read Vulnerability
  • Shikong Zhiyou Enterprise Process Control System updater.startUpdateStudio XXE Vulnerability
  • Yinda Huizhi Comprehensive Management Platform login.aspx SQL Injection Vulnerability
  • Baiyi Cloud Asset Management Operation System feeStandard.Apply.save2.php SQL Injection Vulnerability
  • Baiyi Cloud Asset Management Operation System admin.house.collect.php SQL Injection Vulnerability (CVE-2025-1464)
  • Weaver e-office sms_page.php SQL Injection Vulnerability
  • Weaver e-office flow_xml.php SQL Injection Vulnerability
  • Weaver e-office attendance.wsdl.php SQL Injection Vulnerability
  • Weaver e-office notify.wsdl.php SQL Injection Vulnerability
  • Weaver e-office online_person.wsdl.php SQL Injection Vulnerability
  • Weaver e-office validate_sort.php SQL Injection Vulnerability
  • Weaver e-office content_-4.php SQL Injection Vulnerability
  • Weaver e-office block_content.php SQL Injection Vulnerability
  • Weaver e-office word_update.php SQL Injection Vulnerability
  • Weaver e-office freerunimgflow.php SQL Injection Vulnerability
  • Weaver e-office runimgflow.php SQL Injection Vulnerability
  • Anmei Digital Hotel Broadband Operation System list_qry.php SQL Injection Vulnerability
  • Anmei Digital Hotel Broadband Operation System get_ip.php SQL Injection Vulnerability
  • Yonyou NC/NCC File Server Configuration Management FsConsoleService SQL Injection Vulnerability
  • Yonyou NC and NC Cloud System IBapIOService SQL Injection Vulnerability
  • Wanhu ezOFFICE selectCommentField.jsp SQL Injection Vulnerability
  • Weaver e-office sms.wsdl.php SQL Injection Vulnerability
  • Weaver e-office user.wsdl.php SQL Injection Vulnerability
  • Weaver e-office mobile.wsdl.php SQL Injection Vulnerability
  • Weaver e-office list.wsdl.php SQL Injection Vulnerability
  • Weaver e-office dept.wsdl.php SQL Injection Vulnerability
  • Weaver e-office login.wsdl.php SQL Injection Vulnerability
  • Weaver e-office email.wsdl.php SQL Injection Vulnerability
  • DedeCMS V5.7.117 (Latest Version) RCE
  • Yonyou NC LfwFileUploadServlet Arbitrary File Upload Vulnerability
  • Yonyou NC importTemplate XML Entity Injection (XXE) Vulnerability
  • EKing Management Easy FileDownload.ihtm Arbitrary File Read Vulnerability
  • Yonyou U8 Cloud console.loadRes.d Arbitrary File Read Vulnerability
  • Ruijie-EWEB timeout.php Command Injection Vulnerability
  • Yonyou NC pkevalset SQL Injection Vulnerability
  • Ruijie-EWEB timeout.php File Read Vulnerability
  • Yonyou NC portalpage/importPml SQL Injection Vulnerability
  • Ruijie-EWEB timeout.php File Upload Vulnerability
  • Yonyou NC complainjudge SQL Injection Vulnerability
  • FastJson Malformed Unicode Bypass WAF, Traffic Detection
  • Ruijie-EWEB patch.php Command Injection Vulnerability
  • Hanta Technology Internet Behavior Management System tracert.php Command Injection Vulnerability
  • Hanta Technology Internet Behavior Management System ping.php Command Injection Vulnerability
  • Bosi Foreign Trade Management System DCreceiveBox.jsp Multiple SQL Injection Vulnerabilities
  • Wanhu OA ajax_checkUserNum.jsp SQL Injection Vulnerability
  • Wanhu OA selectAmountField.jsp SQL Injection Vulnerability
  • Wanhu OA DocumentHistory.jsp SQL Injection Vulnerability
  • Yonyou U8 Cloud QuerySoapServlet SQL Injection Vulnerability
  • Wanhu OA getNextAutoCode.jsp SQL Injection Vulnerability
  • Lanling Smart Collaboration Platform fl_define_edit.aspx SQL Injection Vulnerability
  • Weaver OA ReceiveTodoRequestByXml XML Entity Injection Vulnerability
  • Wanhu OA public/iSignatureHTML.jsp/Service.jsp SQL Injection Vulnerability
  • Wanhu OA selectPopTable.jsp SQL Injection Vulnerability
  • Wanhu OA govdocumentmanager_sendfile_gd.jsp SQL Injection Vulnerability
  • Lanling EKP sys/webservice/elecPsealUseWebService File Read Vulnerability
  • Baizhuo Smart Management Platform autheditpwd.php SQL Injection Vulnerability
  • Baizhuo Smart Management Platform licence.php File Upload Vulnerability
  • Baizhuo Smart Management Platform uploadfile.php File Upload Vulnerability
  • Baizhuo Smart Management Platform useratte/layer_swich_conf.php Arbitrary File Deletion Vulnerability
  • Ruijie-EWEB flwo.control.php Command Injection Vulnerability
  • Unibox Router /billing/logout.php Command Execution Vulnerability
  • Shikong Zhiyou Enterprise Process Control System indexService.notice SQL Injection Vulnerability
  • Ruijie-EWEB check.php File Read Vulnerability
  • JeeWMS cgAutoListController.do SQL Injection Vulnerability
  • JeeWMS druid Unauthorized Access Vulnerability
  • Yonyou NC cpRadarImage/download SQL Injection Vulnerability
  • NetMizer Log Management System troubleip.php Command Execution Vulnerability
  • NetMizer Log Management System weixin.php Command Execution Vulnerability
  • NetMizer Log Management System weibo.php Command Execution Vulnerability
  • NetMizer Log Management System search.php Command Execution Vulnerability
  • NetMizer Log Management System qq.php Command Execution Vulnerability
  • NetMizer Log Management System mail.php Command Execution Vulnerability
  • NetMizer Log Management System dologin.php SQL Injection Vulnerability
  • NetMizer Log Management System connect.php Command Execution Vulnerability
  • NetMizer Log Management System hostdelay.php Command Execution Vulnerability
  • NetMizer Log Management System getlogin.php SQL Injection Vulnerability
  • NetMizer Log Management System dirlist.php Directory Traversal Vulnerability (CNVD-2017-37549)
  • NetMizer Log Management System position.php Command Execution Vulnerability
  • Yonyou NC IServiceEntryPoint XXE Vulnerability
  • Yonyou NC listUserSharingEvents SQL Injection Vulnerability
  • Yonyou NC viewPsnCard/download SQL Injection Vulnerability
  • JeeWMS iconController.do Arbitrary File Upload Vulnerability
  • JeeWMS commonController.do Arbitrary File Upload Vulnerability (CVE-2024-57761)
  • Synway SMG Gateway Management Software 9-13pcap.php Command Injection Vulnerability
  • Synway SMG Gateway Management Software 9-2radius.php Command Injection Vulnerability
  • Sanhui SMG Gateway Management Software down.php Arbitrary File Read Vulnerability
  • Hanta Technology Internet Behavior Management System cappkt.php Command Injection Vulnerability
  • Salia PLCC check.php Unauthorized Access Leading to Information Disclosure
  • Yinda Huizhi Comprehensive Management Platform PPlugList.ashx SQL Injection Vulnerability
  • Wanhu ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL Injection Vulnerability
  • Yinda Huizhi Comprehensive Management Platform ADTag_Info.ashx SQL Injection Vulnerability
  • JeeWMS AuthInterceptor Permission Bypass Vulnerability
  • Yinda Huizhi Comprehensive Management Platform SysMenuScheme.ashx SQL Injection Vulnerability
  • Salia PLCC nwcheckexec.php Command Execution Vulnerability
  • Yonyou U8 CRM biztype.php SQL Injection Vulnerability
  • Lingdang CRM Playforrecord.php File Read Vulnerability
  • Salia PLCC check_req.php Command Execution Vulnerability
  • JeeWMS cgformTemplateController.do File Read Vulnerability
  • Yonyou NC and NC Cloud System getBapTableDatas SQL Injection Vulnerability
  • Optilink Management System gene.php Command Execution Vulnerability
  • NetMizer Log Management System terminals.php SQL Injection Vulnerability
  • Yonyou U8 CRM checkselectworksheet.php SQL Injection Vulnerability
  • Weaver e-office SignatureDel.php SQL Injection Vulnerability
  • Weaver e-office upload.php File Upload Vulnerability
  • Weaver e-office OfficeServer.php File Upload Vulnerability
  • Weaver e-office OfficeServer.php File Read Vulnerability
  • Weaver e-office OfficeServer2.php File Read Vulnerability
  • Ruijie-EWEB common.php File Read Vulnerability
  • Ruijie-EWEB dns.php File Read Vulnerability
  • Weaver e-office OfficeServer2.php File Upload Vulnerability
  • Yonyou U8 CRM ajaxgetborrowdata.php SQL Injection Vulnerability
  • Ruijie-EWEB download.php File Read Vulnerability
  • Yonyou U8 CRM objectview.php SQL Injection Vulnerability
  • Ruijie-EWEB dhcp.php File Read Vulnerability
  • Ruijie-EWEB ipam.php File Read Vulnerability
  • Unibox Router authentication/test_userlogin.php Command Execution Vulnerability
  • Ruijie-EWEB cli.php Command Injection Vulnerability
  • Unibox Router network/checkstatus_ping.php Command Execution Vulnerability
  • MetaCRM Customer Relationship Management System sendfile.jsp Arbitrary File Upload Vulnerability
  • Beijing Shikong Zhiyou ERP System updater.uploadStudioFile File Upload Vulnerability
  • Weaver E-cology js/hrm/getdata.jsp SQL Injection Vulnerability
  • Hanwang eFacePass Smart Park Management Platform Authorization Activation Bypass + Enable JVM Remote Debugging
  • Yonyou NC uncancelEvent SQL Injection Vulnerability
  • Yonyou NC ActivityNotice/export SQL Injection Vulnerability
  • Tongda OA OfficeTask udp 2397 Port SQL Injection Vulnerability Detection Tool
  • Tongda OA OfficeTask udp 2397 Port Remote Code Execution RCE Detection Tool
  • Hongjing Human Resources Management System HrpService Multiple XXE Vulnerabilities
  • Unibox postprosa.php SQL Injection Vulnerability
  • Yonyou NC deleteEvent SQL Injection Vulnerability
  • Hongjing Human Resources Management System HrpService SQL Injection Vulnerability
  • Hongjing Human Resources Management System DigestDownLoad SQL Injection Vulnerability
  • Hongjing Human Resources Management System HrChangeInfoService SQL Injection Vulnerability + XXE Vulnerability
  • Yonyou NC changeEvent SQL Injection Vulnerability
  • Yonyou NC /mp/view SQL Injection Vulnerability
  • Shikong Zhiyou Enterprise Process Control System getRemoteAddr Design Flaw Vulnerability
  • Yonyou NC oacofile/down File Read/Delete Vulnerability
  • Yonyou NC qrySubPurchaseOrgByParentPk SQL Injection Vulnerability
  • Meite CRM ws XXE Vulnerability
  • Meite CRM fileUpAndDown Deserialization Code Execution Vulnerability
  • Meite CRM getFile Arbitrary File Read and Deserialization Vulnerability
  • Baiyi Cloud Asset Management Operation System make SQL Injection Vulnerability
  • Yonyou NC loadDoc.ajax File Read Vulnerability
  • Western Digital My Cloud NAS multi_uploadify.php File Upload Vulnerability
  • Western Digital My Cloud NAS chk_vv_sharename.php Command Execution Vulnerability
  • Western Digital My Cloud NAS login_checker.php Permission Bypass Vulnerability
  • Yinda Huizhi Comprehensive Management Platform ADTag.ashx SQL Injection Vulnerability
  • Salia PLCC firmware.php Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryVehicleAccessRecord.do SQL Injection Vulnerability
  • Esafenet Electronic Document Security Management System AppExamList.jsp SQL Injection Vulnerability
  • Wanhu OA jigeObj_iframe.jsp SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform quertDgmOpenRecord.do SQL Injection Vulnerability
  • Wanhu OA name_judge.jsp SQL Injection Vulnerability
  • Jinhe OA DealXml.aspx XXE Vulnerability
  • Jinhe OA CheckPwd.aspx XXE Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform searchSystemRoles.do SQL Injection Vulnerability
  • Jinhe OA FileUpload.aspx File Read Vulnerability
  • Dongsheng Logistics Software DsWebService.asmx Multiple SQL Injection Vulnerabilities
  • Dongsheng Logistics Software UpdateCustomMainfast XXE Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryUserLogs.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryDoorInfoList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryOpenDoorLogs.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryFeedBackRecords.do SQL Injection Vulnerability
  • Dongsheng Logistics Software Chfee_hexiao/GetDataList SQL Injection Vulnerability
  • Esafenet Electronic Document Security Management System WorkFlowAction SQL Injection Vulnerability
  • Jinhe OA DailyTaskListInfo.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software WorkFlowGridSource.aspx SQL Injection Vulnerability
  • Puhua Powerpms FileBrowserPdf.ashx SQL Injection Vulnerability
  • Puhua Powerpms GetFilesData SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform PermissionPersonController Multiple SQL Injection Vulnerabilities
  • Hanwang eFacePass Comprehensive Management Platform resourceUploadFile.do Arbitrary File Upload Vulnerability
  • Meite CRM headimgsave SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform mobiMeetingApp/uploadMeetingFile.do Arbitrary File Upload Vulnerability
  • Meite CRM mobileupload.jsp Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform exportResourceByFilePath.do Arbitrary File Read Vulnerability
  • MetaCRM Customer Relationship Management System download-new.jsp Arbitrary File Read Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getValidPersonForFirst.do SQL Injection Vulnerability
  • Fumeng Cloud CRM GetPic.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getFirstEmp.do SQL Injection Vulnerability
  • Dongsheng Logistics Software GetDataListCA SQL Injection Vulnerability
  • Fumeng Cloud CRM GetImage.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software WmsZXFeeGridSource.aspx SQL Injection Vulnerability
  • Jinhe OA ModuleTaskView.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getDoors.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform meetingPersonal/uploadMeetingFile.do Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryAntisubmarineList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform Meeting Multiple SQL Injection Vulnerabilities
  • Jinhe OA IsHaveFTask.aspx XXE + SQL Injection Vulnerability
  • Jinhe OA IsHaveFTask.aspx XXE + SQL Injection Vulnerability (duplicate)
  • Fumeng Cloud CRM GetIcon.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform uploadMapFile.do Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform updateVisitorMapConfig.do Arbitrary File Upload Vulnerability
  • Jinhe OA TaskReportConfirm.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getValidEmpForGroup.do SQL Injection Vulnerability
  • Jinhe OA AddTask.aspx XXE + SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryMeetingFile.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform wxLogin.do Unauthorized Access Leading to Sensitive Information Leak
  • Hanwang eFacePass Comprehensive Management Platform addVisitDeviceAppointmentInfoTest.do fastjson Deserialization RCE Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryAlarmEvent.do SQL Injection Vulnerability
  • Jinhe OA TaskTreeJSON.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryBlackList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform fileDownload.do Arbitrary File Read Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform imgDownload.do Arbitrary File Read Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getGroupEmployee.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryManyPeopleGroupList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform Permission Bypass Vulnerability
  • MetaCRM Customer Relationship Management System sendsms.jsp Arbitrary File Upload Vulnerability
  • CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool (Scan + Exploit)
  • Tiandi Weiye Easy7 exportGisObj File Read Vulnerability
  • Sangfor Operational Security Management System add_DNS Remote Command Execution Vulnerability
  • Tiandi Weiye Easy7 getCurrentUserInquestRooms_ZHGL SQL Injection Vulnerability
  • Yonyou U8Cloud /u8cloud/openapi/ce.paper.query SQL Injection Vulnerability
  • Feiniu System (fnOS) app-center-static Directory Traversal Leading to Arbitrary File Read + Command Execution Vulnerability
  • Jinhe OA EpassInitTakenSnCheck.aspx, EpassInitTakenSnExec.aspx, EpassInitTakenSnInva.aspx, EpassValidate.aspx XXE + SQL Injection Vulnerabilities
  • Dongsheng Logistics Software /MvcShipping/MsBaseInfo/GetProParentModuTreeList SQL Injection Vulnerability
  • Jinhe OA JHSoft.Web.H5SiteControl/xmlhttp.aspx XXE Vulnerability
  • Dongsheng Logistics Software CompanysAccountGridSource.aspx SQL Injection Vulnerability
  • Jinhe OA Jhsoft.Web.dossier/XMLHttp.aspx XXE Vulnerability
  • Jinhe OA JHSoft.Web.Departments/XmlHttp.aspx XXE + SQL Injection Vulnerability
  • Fumeng Cloud CRM lkpClientsCust.aspx SQL Injection Vulnerability
  • Jinhe OA JHSoft.Web.CrmSystemSet/XMLHttp.aspx XXE Vulnerability
  • Fumeng Cloud CRM AjaxWriteMail.ashx SQL Injection Vulnerability
  • Jinhe OA ExamineNodCommisionDefault.aspx XXE Vulnerability
  • BigAnt Instant Messaging System upload_file Arbitrary File Upload Vulnerability
  • Tiandi Weiye Easy7 getActiveEffectTemp SQL Injection Vulnerability
  • Tiandi Weiye Easy7 downloadWordRecord File Read Vulnerability
  • Tiandi Weiye Easy7 queryPassword Information Disclosure Vulnerability
  • Tiandi Weiye Easy7 queryUserbyDesc SQL Injection Vulnerability
  • Tiandi Weiye Easy7 downloadNote File Read Vulnerability
  • Tiandi Weiye Easy7 uploadCheckImg File Upload Vulnerability
  • Tiandi Weiye Easy7 uploadMapServerBgImage File Upload Vulnerability
  • Tiandi Weiye Easy7 queryDataByTypeEx SQL Injection Vulnerability
  • Tiandi Weiye Easy7 downloadResource File Read Vulnerability
  • Dongsheng Logistics Software OpSailingDateListHtmlGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software OpSailingDateInfoGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software HtmlSearchServiceLCL.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software CrmProxyMailListHtmlGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software CrmProxyMailListGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software ModuleGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software AttributeGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software StorageController Multiple SQL Injection Vulnerabilities
  • Dongsheng Logistics Software MsOpSeaeController Multiple SQL Injection Vulnerabilities
  • Dongsheng Logistics Software IPLimitController SQL Injection Vulnerability
  • BigAnt Instant Messaging System DispersedOrgController Arbitrary File Upload Vulnerability
  • BigAnt Instant Messaging System plus_get_favicon Arbitrary File Upload Vulnerability
  • Dongsheng Logistics Software MsAnnounceController SQL Injection Vulnerability
  • BigAnt Instant Messaging System PublicController Arbitrary File Read Vulnerability
  • Dongsheng Logistics Software MsChDuiController Multiple SQL Injection Vulnerabilities
  • Jiujiayi Management System picHY.ashx SQL Injection Vulnerability
  • BigAnt Instant Messaging System Installer Second-Order Injection Leading to Remote Code Execution Vulnerability
  • Qinglong Panel Latest Version v2.20.1 Authentication Bypass Leading to RCE | Qinglong Panel Authentication Bypass Leading to Unauthorized Remote Code Execution (RCE) Vulnerability Analysis and Reproduction.md面板权限绕过致未授权远程代码执行(RCE)漏洞分析复现.md)
  • BigAnt Instant Messaging System moveDept SQL Injection Vulnerability
  • Jiujiayi Management System Ajax_XT.ashx SQL Injection Vulnerability
  • Jiujiayi Management System PrivilegedCodeDestroy.asmx SQL Injection Vulnerability
  • BigAnt Instant Messaging System updateLoginName SQL Injection Vulnerability
  • Sangfor Operational Security Management System change_net Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System del_net Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System del_route Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System getLdap Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System save_SNMP Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System csspost/update Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System upload_file Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System del_patch Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System install_patch Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System remote_get_clip_img Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System uninstall_patch Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System get_clip_img Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System down_load Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System port_validate Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System save_strategy Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System generate_certificate Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System update_date Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System upload_CN Remote Command Execution Vulnerability
  • Shenkete LEAN MES System ChooseLineAndRes.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System /Handler/SMTLoadingMaterial.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System EquipmentTree.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System UploadPortraits.ashx File Upload Vulnerability
  • Shenkete LEAN MES System /Handler/FileSync.ashx Arbitrary File Read/Upload/Delete/SSRF and Other Multiple Vulnerabilities
  • Shenkete LEAN MES System DownLoad.aspx Arbitrary File Read Vulnerability
  • Shenkete LEAN MES System /Handler/MobileAppLogin.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System PrintUpdate.ashx Arbitrary File Read/Upload/Delete Vulnerability
  • Shenkete LEAN MES System TestManagePlatform.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System UploadHander.ashx File Upload Vulnerability
  • Shenkete LEAN MES System CreateMenus.aspx Arbitrary File Upload Vulnerability
  • Shenkete LEAN MES System AutoComplete.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System ChooseImage.aspx Arbitrary File Upload/Delete Vulnerability
  • Shenkete LEAN MES System SetDataSource.aspx SQL Injection Vulnerability
  • CLIProxyAPI /v1internal:method Unauthorized Access Vulnerability
  • shannon: Autonomous AI Penetration Testing Tool for Web Applications and APIs, Supporting Code-Aware Dynamic Vulnerability Discovery and Automated PoC Verification
  • Fumeng Cloud CRM AjaxTrackInfo.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM DingHandler.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM PriceList.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM WorkFlowHandler.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM AddInquiry.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM OrderLook.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM FormDefault.aspx, FormDefaultCommon.aspx Multiple SQL Injection Vulnerabilities
  • Tiandi Weiye Easy7 queryRoomName SQL Injection Vulnerability
  • Tiandi Weiye Easy7 queryRoomConfigs SQL Injection Vulnerability
  • Tiandi Weiye Easy7 UploadOwnerImage.jsp File Upload Vulnerability
  • mdserver-web (Kuafu Panel) <= 0.18.4 Multiple Unauthorized Access + Information Leak + RCE Vulnerability Analysis
  • Tiandi Weiye Easy7 GetOtherDomainServer.jsp SSRF Vulnerability
  • Tiandi Weiye Easy7 getInquestIdByRoomId SQL Injection Vulnerability
  • Tiandi Weiye Easy7 getInquestRoomChannelInfo SQL Injection Vulnerability
  • V2Board Information Leak Vulnerability Leading to Privilege Bypass and Account Takeover (CVE-2026-39912) Analysis and Reproduction
  • Tiandi Weiye Easy7 isHashCameraAuth SQL Injection Vulnerability
  • Tiandi Weiye Easy7 getConfigInfoList SQL Injection Vulnerability
  • Tiandi Weiye Easy7 capture Command Execution Vulnerability
  • Tiandi Weiye Easy7 uploadLedImage File Upload Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/delete File Delete Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/downloadFile File Read Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/uploadIdsHttpFile SSRF + File Write Vulnerability
  • Fumeng Cloud CRM CustomizeReportSelectMould.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ClientNameCard.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM BusinessPrice.aspx SQL Injection Vulnerability
  • cPanel WHM Permission Bypass Leading to RCE [CVE-2026-41940] | CVE-2026-41940 Vulnerability Analysis
  • Fumeng Cloud CRM BusinessPriceListList.aspx SQL Injection Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/uploadFile File Upload Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/deleteFile File Delete Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/download File Read Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/user/getAuthorityByUserId SQL Injection Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/user/IsPermissible SQL Injection Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/user/getAuthorityByUserId SQL Injection Vulnerability (duplicate)
  • Fumeng Cloud CRM BusinessPriceOk.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM BusinessPriceReport.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM BusiPriceOkPrint.aspx SQL Injection Vulnerability
  • Yonyou NC System IMsgCenterWebService SQL Injection Vulnerability
  • Fumeng Cloud CRM LoadMailAttachFile.aspx Arbitrary File Read/Move
  • Fumeng Cloud CRM Inquiry.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM Price_detail.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductGrid.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM AjaxProductList.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductList.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM Product_field.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductDetail.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductSelect.aspx SQL Injection Vulnerability
  • CVE-2026-8054 High-Risk Pre-auth SQL Injection Vulnerability Analysis and Reproduction | CVE-2026-8054
  • Fumeng Cloud CRM ProviderList.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductDetail.aspx SQL Injection Vulnerability
  • BigAnt Instant Messaging System user_expire_post SQL Injection Vulnerability
  • BigAnt Instant Messaging System uploadMultipleFile Arbitrary File Upload Vulnerability
  • BigAnt Instant Messaging System Pan/Upload/upload File Upload Vulnerability
  • BigAnt Instant Messaging System getFileTrueAddress SQL Injection Vulnerability
  • BigAnt Instant Messaging System downloadSharedFile Arbitrary File Read Vulnerability
  • BigAnt Instant Messaging System clearUserDevice SQL Injection Vulnerability