Skip to content
KitploitKITPLOIT
ИнструментыБлог
Отправить
ИнструментыБлог
Отправить

Инструменты для хакинга, пентеста и кибербезопасности — ваш арсенал защиты!

Kitploit — это каталог инструментов для хакинга, кибербезопасности и пентестинга. Находите последние обновления проектов для поиска уязвимостей, анализа систем, автоматизации тестирования и усиления вашей безопасности.

··Ленты·Контакты·Конфиденциальность·© 2026 Kitploit

Каталог инструментов

Категории

Все категории
Loading categories
Penetration_Testing_POC — 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms | Kitploit
Инструменты/GitHubGitHub/mr-xn/penetration_testing_poc
Privilege EscalationIoT SecurityVulnerability AnalysisExploitationWeb Application ExploitationFuzzingPenetration TestingLearning & EducationCurated Resources

Популярное

Смотреть все →

Откройте для себя самые используемые инструменты нашего сообщества.

Изучить все инструменты

Просмотрите нашу коллекцию инструментов

Смотреть все инструменты →
Поделиться
GitHubmr-xn/penetration_testing_poc

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

РепозиторийСайт
7.4k2.0k1 день назадПроверено Kitploit
Контент недоступен на запрошенном языке. Показываем английскую версию.

Penetration_Testing_POC

Collect and share POCs, scripts, tools, articles, and other techniques used in penetration testing, as a note. Contributions welcome.

Please note that all tools may have backdoors or other anomalous behavior; it is recommended to operate in a virtual environment.

  • Penetration_Testing_POC
  • Please make good use of search [Ctrl+F]
  • IOT Device&Mobile Phone
  • Web APP
  • Privilege Escalation Assistance Related
  • PC
  • tools - Collection of Small Tools
  • Articles/Books/Tutorials Related
  • Description

Please make good use of search [Ctrl+F]

IOT Device&Mobile Phone

  • Tianyi Skyworth awifi router has multiple unauthorized access vulnerabilities
  • Huawei WS331a product management page has CSRF vulnerability
  • CVE-2019-16313 Fengwang Interconnect Enterprise Router v4.31 Password Disclosure Vulnerability
  • D-Link Router RCE Vulnerability
  • CVE-2019-13051 - Pi-Hole Router Ad-blocking Software Command Injection & Privilege Escalation
  • D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621)
  • Huawei HG255 Directory Traversal|Local backup file
  • D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)CVE-2019-20215(Metasploit)
  • From Interfaces.d to RCE: Vulnerability Discovery in Mozilla WebThings IoT Gateway
  • Xiaomi Series Router Remote Command Execution Vulnerabilities (CVE-2019-18370, CVE-2019-18371)
  • Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload - Replace firmware without authentication)
  • ||

Web APP- Zhiyuan OA A8 getShell 0day

  • Couch through 2.0 Path Disclosure Vulnerability
  • Cobub Razor 0.7.2 Cross-Site Request Forgery Vulnerability
  • joyplus-cms 1.6.0 CSRF Vulnerability Leading to Admin Account Addition
  • MiniCMS 1.10 CSRF Vulnerability Leading to Admin Account Addition
  • Z-Blog 1.5.1.1740 XSS Vulnerability
  • YzmCMS 3.6 XSS Vulnerability
  • Cobub Razor 0.7.2 Privilege Escalation to Add Admin Account
  • Cobub Razor 0.8.0 SQL Injection Vulnerability
  • Cobub Razor 0.8.0 Physical Path Disclosure Vulnerability
  • Wuzhi CMS 4.1.0 CSRF Vulnerability Leading to Admin Account Addition
  • DomainMod XSS Collection

Read more

Скачать инструмент
cve-2020-8634&cve-2020-8635
Wing FTP Server 6.2.3 Privilege Escalation Vulnerability Discovery Analysis and Reproduce Process
Wing FTP Server 6.2.5 Privilege Escalation
  • CVE-2020-9374-TP LINK TL-WR849N - RCE
  • CVE-2020-12753 - LG Smartphone Arbitrary Code Execution Vulnerability
  • CVE-2020-12695 - UPnP Security Vulnerability
  • 79 Netgear Routers Hit by Remote Takeover 0day
  • dlink-dir610-exploits-Exploits for CVE-2020-9376 and CVE-2020-9377
  • wacker: A set of scripts to assist in performing online dictionary attacks against WPA3 access points
  • CVE-2020-24581 D-Link DSL-2888A Remote Command Execution Vulnerability Analysis-Original URL
  • CNVD-2021-14536 Ruijie RG-UAC Unified Internet Behavior Management Audit System Account Password Information Disclosure Vulnerability
  • CNVD-2021-14544: Hikvision Stream Media Management Server Arbitrary File Read
  • CNVD-2020-25078: D-link Sensitive Information Leakage, can directly obtain account passwords to view monitoring
  • ios-gamed-0day
  • ios-nehelper-wifi-info-0day
  • ios-nehelper-enum-apps-0day
  • iOS 15.0.1 RCE PoC
  • DarkSword-RCE: Apple iOS Remote Code Execution Exploit|darksword-kexploit: Apple iOS Kernel Exploit|DarkSword: Apple iOS Exploit
  • CVE-2021-36260: Hikvision Product Command Injection Vulnerability
  • CVE-2021-33044, CVE-2021-33045 Dahua Camera POC|Related Analysis|Login bypass Chrome extension
  • CVE-2021-36260: Hikvision Command Injection Vulnerability|Another CVE-2021-36260 exploit script
  • CVE-2021-41653: TP-Link TL-WR840N V5(EU) - RCE
  • DirtyPipe-Android: Dirty Pipe root exploit for Android
  • CVE-2022-30075: Tp-Link Archer AX50 Authenticated RCE
  • NotQuite0day: D-Link 1960 Related Vulnerabilities
  • HuaYuReportRCE: Huayu Digital Report Component GetShell
  • IOT_Vul: Collection of IOT Related Vulnerabilities
  • CameraHack: Batch scan and exploit common vulnerabilities in Hikvision, Dahua, etc. cameras
  • CVE-2022-32832: Apple macOS APFS Kernel Arbitrary Code Execution Vulnerability
  • HookWechatRecall: Intercept WeChat Recall Demo via Frida
  • IOT_vuln: IOT Related Vulnerability Repository
  • hikvision_CVE-2017-7921_auth_bypass_config_decryptor: Decrypt Hikvision configuration files affected by CVE-2017-7921
  • CVE-2022-20866: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Check
  • WLAN-AP-WEA453e RCE: Samsung Router Remote Command Execution Vulnerability
  • Buffer overflow in Xiongmai DVRs|Backup
  • CVE-2023-27350: PaperCut NG Authentication Bypass leading to RCE
  • ivms-8700-0day-poc: Hikvision iVMS-8700 Integrated Security Management Platform Arbitrary File Upload Vulnerability
  • badspin: Android Kernel Use-After-Free Vulnerability
  • HikvisionIVMSGetShell: Hikvision IVMS Integrated Security Management Platform Software GetShell
  • iot: Exploitation of DIR-816 823g series routers
  • VulIoT: DIR-816 823g series router vulnerability exploitation
  • NsePocsuite-lua: Network camera vulnerability detection script. Nmap (Nse Nmap script engine)
  • Device Vulnerability Discovery Ideas
  • Vivotek CC8160 Firmware Stack Overflow Vulnerability Reproduction Analysis
  • Xiaomi AX9000 Router CVE-2023-26315 Vulnerability Discovery
  • IOT-CVE-2018-17066 (D-Link Command Injection Vulnerability)
  • Extraction & Brute-force Tool for OpenSSL Encryption of IoT Firmware
  • Xiaomi Router Firmware Emulation Scheme
  • QEMU Setup ARM64 Environment _ ZIKH26's Blog
  • SSD Advisory - NVMS9000 Information Disclosure - SSD Secure Disclosure
  • DIR-820 CVE-2022-26258 Vulnerability Reproduction
  • From jhttpd Analysis to System Command Injection (CVE-2021-46227-D-Link Di-7200G Command Injection Vulnerability)
  • 2024 RWCTF Synology BC500 Camera RCE - Unauthorized_Stack Overflow
  • Router dd manual firmware extraction --- Fast PoEAC router all-in-one FR100P-AC firmware extraction
  • NX_Firmware: Nintendo Switch firmware database for all versions
  • vphone-aio: One-click run iOS virtual phone (vphone) script with jailbreak and full bootstrap installed
  • AssppJailbroken: A tool for decrypting the latest IPA files downloaded from the App Store, supporting running on jailbroken iOS devices and iPhone simulators
  • FirmWire: Full-system dynamic analysis platform supporting Samsung Shannon and MediaTek baseband firmware, can be used for fuzzing, vulnerability root cause analysis and debugging
  • Podroid: Run Linux containers on Android phones without root, start Alpine Linux VM based on QEMU and provide complete Podman container runtime
  • PrismSpace: App dual-instance manager based on Android managed profile
  • Tsec-Salon: Tencent Security Salon past event materials|BLACKHAT_Asia2026: Black Hat Asia 2026 topic materials summary|Java Ghost Bits - Black Hat Asia 2026 Presentation PDF (Ghost Bits: High-order truncation)|GBitsTools: Ghost Bits attack tool (Python GUI/CLI)|GbitsGen: Ghost Bits character generation tool|ghost-bits-lab: Ghost Bits interactive security lab target (Java)
  • CVE-2026-34908-check: UniFi OS Server Authentication Bypass and Unauthenticated Remote Code Execution (RCE) Detection Tool | Related Technical Analysis: Popping Root on UniFi OS Server
    • GreenCMS v2.3.0603 CSRF Vulnerability Leading to WebShell Acquisition & Admin Account Addition
  • yii2-statemachine v2.x.x XSS Vulnerability
  • maccms_v10 CSRF Vulnerability Leading to Arbitrary Account Addition
  • LFCMS 3.7.0 CSRF Vulnerability Leading to Addition of Arbitrary User or Admin Accounts
  • Finecms_v5.4 CSRF Vulnerability Leading to Admin Password Modification
  • Amazon Kindle Fire HD (3rd Generation) Kernel Driver Denial of Service Vulnerability
  • Metinfo-6.1.2 XSS & SQL Injection Vulnerabilities
  • Hucart cms v5.7.4 CSRF Vulnerability for Arbitrary Admin Account Addition
  • indexhibit cms v2.1.5 Direct PHP File Editing Getshell
  • S-CMS Enterprise Website Building System PHP v3.0 Backend CSRF Leading to Admin Privilege Account Addition
  • S-CMS PHP v3.0 SQL Injection Vulnerability
  • MetInfoCMS 5.X GETSHELL Vulnerability Collection
  • MetInfo7.5.0 Code Audit (Backend SQL Injection + md5 Weak Type Comparison).pdf
  • discuz ml RCE Vulnerability Detection Tool
  • thinkphp5 Framework Flaw Leading to Remote Code Execution
  • FineCMS_v5.0.8 Two Getshells
  • Struts2_045 Vulnerability Batch Detection|Search Engine Collection Scan
  • thinkphp5 Command Execution
  • typecho Deserialization Vulnerability
  • CVE-2019-10173 Xstream 1.4.10 Remote Code Execution
  • IIS/CVE-2017-7269-Echo-PoC
  • CVE-2019-15107 Webmin RCE
  • thinkphp5 RCE Vulnerability Detection Tool
  • thinkphp5_RCE Collection
  • thinkphp3.X-thinkphp5.x
  • ThinkPHP Framework Historical Vulnerability Analysis Collection
  • CVE-2019-11510
  • Redis(<=5.0.5) RCE
  • Redis 4.x/5.x RCE (Master-Slave Replication Leading to RCE)
  • Generate Redis Malicious Module .so File for Master-Slave Replication RCE to Achieve Command Execution | Related Article
  • RedisWriteFile - Write Lossless Files via Redis Master-Slave, Used for Writing Lossless EXE, DLL, LNK on Windows and OS Binary on Linux
  • WeblogicScanLot Series, Weblogic Vulnerability Batch Detection Tool
  • TongWeb EJB Exploitation and Plugin Tool | TongwebPlugin
  • jboss_CVE-2017-12149
  • WordPress Denial of Service (DoS) - CVE-2018-6389
  • Webmin Remote Code Execution (authenticated) - CVE-2019-15642
  • CVE-2019-16131 OKLite v1.2.25 Arbitrary File Upload Vulnerability
  • CVE-2019-16132 OKLite v1.2.25 Arbitrary File Deletion Vulnerability
  • CVE-2019-16309 FlameCMS 3.3.5 SQL Injection Vulnerability at Backend Login
  • CVE-2019-16314 indexhibit cms v2.1.5 Reinstallation Leading to Getshell
  • Weaver OA Management System RCE Exploit Script
  • CVE-2019-16759 vBulletin 5.x 0day pre-auth RCE exploit
  • zentao-getshell ChanDao 8.2 - 9.2.1 Frontend Getshell
  • Weaver e-cology OA Frontend SQL Injection Vulnerability
  • Joomla-3.4.6-RCE
  • Easy File Sharing Web Server 7.2 - GET Buffer Overflow (SEH)
  • Construct ASMX to Bypass WAF Restrictions for Command Execution (Applicable to ASP.NET Environment)
  • CVE-2019-17662-ThinVNC 1.0b1 - Authentication Bypass
  • CVE-2019-16278 and CVE-2019-16279 about nostromo nhttpd
  • CVE-2019-11043-PHP Remote Code Execution Vulnerability
  • ThinkCMF Vulnerability Collection
  • CVE-2019-7609-kibana Below 6.6.0 Unauthorized Remote Code Execution
  • ecologyExp.jar - Weaver ecology OA System Database Configuration File Reader
  • freeFTP1.0.8-'PASS' Remote Buffer Overflow
  • rConfig v3.9.2 RCE Vulnerability
  • apache_solr_rce
  • CVE-2019-7580 thinkcmf-5.0.190111 Backend Arbitrary File Write Leading to Code Execution
  • Apache Flink Arbitrary Jar Upload Leading to Remote Code Execution
  • Jwt_Tool - Tool for verifying, forging, scanning and tampering JWT (JSON Web Tokens)
  • cve-2019-17424 nipper-ng_0.11.10-Remote_Buffer_Overflow Remote Buffer Overflow with PoC
  • CVE-2019-12409_Apache_Solr RCE
  • Shiro RCE (Padding Oracle Attack)
  • CVE-2019-19634 class.upload.php <= 2.0.4 Arbitrary File Upload
  • Apache Solr RCE via Velocity Template Injection
  • CVE-2019-10758 mongo-express before 0.54.0 is vulnerable to Remote Code Execution
  • CVE-2019-2107 Android Play Video RCE POC (Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0)
  • CVE-2019-19844 Django Password Reset Vulnerability (Affected versions: Django master branch, Django 3.0, Django 2.2, Django 1.11)
  • CVE-2019-17556 unsafe-deserialization-in-apache-olingo (Apache Olingo Deserialization Vulnerability, Affects: 4.0.0 to 4.6.0)
  • ZZCMS201910 SQL Injections | ZZCMS201910 Code Audit
  • WDJACMS1.5.2 Template Injection Vulnerability
  • CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway
  • CVE-2019-19781.nse - Use Nmap to check Citrix ADC Remote Code Execution
  • Mysql Client Arbitrary File Read Attack Chain Extension
  • CVE-2020-5504 phpMyAdmin Injection (Requires Login) - Another reproduction of this vulnerability
  • CVE-2020-5509 Car Rental Project 1.0 Remote Code Execution Vulnerability
  • CryptoAPI PoC CVE-2020-0601 | Another PoC for CVE-2020-0601
  • New Weblogic RCE (CVE-2020-2546, CVE-2020-2551) CVE-2020-2546 | WebLogic WLS Core Component RCE Analysis (CVE-2020-2551) | CVE-2020-2551 Weblogic IIOP Deserialization EXP
  • CVE-2020-5398 - RFD (Reflected File Download) Attack for Spring MVC
  • PHPOK v5.3 & v5.4 getshell | phpok V5.4.137 Frontend getshell Analysis | PHPOK 4.7 From Injection to Getshell
  • thinkphp6 Session Arbitrary File Creation Vulnerability Reproduction with POC - Original text on the vulnerability notification public account
  • ThinkPHP 6.x Deserialization POP Chain (Part 1) | Original Link
  • ThinkPHP 6.x Deserialization POP Chain (Part 2) | Original Link
  • ThinkPHP 6.x Deserialization POP Chain (Part 3) | Original Link
  • WordPress InfiniteWP - Client Authentication Bypass (Metasploit)
  • Linux/RCE OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution
  • CVE-2020-7471 django 1.11-1.11.28, 2.2-2.2.10, 3.0-3.0.3 StringAgg(delimiter) uses unsafe data causing SQL injection vulnerability environment and POC
  • CVE-2019-17564: Apache Dubbo Deserialization Vulnerability
  • CVE-2019-2725 (CNVD-C-2019-48814, WebLogic wls9-async)
  • YzmCMS 5.4 Backend Getshell
  • About Ghostcat (CVE-2020-1938): CNVD-2020-10487 (CVE-2020-1938), tomcat ajp file read vulnerability poc | Java version POC | Tomcat-Ajp protocol file read vulnerability | Another python version CVE-2020-1938 vulnerability detection | CVE-2020-1938 Vulnerability Reproduction Environment and EXP
  • CVE-2020-8840: Jackson-databind Remote Code Execution Vulnerability (may affect fastjson)
  • CVE-2020-8813 Cacti v1.2.8 RCE Remote Code Execution EXP and Analysis (Requires authentication / or enable guest access to bypass login) (A Linux-based network traffic monitoring graphical analysis tool developed with PHP, MySQL, SNMP, and RRDTool) | EXP | CVE-2020-8813 MSF Exploit Script
  • CVE-2020-7246 PHP Project Management System qdPM < 9.1 RCE
  • CVE-2020-9547: FasterXML/jackson-databind Remote Code Execution Vulnerability
  • CVE-2020-9548: FasterXML/jackson-databind Remote Code Execution Vulnerability
  • Apache ActiveMQ 5.11.1 Directory Traversal / Shell Upload
  • CVE-2020-2555: WebLogic RCE Vulnerability POC | CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE
  • CVE-2020-1947 Apache ShardingSphere UI YAML Parsing Remote Code Execution Vulnerability
  • CVE-2020-0554: phpMyAdmin Backend SQL Injection
  • Weaver E-Mobile Ognl Expression Injection | Expression Injection.pdf
  • Weaver 10 Frontend Upload Getshell | Python version getshell
  • Tongda OA RCE Vulnerability | Tongda OA v11.6 RCE Reproduction Analysis + EXP - EXP Download
  • CVE-2020-10673 jackson-databind JNDI Injection Leading to Remote Code Execution
  • CVE-2020-10199, CVE-2020-10204 One-click Detection Tool, Graphical Interface (Sonatype Nexus < 3.21.1)
  • CVE-2020-2555 Oracle Coherence Deserialization Vulnerability | Analysis Article
  • cve-2020-5260 Git Credential Leak Vulnerability
  • Tongda OA Frontend Arbitrary User Forgery Login Vulnerability Batch Detection
  • CVE-2020-11890 Joomla RCE < 3.9.17 Remote Command Execution Vulnerability (Requires valid credentials)
  • CVE-2020-10238 [Joomla RCE <= 3.9.15 Remote Command Execution (Requires valid credentials)] & CVE-2020-10239 [Joomla RCE 3.7.0 to 3.9.15 Remote Command Execution (Requires valid credentials)]
  • CVE-2020-2546, CVE-2020-2915, CVE-2020-2801, CVE-2020-2798, CVE-2020-2883, CVE-2020-2884, CVE-2020-2950 WebLogic T3 payload exploit poc python3 | CVE-2020-2883 Weblogic coherence.jar RCE | WebLogic-Shiro-shell WebLogic using CVE-2020-2883 to exploit Shiro rememberMe deserialization vulnerability, one-click register filter memory shell | shiro_rce_tool: Possibly the best shiro exploitation tool | ShiroExploit: ShiroExploit is a Shiro visualization exploitation tool integrating key brute force, command echo memory shell injection and other functions
  • tongda_oa_rce - Tongda OA Unauthorized Login + File Upload Getshell
  • CVE-2020-11651 SaltStack Proof of Concept [Authentication Bypass RCE] | CVE-2020-11651 && CVE-2020-11652 EXP
  • showdoc api_page Arbitrary File Upload Getshell
  • Fastjson <= 1.2.47 Remote Code Execution Exploitation Tool and Method
  • SpringBoot_Actuator_RCE
  • jizhicms (Extreme CMS) v1.7.1 Code Audit - Arbitrary File Upload Getshell + SQL Injection + Reflected XSS
  • CVE-2020-9484: Apache Tomcat Session Deserialization Code Execution Vulnerability | CVE-2020-9484: Apache Tomcat Deserialization RCE Vulnerability Analysis and Exploitation
  • PHPOK Latest Version Vulnerability Combo GETSHELL
  • Apache Kylin 3.0.1 Command Injection Vulnerability
  • weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory
  • CVE-2020-5410 Spring Cloud Config Directory Traversal Vulnerability
  • NewZhan CMS All Versions SQL Injection (0day)
  • Blind Injection or Union? A Strange Injection Point Encountered in SEMCMS3.9 (0day)
  • A SEMCMS Code Audit
  • Another Audit of SEMCMS
  • From PbootCMS (2.0.3 & 2.0.7 Frontend RCE + 2.0.8 Backend RCE) Audit to Bypassing Some Dog
  • CVE-2020-1948: Apache Dubbo Remote Code Execution Vulnerability
  • CVE-2020-5902 F5 BIG-IP Remote Code Execution (RCE) & Arbitrary File Inclusion/Read | Another EXP for CVE-2020-5902 with test docker file
  • CVE-2020-8193 Citrix Unauthorized Access Arbitrary File Read
  • Thorough Audit of Tianmu MVC_T Framework with Home Version (temmokumvc) v2.01
  • CVE-2020-14645 WebLogic Remote Code Execution Vulnerability | Weblogic_CVE-2020-14645
  • CVE-2020-6287 SAP NetWeaver AS JAVA Authorization Issue Vulnerability - Create User EXP | SAP_RECON PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)
  • CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 jenkins-rce
  • CVE-2020-3452: Cisco ASA/FTD Arbitrary File Read Vulnerability
  • 74CMS_v5.0.1 Backend RCE Analysis
  • CVE-2020-8163 - Remote code execution of user-provided local names in Rails
  • 0day RCE Horde Groupware Webmail Edition RCE
  • pulse-gosecure-rce Tool to test for existence of CVE-2020-8218
  • Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
  • Zblog Default Theme csrf + Stored XSS + Getshell
  • Yonyou GRP-u8 Injection + TopSec TopApp-LB Load Balancing System SQL Injection | NSFOCUS UTS Comprehensive Threat Probe Admin Arbitrary Login Reproduction | HW Ammo Library: Sangfor EDR 3.2.21 Arbitrary Code Execution Vulnerability Analysis
  • CVE-2020-13935 Tomcat WebSocket Security Vulnerability Leading to Denial of Service Attack
  • Douphp Website Backend Stored XSS Vulnerability Analysis - Original Article
  • Adminer Simple Exploitation - Original Article
  • Knight CMS assign_resume_tpl Remote Code Execution Analysis - Original Article
  • kibana RCE Caused by Prototype Pollution (CVE-2019-7609) - YouTube Related Report
  • cve-2019-17558 Apache Solr Velocity Injection Remote Command Execution Vulnerability
  • Weblogic Server (CVE-2021-2109) Remote Code Execution Vulnerability - Original Article
  • Chenguang PHP Customer Service System Source Code 3.6 Frontend Getshell - 0day | Original Article
  • zzzcms (asp) Frontend Getshell
  • wjdhcms Frontend Getshell (Race Condition) - Original Article
  • glpi_cve-2020-11060 - Related Article
  • CVE-2021-21315 PoC Node.js component systeminformation Code Injection Vulnerability
  • CVE-2021-23132 Joomla! Directory Traversal Leading to RCE Vulnerability EXP | Reproduction Article - Original Link
  • An Audit Thought on ShirneCMS - Deserialization Getshell - Original Article - CMS Address 1 - CMS Address 2
  • Apache Solr Latest Version Arbitrary File Read 0day | Original Article
  • KiteCMS Vulnerability Discovery Journey (Arbitrary File Write, Arbitrary File Read, and Deserialization) | Original Article
  • CVE-2021-22986 F5 BIG-IP Remote Code Execution Vulnerability EXP | CVE-2021-22986 Batch Detection
  • CNVD-2021-10543: MessageSolution Enterprise Email Archive Management System EEA Information Disclosure Vulnerability
  • CVE-2021-26295 POC
  • eyouRCE: (CNVD-2021-26422) Eyou Email System Remote Command Execution Vulnerability Python Version | EYouMailRCE: Jar Single File Version
  • ThinkPHP3.2.x RCE Vulnerability
  • Apache Solr SSRF (CVE-2021-27905)
  • Coremail Arbitrary File Upload Vulnerability POC, Supports Single or Batch Detection
  • CVE-2021-26086: Atlassian Jira Server/Data Center 8.4.0 File Read Vulnerability
  • CVE-2021-41773 CVE-2021-42013 Vulnerability Batch Detection Tool: Apache 2.4.49 and 2.4.50 Arbitrary File Read and Command Execution Vulnerability Bypass Exploitation Tool
  • CVE-2021-24499: Workreap Theme Less Than 2.2.1 Unauthenticated Arbitrary File Upload Leading to RCE
  • CVE-2021-30632: Chrome V8 Out-of-Bounds Write Vulnerability Leading to Memory Corruption
  • laravel-exploits: Exploit for CVE-2021-3129
  • CVE-2021-21234: Spring Boot Directory Traversal
  • CVE-2021-22205: GitLab CE File Upload ExifTool Leading to Command Execution RCE Vulnerability
  • Hadoop Yarn RPC Unauthorized RCE
  • CVE-2021-41277: Metabase Sensitive Information Disclosure
  • Alibaba Sentinel Frontend SSRF
  • CVE-2021-37580: Apache ShenYu Permission Authentication Bypass
  • log4j2_rce | apache-log4j-poc | CVE-2021-44228: Log4j2 | log4shell-vulnerable-app: Another log4j practice app
  • cve-2021-45232-exp: Apache apisix dashboard unauthcation rce
  • Spring Boot + H2 Database JNDI Injection | Original Article
  • CVE-2021-43297: Apache Dubbo Hessian2 Exception Handling Deserialization
  • CVE-2022-21371: Oracle WebLogic Server LFI
  • CVE-2022-0332: Moodle 3.11 to 3.11.4 - SQL injection
  • CVE-2022-0185: Linux Kernel Vulnerability Leading to Container Escape in Kubernetes
  • cve-2022-23131: zabbix-saml-bypass-exp | Another cve-2022-23131
  • CVE-2022-22947: Spring Cloud Gateway Remote Code Execution | CVE-2022-22947: golang version | cve-2022-22947-godzilla-memshell: CVE-2022-22947 Inject Godzilla Memory Shell
  • spring-cloud-function-SpEL-RCE: Spring Cloud Function SpEL RCE | Related Article
  • CVE-2022-22963: Spring-cloud-function-SpEL-RCE
  • CVE-2022-22965: spring mvc RCE Analysis | CVE-2022-22965: Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive) | CVE-2022-22965: Spring4Shell golang version detection implementation
  • CVE-2022-22954-VMware-RCE: VMware Workspace ONE Access RCE | VMware-CVE-2022-22954
  • CVE-2021-31805: S2-062 Apache Struts2 Remote Code Execution Vulnerability
  • CVE-2021-21300: Git Symlink Code Execution Vulnerability
  • YonyouNC_Tip: Yonyou NC Historical Vulnerabilities
  • CVE-2022-1388-EXP: CVE-2022-1388 F5 BIG-IP RCE Batch Detection | CVE-2022-1388 nuclei template | CVE-2022-1388: Another scanning script
  • CVE-2022-24734: MyBB Forum Backend RCE
  • CVE-2022-0540: Atlassian Jira Seraph Authentication Bypass RCE
  • CVE-2022-25237: Bonitasoft Platform from Authentication Bypass to RCE | CVE-2022-25237 Bonitasoft Platform from Authentication Bypass to Undisclosed Deserialization Vulnerability Discovery Journey
  • CVE-2022-22978: Spring Security Authentication Bypass Vulnerability | Related Analysis
  • FastjsonPoc: Fastjson 1.2.80 Deserialization Code Demo and Environment
  • CVE-2022-26133: Atlassian Bitbucket Data Center Deserialization Vulnerability Batch Verification and Exploitation
  • CVE-2022-26134: Confluence OGNL Injection RCE Vulnerability | Another cve-2022-26134 exploitation tool
  • CVE-2022-32275: GRAFANA 8.4.3 DASHBOARD Directory Traversal | CVE-2022-32276: Unauthorized Bypass Vulnerability
  • SXF_SSLVPN_arbitrary_get_session: SSLVPN Arbitrary User Login Vulnerability
  • CVE-2022-28346: Django SQL Injection QuerySet.annotate(), aggregate(), and extra() Environment | Another CVE-2022-28346 Environment | CVE-2022-28346 Related Article Analysis
  • CVE-2022-32532: Apache Shiro Authentication Bypass Vulnerability
  • CVE-2022-34265: Django SQL Injection Vulnerability
  • CVE-2022-33980 Apache-Commons-Configuration-RCE
  • cve-2022-33891: Apache Spark Shell Command Injection | Another cve-2022-33891 exploitation tool
  • LandrayOATreexmlRCE: Landray OA Treexml Remote Command Execution
  • ZentaoSqli: Zentao v16.5 SQL Injection Vulnerability POC
  • CVE-2022-36446 Webmin Software Package Updates RCE: Webmin Remote Code Execution Vulnerability
  • CVE-2022-33980 Apache Commons Configuration Remote Command Execution Vulnerability
  • CVE-2022-31101: PrestaShop bockwishlist module 2.1.0 SQLi
  • CVE-2022-30525: CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability POC & EXPC
  • CVE-2022-2185: gitlab Remote Code Execution (Requires Authentication)
  • CVE-2022-27925 PoC: Zimbra Collaboration Path Traversal Leading to RCE | zaber: CVE-2019-9670 XXE Exploitation Tool written in golang
  • CVE-2022-1040: Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass
  • CVE-2022-31269: Nortek Control Linear eMerge E3-Series Information Disclosure
  • CNVD-2022-60632 Chanjet Arbitrary File Upload Vulnerability Reproduction | Backup | Backup 2
  • Teleport Bastion Host Arbitrary User Login Vulnerability | Backup | Backup 1 | Backup 2
  • CVE-2022-40127: Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC
  • CVE-2022-36537: ZK framework authentication bypass & connectWise r1Soft server backup manager remote code execution
  • CVE-2022-40684: Fortinet FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Vulnerability
  • Weblogic-CVE-2023-21839: Oracle WebLogic Server Remote Code Execution | Weblogic CVE-2023-21839 RCE (No Java Dependency One-Click RCE)
  • CVE-2022-39952: FortiNAC keyUpload zipslip Remote Code Execution Vulnerability
  • CVE-2022-21587: Oracle E-Business Suite Unauthorized RCE | Oracle E-BS CVE-2022-21587 Exploit Plugin for woodpecker-framework
  • Alibab-Nacos-Unauthorized-Login: Alibaba Nacos <= 2.2.0 Unauthorized Access "Default key generate jwt token" | Nacos-Authentication-Bypass-Poc | nacos_vul: Nacos Authentication Bypass Batch Detection (QVD-2023-6271) + Direct User Addition
  • CVE-2023-27524: Insecure Default Configuration in Apache Superset
  • CVE-2023-1671: Sophos Web Appliance Remote Command Execution Vulnerability
  • CVE-2023-28771 PoC: Zyxel firewalls Command Injection Vulnerability
  • CVE-2023-25690 POC: Apache HTTP Server Request Smuggling Vulnerability
  • realor-sql-Injection-exp: Ruiyou Tianyi Application Virtualization - Remote Code Execution / SQL Injection
  • Apache-Solr-8.3.1-RCE: Apache Solr 8.3.1 admin panel RCE (Windows)
  • CVE-2023-27997-check: Fortinet FortiOS SSL-VPN Remote Code Execution Vulnerability
  • CVE-2023-20178: Cisco AnyConnect Secure Mobility Client for Windows System Privilege Escalation Vulnerability
  • CVE-2023-34960: Chamilon Command Execution
  • CVE-2023-23333: Contec SolarView Compact Command Execution
  • CVE-2023-7028: GitLab Arbitrary User Password Reset Vulnerability
  • CVE-2023-22527: Atlassian Confluence - Remote Code Execution | nuclei-template CVE-2023-22527: Atlassian Confluence - Remote Code Execution
  • CVE-2024-23897: Jenkins CLI Arbitrary File Read Vulnerability Leading to RCE
  • CVE-2024-21887: ivanti policy secure 22.6 Command Injection Vulnerability
  • CVE-2024-0204: Goanywhere MFT Unauthenticated Admin Creation Vulnerability
  • CVE-2024-4577: PHP CGI Windows Platform Remote Code Execution Vulnerability | 1 | 2
  • CVE-2024-34102: Magento estimate-shipping-methods XXE Vulnerability
  • CVE-2024-37032: Ollama Directory Traversal Leading to Code Execution Vulnerability
  • CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability
  • thinkphp3.2.5 A Pseudo 0day
  • Hikvision Integrated Security Management Platform productFile Remote Command Execution Vulnerability Analysis
  • Dahua Smart Park System Login Bypass Analysis
  • 2023 Attack and Defense Heavy Weapon: Dahua Smart Park Comprehensive Management Platform Code Audit
  • Obtaining CNVD High-Risk Certificate by Code Auditing Yonyou NC6.5 (workflowService and PaWfm2 SQL Injection)
  • Casual Archaeology of an Enterprise Digital Platform (Yonyou NC actionhandlerservlet Deserialization)
  • Xinhu OA 2.6.0 An Audit Half a Year Ago
  • Xinhu OA (v2.6.3) Backend GETSHELL Analysis
  • Xinhu OA Backend GETSHELL Analysis
  • Kingdee Apusic Application Server Arbitrary File Upload Vulnerability - A Domestic Middleware File Upload Vulnerability Analysis
  • nginxwebui Backend RCE Up to 3.9.9
  • A Code Audit Record (nginxWebUI <= 4.1.1) RCE Test Learning Process
  • High-Risk CNVD_ Yonyou U8-OA Basic Version (operaFileActionController.jsp) File Overwrite Vulnerability Getshell
  • Feiqi Interconnection Ognl Expression Injection Leading to RCE - An OA Command Execution Vulnerability Discovery Thought
  • CVE-2023-51444 Vulnerability Analysis to Memory Shell Injection
  • Analysis of Template Injection Vulnerabilities in PHP
  • RuoYi-Flowable-Plus 0day Expression Injection (v0.8.3)
  • SSRF Bypassing file Protocol Restrictions
  • ShowDoc SQL Injection and Deserialization Vulnerability Analysis
  • ThinkPHP8 Deserialization Call Chain
  • [Translation] GHSL-2023-229_GHSL-2023-230: Remote Code Execution (RCE) in Apache Kafka UI - CVE-2023-52251, CVE-2024-32030
  • [Translation] From Setting Charset to RCE: Exploiting PHP Engine with GLIBC (Part 1)
  • [Translation] From Setting Charset to RCE: Exploiting PHP Engine with GLIBC (Part 2)
  • jepaas Low-Code Platform Code Audit Analysis (Permission Bypass, File Upload, SQL Injection)
  • ofbiz Directory Traversal Leading to Code Execution Vulnerability (CVE-2024-32113) Analysis
  • php Bypassing (360) a Security Software to Execute System Commands
  • tomcat Memory Shell Analysis
  • A Classic Case Study from JS Map Leak to OSS Object Storage Takeover
  • Brief Analysis of Vulnerability Discovery in New Version of DolphinPHP
  • Generic Tomcat InvokerServlet RCE Attack Chain Discovery
  • From Tomcat JMX Proxy to RCE: AccessLogValve Injection Exploitation | jmx2rce: Tomcat JMX Proxy Unauthorized AccessLogValve Injection Exploitation Tool (Scanning/File Read/RCE/Cleanup Integrated)
  • Jinhe OA C6 Office System Global Bypass Vulnerability Analysis
  • Brief Description of PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577)
  • MSSQL Injection Bypassing 360 to Execute Commands
  • Java Fastjson Versions Vulnerability Countermeasure History and Summary
  • Java SpringBoot Vulnerability Exploitation Postures Collection Summary Detailed Version
  • FastJson1 & FastJson2 Deserialization Exploitation Chain Analysis
  • A Ridiculous Memory Shell GetShell
  • Exploring Echo Methods for EL Expression Injection
  • Modifying JS Files in Browser_ Using mitmproxy for Plaintext Fuzzing of Encrypted Requests
  • Mobile Penetration Testing Solution
  • A Little Story of Forcibly Bypassing Three WAFs for Injection
  • Vulnerability Discovery at a Double First-Class University
  • Re-excavating CC Chains
  • CVE-2024-36401 GeoServer Remote Code Execution
  • GeoServer Property Evaluate Remote Code Execution Vulnerability (CVE-2024-36401) Analysis
  • GeoServer property RCE Injection Memory Shell
  • GeoServer Historical Vulnerability Analysis
  • .Net ViewState Deserialization to Achieve Fileless Godzilla Memory Shell (Wanhu ezEip)
  • nginx deny Restriction Path Bypass
  • Qiyuesuo Code Audit Analysis
  • Code Audit of Hongjing eHR Human Resources System (Permission Bypass, downlawbase Injection, Arbitrary File Delete/Download, Deserialization RCE)
  • FanRuan channel Deserialization Vulnerability Analysis
  • FanRuan channel v5 Deserialization Bypass
  • Lanling EKP Frontend Remote Command Execution Vulnerability Analysis
  • A Park System Login Bypass Analysis (Dahua Smart Park Comprehensive Management Platform - Login Bypass, ZIP Upload Directory Traversal)
  • In-depth Analysis of PHP CGI Windows Platform Remote Code Execution Vulnerability (CVE-2024-4577, CVE-2012-1823)
  • Vulnerability Discovery: Re-exploring a Park System (Dahua Smart Park Comprehensive Management Platform - Unauthorized User Add/View/Modify, XStream Deserialization RCE)
  • A University Smart Cloud Platform: Weak Password Brute Force, Horizontal Privilege Escalation Information Leak, Wx_SessionKey Tampering Arbitrary User Login Vulnerability
  • (Nday) Weaver E-office 10 OfficeServer.php Download/Upload Vulnerability Analysis
  • CVE-2024-30188 Apache DolphinScheduler Arbitrary File Read/Write Vulnerability Analysis
  • CVE-2024-36412 SuiteCRM Unauthenticated SQL Injection Analysis
  • CVE-2024-38856 Apache OFBiz Authentication Bypass
  • CVE-2024-43044 Jenkins Remoting Remote Code Execution Vulnerability Analysis
  • Some Methods for DedeCMS Backend RCE – fushulingのblog
  • H3C-iMC Intelligent Management Center autoDeploy.xhtml Page Code Execution Vulnerability Analysis
  • Nacos 0day (derby_source) Analysis _ No Outbound Network Exploitation
  • Nacos <= 2.4.0.1 Arbitrary File Read/Write/Delete
  • Spring Cloud Data Flow Vulnerability Analysis (CVE-2024-22263, CVE-2024-37084)
  • Unnamed page: Detailed Sample Analysis of .NET Malware Dark Crystal RAT
  • wookteam Collaboration Platform searchinfo Interface SQL Injection Vulnerability Analysis
  • [Original] Xinhu RockOA v2.6.2 SQL Injection Vulnerability _ Security Team Contribution Platform](./books/【原创】Xinhu%20RockOA%20v2.6.2%20SQL注入漏洞%20_%20安全团队贡献平台.html)
  • [Original] (CVE-2024-7919) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Unauthorized Access Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7919）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20未授权访问漏洞%20_%20安全团队贡献平台.html)
  • [Original] (CVE-2024-7920) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Information Disclosure Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7920）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20信息泄露漏洞%20_%20安全团队贡献平台.html)
  • [Original] (CVE-2024-7921) Anhui Deshun Intelligent Technology Co., Ltd. JIELINK INTELLIGENT TERMINAL OPERATION PLATFORM Information Disclosure Vulnerability _ Security Team Contribution Platform](./books/【原创】（CVE-2024-7921）安徽德顺智能科技有限公司%20JIELINK_%20INTELLIGENT%20TERMINAL%20OPERATION%20PLATROFM%20信息泄露漏洞%20_%20安全团队贡献平台.html)
  • Wanhu graph include.jsp SQL Injection Vulnerability Analysis
  • Wanhu OA receivefile_gd SQL Injection
  • Esafenet New Generation Electronic Document Security Management System SecretKeyService SQL Injection Vulnerability
  • Esafenet New Generation Electronic Document Security Management System logincontroller JNDI Injection Leading to Remote Code Execution (XVE-2024-8758)
  • Esafenet New Generation Electronic Document Security Management System - LogDownLoadService mssql SQL Injection Vulnerability Analysis
  • Esafenet Electronic Document Security Management System CDGAuthoriseTempletService1 SecretLevelId SQL Injection Vulnerability Code Analysis
  • Esafenet Electronic Document Security Management System CDGAuthoriseTempletService1 SecretLevelId SQL Injection Vulnerability Code Analysis 2
  • Esafenet Electronic Document Security Management System DecryptionApp Deserialization Vulnerability RCE
  • Learn Code Audit from seacms12.9
  • Code Audit of nbcio-boot from Information Leak to Getshell
  • Xinhu OA nickName SQL Injection Vulnerability Reproduction (XVE-2024-19304)
  • Android Reverse Engineering - Advanced Usage of Frida
  • FanRuan FineReport ReportServer SQL Injection Leading to RCE Vulnerability
  • Yueku Enterprise Network Disk userlogin.html SQL Injection Vulnerability
  • Yibao OA Software Two Places - ExecuteSqlForSingle Injection Analysis and Reproduction
  • Smart Campus (Anxiao Yi) Management System ReceiveClassVideo.ashx File Upload Vulnerability
  • Weaver e-cology testConnByBasePassword JNDI Injection Leading to Remote Code Execution Vulnerability Analysis (XVE-2024-20913)
  • Weaver Cloud Bridge e-Bridge addResume Arbitrary File Upload Vulnerability Analysis
  • Brief Analysis of Tongtianxing CMSV6 Vehicle Positioning Monitoring Platform Remote Code Execution Vulnerability
  • Hikvision iSecure Center Comprehensive Security Management Platform Authentication Bypass Analysis
  • Hikvision Comprehensive Security Management Platform clusters Page File Upload Vulnerability
  • Hikvision Comprehensive Security Management Platform uploadAllPackage Arbitrary File Upload Vulnerability Reproduction Analysis
  • Hikvision Comprehensive Security System detection Interface Remote Command Execution
  • Shenlan Authentication and Billing System Code Audit (Login Bypass, Frontend/Backend RCE, File Read, Information Leak, XSS, SSRF)
  • Yonyou NC complainbilldetail SQL Injection Vulnerability
  • Yonyou Zhiyuan OA Backend RCE constDef.do Command Execution Vulnerability Analysis
  • Jimu Report AviatorScript Code Injection RCE Analysis
  • Zhang Guan Jia Seal Intelligent Management Platform listUploadIntelligent Interface SQL Injection Vulnerability Analysis and Reproduction
  • Lanling OA WechatLoginHelper.do SQL Injection Vulnerability Reproduction Analysis
  • A Spring Boot Framework Code Audit and Reflection
  • An Analysis and Reproduction of Multiple Vulnerabilities in Tongtianxing CMSV6 Vehicle Video Surveillance Platform (getImage, delete.do, disable, merge, upload, SESSION Forgery, StandardLoginAction_getAllUser, Deserialization, xz_center)
  • An Interesting Tongda OA Audit Process
  • CVE-2023-46604 ActiveMQ RCE No Outbound Network Exploitation
  • CVE-2024-41667 OpenAM FreeMarker Template Injection Analysis
  • CVE-2024-42913 RuoYi Management System SQL Injection Blacklist Bypass Vulnerability Analysis
  • Craft CMS Remote Code Execution Vulnerability
  • Hikvision Comprehensive Security Management Platform isecure center File Read Deep Exploitation
  • Can Thymeleaf Template Injection Still Be Exploited?
  • ofbiz Permission Bypass Remote Execution Vulnerability (CVE-2024-45195)
  • thinkphp8 RCE via baseQuery Method
  • thinkphp Latest CVE-2024-44902 Deserialization Vulnerability
  • Code Audit - Apple CMS8 (maccms8) No Echo SSRF Wonderful Audit Journey (Race Condition File Read + SQL Injection + File Upload Getshell)
  • Baolande Middleware Deserialization Chain Zigzag Debugging
  • Law Enforcement Video Audio Comprehensive Management Platform Unauthorized RCE Vulnerability Analysis
  • Fangzheng Changxiang News Editing System binary.do SQL Injection Vulnerability Analysis and Reproduction
  • Brief Analysis of Apache Ofbiz CVE-2024-45195 & CVE-2024-45507
  • Lanling EKP V16 Old Version bypass dataxml.jsp Auth
  • A Union-based sqlmap Custom Payload
  • Bypassing fastjson waf in a Real-World Scenario
  • Jinhe OA SignUpload SQL Injection Analysis
  • Penetration Testing of Ruoyi System in a Real-World Scenario
  • Penetration Testing of a BladeX Site Based on Spring Secondary Development
  • Nacos Configuration File Attack and Defense Thought Summary
  • Weaver E9 Path browser.jsp Permission Bypass Leading to SQL Injection Vulnerability
  • Wanhu ezOFFICE Collaborative Management Platform GeneralWeb XXE to RCE
  • Xinzhongxin Campus Card Management System ProductInfoJF SQL Injection Vulnerability
  • Meite CRM mcc_login.jsp SQL Injection Vulnerability
  • Yonyou NC getOtherData SQL Injection Vulnerability
  • Yonyou NC isAgentLimit SQL Injection Vulnerability
  • CVE-2024-55215: Jrohy/trojan Unauthenticated Admin Password Modification Vulnerability
  • Yonyou NC M0dUlE/redeploy SQL Injection Vulnerability
  • Yonyou NC setting/renew SQL Injection Vulnerability
  • Yonyou NC portalpage/doNew SQL Injection Vulnerability
  • Yonyou NC System Image Management - Image Upload imageupload SQL Injection Vulnerability
  • Yonyou NC deleteOftenMenu SQL Injection Vulnerability
  • Yonyou NC rmImage/download SQL Injection Vulnerability
  • IBOS Enterprise Collaboration Management Software main/api/OrgUser SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageGuiz SQL Injection Vulnerability
  • Yonyou NC oauidesigner/getMdPropertyJson SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageGetFormCon SQL Injection Vulnerability
  • Zentao Open Source Version 21.4 Latest Version search Module words SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageptpinfo SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/dopageduoproductsinfo SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/dopagefxcount SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/dopagefxszhongx SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPagemycoupon SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/doPageindexCop SQL Injection Vulnerability
  • Universal Store Mini Program Management System /api/wxapps/_Postrequest File Read Vulnerability
  • Universal Store Mini Program Management System /comadmin/Remote/onepic_uploade File Upload Vulnerability
  • Lingdang CRM /crm/upload.php File Upload Vulnerability
  • Lingdang CRM /crm/uploaddify/uploadify.php File Upload Vulnerability
  • Fujian Keli Communication Command Dispatching Management Platform custom/zx/upload.php Arbitrary File Upload Vulnerability
  • Fujian Keli Communication Command Dispatching Management Platform api/get_sos/items.php SQL Injection Vulnerability
  • NetMizer Log Management System cmd.php Remote Command Execution Vulnerability
  • Wanhu ezEIP onlyvalid.aspx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform UploadComponentHandler.ashx Arbitrary File Upload Vulnerability
  • Maternity Center ERP Management Cloud Platform ModuleUpHandler.ashx Arbitrary File Upload Vulnerability
  • Maternity Center ERP Management Cloud Platform AttachedHandler.ashx Arbitrary File Upload Vulnerability
  • Jinhe OA C6 IncentivePlanFulfillAppprove.aspx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform UpLoadHandler.ashx Arbitrary File Upload Vulnerability
  • NUUO Camera handle_site_config.php Remote Command Execution Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/upload/UploadHandler.ashx Arbitrary File Read Vulnerability
  • Wanhu ezEIP productlist.aspx SQL Injection Vulnerability
  • Angjie ERP cwsqry.asmx SQL Injection Vulnerability
  • Angjie ERP cwsoa.asmx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/ContractManager/ashx/Handler.ashx Arbitrary File Upload Vulnerability
  • Angjie ERP cwsapprove.asmx SQL Injection Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/MicroMall/ashx/Handler.ashx Arbitrary File Upload Vulnerability
  • Maternity Center ERP Management Cloud Platform Page/ICManager/ashx/Handler.ashx Arbitrary File Upload Vulnerability
  • Anmei Digital Hotel Broadband Operation System get_user_enrollment.php SQL Injection Vulnerability
  • Yonyou NC rmwebImage/download SQL Injection Vulnerability
  • Yonyou U8 Cloud MARosterPhotoServlet SQL Injection Vulnerability
  • Synway SMG Gateway Management Software 9-12ping.php Remote Code Execution Vulnerability (CVE-2025-1448)
  • Shikong Zhiyou Enterprise Process Control System updater.getStudioFile Arbitrary File Read Vulnerability
  • Shikong Zhiyou Enterprise Process Control System updater.startUpdateStudio XXE Vulnerability
  • Yinda Huizhi Comprehensive Management Platform login.aspx SQL Injection Vulnerability
  • Baiyi Cloud Asset Management Operation System feeStandard.Apply.save2.php SQL Injection Vulnerability
  • Baiyi Cloud Asset Management Operation System admin.house.collect.php SQL Injection Vulnerability (CVE-2025-1464)
  • Weaver e-office sms_page.php SQL Injection Vulnerability
  • Weaver e-office flow_xml.php SQL Injection Vulnerability
  • Weaver e-office attendance.wsdl.php SQL Injection Vulnerability
  • Weaver e-office notify.wsdl.php SQL Injection Vulnerability
  • Weaver e-office online_person.wsdl.php SQL Injection Vulnerability
  • Weaver e-office validate_sort.php SQL Injection Vulnerability
  • Weaver e-office content_-4.php SQL Injection Vulnerability
  • Weaver e-office block_content.php SQL Injection Vulnerability
  • Weaver e-office word_update.php SQL Injection Vulnerability
  • Weaver e-office freerunimgflow.php SQL Injection Vulnerability
  • Weaver e-office runimgflow.php SQL Injection Vulnerability
  • Anmei Digital Hotel Broadband Operation System list_qry.php SQL Injection Vulnerability
  • Anmei Digital Hotel Broadband Operation System get_ip.php SQL Injection Vulnerability
  • Yonyou NC/NCC File Server Configuration Management FsConsoleService SQL Injection Vulnerability
  • Yonyou NC and NC Cloud System IBapIOService SQL Injection Vulnerability
  • Wanhu ezOFFICE selectCommentField.jsp SQL Injection Vulnerability
  • Weaver e-office sms.wsdl.php SQL Injection Vulnerability
  • Weaver e-office user.wsdl.php SQL Injection Vulnerability
  • Weaver e-office mobile.wsdl.php SQL Injection Vulnerability
  • Weaver e-office list.wsdl.php SQL Injection Vulnerability
  • Weaver e-office dept.wsdl.php SQL Injection Vulnerability
  • Weaver e-office login.wsdl.php SQL Injection Vulnerability
  • Weaver e-office email.wsdl.php SQL Injection Vulnerability
  • DedeCMS V5.7.117 (Latest Version) RCE
  • Yonyou NC LfwFileUploadServlet Arbitrary File Upload Vulnerability
  • Yonyou NC importTemplate XML Entity Injection (XXE) Vulnerability
  • EKing Management Easy FileDownload.ihtm Arbitrary File Read Vulnerability
  • Yonyou U8 Cloud console.loadRes.d Arbitrary File Read Vulnerability
  • Ruijie-EWEB timeout.php Command Injection Vulnerability
  • Yonyou NC pkevalset SQL Injection Vulnerability
  • Ruijie-EWEB timeout.php File Read Vulnerability
  • Yonyou NC portalpage/importPml SQL Injection Vulnerability
  • Ruijie-EWEB timeout.php File Upload Vulnerability
  • Yonyou NC complainjudge SQL Injection Vulnerability
  • FastJson Malformed Unicode Bypass WAF, Traffic Detection
  • Ruijie-EWEB patch.php Command Injection Vulnerability
  • Hanta Technology Internet Behavior Management System tracert.php Command Injection Vulnerability
  • Hanta Technology Internet Behavior Management System ping.php Command Injection Vulnerability
  • Bosi Foreign Trade Management System DCreceiveBox.jsp Multiple SQL Injection Vulnerabilities
  • Wanhu OA ajax_checkUserNum.jsp SQL Injection Vulnerability
  • Wanhu OA selectAmountField.jsp SQL Injection Vulnerability
  • Wanhu OA DocumentHistory.jsp SQL Injection Vulnerability
  • Yonyou U8 Cloud QuerySoapServlet SQL Injection Vulnerability
  • Wanhu OA getNextAutoCode.jsp SQL Injection Vulnerability
  • Lanling Smart Collaboration Platform fl_define_edit.aspx SQL Injection Vulnerability
  • Weaver OA ReceiveTodoRequestByXml XML Entity Injection Vulnerability
  • Wanhu OA public/iSignatureHTML.jsp/Service.jsp SQL Injection Vulnerability
  • Wanhu OA selectPopTable.jsp SQL Injection Vulnerability
  • Wanhu OA govdocumentmanager_sendfile_gd.jsp SQL Injection Vulnerability
  • Lanling EKP sys/webservice/elecPsealUseWebService File Read Vulnerability
  • Baizhuo Smart Management Platform autheditpwd.php SQL Injection Vulnerability
  • Baizhuo Smart Management Platform licence.php File Upload Vulnerability
  • Baizhuo Smart Management Platform uploadfile.php File Upload Vulnerability
  • Baizhuo Smart Management Platform useratte/layer_swich_conf.php Arbitrary File Deletion Vulnerability
  • Ruijie-EWEB flwo.control.php Command Injection Vulnerability
  • Unibox Router /billing/logout.php Command Execution Vulnerability
  • Shikong Zhiyou Enterprise Process Control System indexService.notice SQL Injection Vulnerability
  • Ruijie-EWEB check.php File Read Vulnerability
  • JeeWMS cgAutoListController.do SQL Injection Vulnerability
  • JeeWMS druid Unauthorized Access Vulnerability
  • Yonyou NC cpRadarImage/download SQL Injection Vulnerability
  • NetMizer Log Management System troubleip.php Command Execution Vulnerability
  • NetMizer Log Management System weixin.php Command Execution Vulnerability
  • NetMizer Log Management System weibo.php Command Execution Vulnerability
  • NetMizer Log Management System search.php Command Execution Vulnerability
  • NetMizer Log Management System qq.php Command Execution Vulnerability
  • NetMizer Log Management System mail.php Command Execution Vulnerability
  • NetMizer Log Management System dologin.php SQL Injection Vulnerability
  • NetMizer Log Management System connect.php Command Execution Vulnerability
  • NetMizer Log Management System hostdelay.php Command Execution Vulnerability
  • NetMizer Log Management System getlogin.php SQL Injection Vulnerability
  • NetMizer Log Management System dirlist.php Directory Traversal Vulnerability (CNVD-2017-37549)
  • NetMizer Log Management System position.php Command Execution Vulnerability
  • Yonyou NC IServiceEntryPoint XXE Vulnerability
  • Yonyou NC listUserSharingEvents SQL Injection Vulnerability
  • Yonyou NC viewPsnCard/download SQL Injection Vulnerability
  • JeeWMS iconController.do Arbitrary File Upload Vulnerability
  • JeeWMS commonController.do Arbitrary File Upload Vulnerability (CVE-2024-57761)
  • Synway SMG Gateway Management Software 9-13pcap.php Command Injection Vulnerability
  • Synway SMG Gateway Management Software 9-2radius.php Command Injection Vulnerability
  • Sanhui SMG Gateway Management Software down.php Arbitrary File Read Vulnerability
  • Hanta Technology Internet Behavior Management System cappkt.php Command Injection Vulnerability
  • Salia PLCC check.php Unauthorized Access Leading to Information Disclosure
  • Yinda Huizhi Comprehensive Management Platform PPlugList.ashx SQL Injection Vulnerability
  • Wanhu ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL Injection Vulnerability
  • Yinda Huizhi Comprehensive Management Platform ADTag_Info.ashx SQL Injection Vulnerability
  • JeeWMS AuthInterceptor Permission Bypass Vulnerability
  • Yinda Huizhi Comprehensive Management Platform SysMenuScheme.ashx SQL Injection Vulnerability
  • Salia PLCC nwcheckexec.php Command Execution Vulnerability
  • Yonyou U8 CRM biztype.php SQL Injection Vulnerability
  • Lingdang CRM Playforrecord.php File Read Vulnerability
  • Salia PLCC check_req.php Command Execution Vulnerability
  • JeeWMS cgformTemplateController.do File Read Vulnerability
  • Yonyou NC and NC Cloud System getBapTableDatas SQL Injection Vulnerability
  • Optilink Management System gene.php Command Execution Vulnerability
  • NetMizer Log Management System terminals.php SQL Injection Vulnerability
  • Yonyou U8 CRM checkselectworksheet.php SQL Injection Vulnerability
  • Weaver e-office SignatureDel.php SQL Injection Vulnerability
  • Weaver e-office upload.php File Upload Vulnerability
  • Weaver e-office OfficeServer.php File Upload Vulnerability
  • Weaver e-office OfficeServer.php File Read Vulnerability
  • Weaver e-office OfficeServer2.php File Read Vulnerability
  • Ruijie-EWEB common.php File Read Vulnerability
  • Ruijie-EWEB dns.php File Read Vulnerability
  • Weaver e-office OfficeServer2.php File Upload Vulnerability
  • Yonyou U8 CRM ajaxgetborrowdata.php SQL Injection Vulnerability
  • Ruijie-EWEB download.php File Read Vulnerability
  • Yonyou U8 CRM objectview.php SQL Injection Vulnerability
  • Ruijie-EWEB dhcp.php File Read Vulnerability
  • Ruijie-EWEB ipam.php File Read Vulnerability
  • Unibox Router authentication/test_userlogin.php Command Execution Vulnerability
  • Ruijie-EWEB cli.php Command Injection Vulnerability
  • Unibox Router network/checkstatus_ping.php Command Execution Vulnerability
  • MetaCRM Customer Relationship Management System sendfile.jsp Arbitrary File Upload Vulnerability
  • Beijing Shikong Zhiyou ERP System updater.uploadStudioFile File Upload Vulnerability
  • Weaver E-cology js/hrm/getdata.jsp SQL Injection Vulnerability
  • Hanwang eFacePass Smart Park Management Platform Authorization Activation Bypass + Enable JVM Remote Debugging
  • Yonyou NC uncancelEvent SQL Injection Vulnerability
  • Yonyou NC ActivityNotice/export SQL Injection Vulnerability
  • Tongda OA OfficeTask udp 2397 Port SQL Injection Vulnerability Detection Tool
  • Tongda OA OfficeTask udp 2397 Port Remote Code Execution RCE Detection Tool
  • Hongjing Human Resources Management System HrpService Multiple XXE Vulnerabilities
  • Unibox postprosa.php SQL Injection Vulnerability
  • Yonyou NC deleteEvent SQL Injection Vulnerability
  • Hongjing Human Resources Management System HrpService SQL Injection Vulnerability
  • Hongjing Human Resources Management System DigestDownLoad SQL Injection Vulnerability
  • Hongjing Human Resources Management System HrChangeInfoService SQL Injection Vulnerability + XXE Vulnerability
  • Yonyou NC changeEvent SQL Injection Vulnerability
  • Yonyou NC /mp/view SQL Injection Vulnerability
  • Shikong Zhiyou Enterprise Process Control System getRemoteAddr Design Flaw Vulnerability
  • Yonyou NC oacofile/down File Read/Delete Vulnerability
  • Yonyou NC qrySubPurchaseOrgByParentPk SQL Injection Vulnerability
  • Meite CRM ws XXE Vulnerability
  • Meite CRM fileUpAndDown Deserialization Code Execution Vulnerability
  • Meite CRM getFile Arbitrary File Read and Deserialization Vulnerability
  • Baiyi Cloud Asset Management Operation System make SQL Injection Vulnerability
  • Yonyou NC loadDoc.ajax File Read Vulnerability
  • Western Digital My Cloud NAS multi_uploadify.php File Upload Vulnerability
  • Western Digital My Cloud NAS chk_vv_sharename.php Command Execution Vulnerability
  • Western Digital My Cloud NAS login_checker.php Permission Bypass Vulnerability
  • Yinda Huizhi Comprehensive Management Platform ADTag.ashx SQL Injection Vulnerability
  • Salia PLCC firmware.php Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryVehicleAccessRecord.do SQL Injection Vulnerability
  • Esafenet Electronic Document Security Management System AppExamList.jsp SQL Injection Vulnerability
  • Wanhu OA jigeObj_iframe.jsp SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform quertDgmOpenRecord.do SQL Injection Vulnerability
  • Wanhu OA name_judge.jsp SQL Injection Vulnerability
  • Jinhe OA DealXml.aspx XXE Vulnerability
  • Jinhe OA CheckPwd.aspx XXE Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform searchSystemRoles.do SQL Injection Vulnerability
  • Jinhe OA FileUpload.aspx File Read Vulnerability
  • Dongsheng Logistics Software DsWebService.asmx Multiple SQL Injection Vulnerabilities
  • Dongsheng Logistics Software UpdateCustomMainfast XXE Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryUserLogs.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryDoorInfoList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryOpenDoorLogs.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryFeedBackRecords.do SQL Injection Vulnerability
  • Dongsheng Logistics Software Chfee_hexiao/GetDataList SQL Injection Vulnerability
  • Esafenet Electronic Document Security Management System WorkFlowAction SQL Injection Vulnerability
  • Jinhe OA DailyTaskListInfo.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software WorkFlowGridSource.aspx SQL Injection Vulnerability
  • Puhua Powerpms FileBrowserPdf.ashx SQL Injection Vulnerability
  • Puhua Powerpms GetFilesData SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform PermissionPersonController Multiple SQL Injection Vulnerabilities
  • Hanwang eFacePass Comprehensive Management Platform resourceUploadFile.do Arbitrary File Upload Vulnerability
  • Meite CRM headimgsave SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform mobiMeetingApp/uploadMeetingFile.do Arbitrary File Upload Vulnerability
  • Meite CRM mobileupload.jsp Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform exportResourceByFilePath.do Arbitrary File Read Vulnerability
  • MetaCRM Customer Relationship Management System download-new.jsp Arbitrary File Read Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getValidPersonForFirst.do SQL Injection Vulnerability
  • Fumeng Cloud CRM GetPic.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getFirstEmp.do SQL Injection Vulnerability
  • Dongsheng Logistics Software GetDataListCA SQL Injection Vulnerability
  • Fumeng Cloud CRM GetImage.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software WmsZXFeeGridSource.aspx SQL Injection Vulnerability
  • Jinhe OA ModuleTaskView.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getDoors.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform meetingPersonal/uploadMeetingFile.do Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryAntisubmarineList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform Meeting Multiple SQL Injection Vulnerabilities
  • Jinhe OA IsHaveFTask.aspx XXE + SQL Injection Vulnerability
  • Jinhe OA IsHaveFTask.aspx XXE + SQL Injection Vulnerability (duplicate)
  • Fumeng Cloud CRM GetIcon.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform uploadMapFile.do Arbitrary File Upload Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform updateVisitorMapConfig.do Arbitrary File Upload Vulnerability
  • Jinhe OA TaskReportConfirm.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getValidEmpForGroup.do SQL Injection Vulnerability
  • Jinhe OA AddTask.aspx XXE + SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryMeetingFile.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform wxLogin.do Unauthorized Access Leading to Sensitive Information Leak
  • Hanwang eFacePass Comprehensive Management Platform addVisitDeviceAppointmentInfoTest.do fastjson Deserialization RCE Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryAlarmEvent.do SQL Injection Vulnerability
  • Jinhe OA TaskTreeJSON.aspx SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryBlackList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform fileDownload.do Arbitrary File Read Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform imgDownload.do Arbitrary File Read Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform getGroupEmployee.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform queryManyPeopleGroupList.do SQL Injection Vulnerability
  • Hanwang eFacePass Comprehensive Management Platform Permission Bypass Vulnerability
  • MetaCRM Customer Relationship Management System sendsms.jsp Arbitrary File Upload Vulnerability
  • CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool (Scan + Exploit)
  • Tiandi Weiye Easy7 exportGisObj File Read Vulnerability
  • Sangfor Operational Security Management System add_DNS Remote Command Execution Vulnerability
  • Tiandi Weiye Easy7 getCurrentUserInquestRooms_ZHGL SQL Injection Vulnerability
  • Yonyou U8Cloud /u8cloud/openapi/ce.paper.query SQL Injection Vulnerability
  • Feiniu System (fnOS) app-center-static Directory Traversal Leading to Arbitrary File Read + Command Execution Vulnerability
  • Jinhe OA EpassInitTakenSnCheck.aspx, EpassInitTakenSnExec.aspx, EpassInitTakenSnInva.aspx, EpassValidate.aspx XXE + SQL Injection Vulnerabilities
  • Dongsheng Logistics Software /MvcShipping/MsBaseInfo/GetProParentModuTreeList SQL Injection Vulnerability
  • Jinhe OA JHSoft.Web.H5SiteControl/xmlhttp.aspx XXE Vulnerability
  • Dongsheng Logistics Software CompanysAccountGridSource.aspx SQL Injection Vulnerability
  • Jinhe OA Jhsoft.Web.dossier/XMLHttp.aspx XXE Vulnerability
  • Jinhe OA JHSoft.Web.Departments/XmlHttp.aspx XXE + SQL Injection Vulnerability
  • Fumeng Cloud CRM lkpClientsCust.aspx SQL Injection Vulnerability
  • Jinhe OA JHSoft.Web.CrmSystemSet/XMLHttp.aspx XXE Vulnerability
  • Fumeng Cloud CRM AjaxWriteMail.ashx SQL Injection Vulnerability
  • Jinhe OA ExamineNodCommisionDefault.aspx XXE Vulnerability
  • BigAnt Instant Messaging System upload_file Arbitrary File Upload Vulnerability
  • Tiandi Weiye Easy7 getActiveEffectTemp SQL Injection Vulnerability
  • Tiandi Weiye Easy7 downloadWordRecord File Read Vulnerability
  • Tiandi Weiye Easy7 queryPassword Information Disclosure Vulnerability
  • Tiandi Weiye Easy7 queryUserbyDesc SQL Injection Vulnerability
  • Tiandi Weiye Easy7 downloadNote File Read Vulnerability
  • Tiandi Weiye Easy7 uploadCheckImg File Upload Vulnerability
  • Tiandi Weiye Easy7 uploadMapServerBgImage File Upload Vulnerability
  • Tiandi Weiye Easy7 queryDataByTypeEx SQL Injection Vulnerability
  • Tiandi Weiye Easy7 downloadResource File Read Vulnerability
  • Dongsheng Logistics Software OpSailingDateListHtmlGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software OpSailingDateInfoGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software HtmlSearchServiceLCL.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software CrmProxyMailListHtmlGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software CrmProxyMailListGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software ModuleGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software AttributeGridSource.aspx SQL Injection Vulnerability
  • Dongsheng Logistics Software StorageController Multiple SQL Injection Vulnerabilities
  • Dongsheng Logistics Software MsOpSeaeController Multiple SQL Injection Vulnerabilities
  • Dongsheng Logistics Software IPLimitController SQL Injection Vulnerability
  • BigAnt Instant Messaging System DispersedOrgController Arbitrary File Upload Vulnerability
  • BigAnt Instant Messaging System plus_get_favicon Arbitrary File Upload Vulnerability
  • Dongsheng Logistics Software MsAnnounceController SQL Injection Vulnerability
  • BigAnt Instant Messaging System PublicController Arbitrary File Read Vulnerability
  • Dongsheng Logistics Software MsChDuiController Multiple SQL Injection Vulnerabilities
  • Jiujiayi Management System picHY.ashx SQL Injection Vulnerability
  • BigAnt Instant Messaging System Installer Second-Order Injection Leading to Remote Code Execution Vulnerability
  • Qinglong Panel Latest Version v2.20.1 Authentication Bypass Leading to RCE | Qinglong Panel Authentication Bypass Leading to Unauthorized Remote Code Execution (RCE) Vulnerability Analysis and Reproduction.md
  • BigAnt Instant Messaging System moveDept SQL Injection Vulnerability
  • Jiujiayi Management System Ajax_XT.ashx SQL Injection Vulnerability
  • Jiujiayi Management System PrivilegedCodeDestroy.asmx SQL Injection Vulnerability
  • BigAnt Instant Messaging System updateLoginName SQL Injection Vulnerability
  • Sangfor Operational Security Management System change_net Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System del_net Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System del_route Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System getLdap Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System save_SNMP Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System csspost/update Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System upload_file Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System del_patch Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System install_patch Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System remote_get_clip_img Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System uninstall_patch Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System get_clip_img Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System down_load Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System port_validate Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System save_strategy Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System generate_certificate Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System update_date Remote Command Execution Vulnerability
  • Sangfor Operational Security Management System upload_CN Remote Command Execution Vulnerability
  • Shenkete LEAN MES System ChooseLineAndRes.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System /Handler/SMTLoadingMaterial.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System EquipmentTree.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System UploadPortraits.ashx File Upload Vulnerability
  • Shenkete LEAN MES System /Handler/FileSync.ashx Arbitrary File Read/Upload/Delete/SSRF and Other Multiple Vulnerabilities
  • Shenkete LEAN MES System DownLoad.aspx Arbitrary File Read Vulnerability
  • Shenkete LEAN MES System /Handler/MobileAppLogin.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System PrintUpdate.ashx Arbitrary File Read/Upload/Delete Vulnerability
  • Shenkete LEAN MES System TestManagePlatform.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System UploadHander.ashx File Upload Vulnerability
  • Shenkete LEAN MES System CreateMenus.aspx Arbitrary File Upload Vulnerability
  • Shenkete LEAN MES System AutoComplete.ashx SQL Injection Vulnerability
  • Shenkete LEAN MES System ChooseImage.aspx Arbitrary File Upload/Delete Vulnerability
  • Shenkete LEAN MES System SetDataSource.aspx SQL Injection Vulnerability
  • CLIProxyAPI /v1internal:method Unauthorized Access Vulnerability
  • shannon: Autonomous AI Penetration Testing Tool for Web Applications and APIs, Supporting Code-Aware Dynamic Vulnerability Discovery and Automated PoC Verification
  • Fumeng Cloud CRM AjaxTrackInfo.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM DingHandler.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM PriceList.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM WorkFlowHandler.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM AddInquiry.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM OrderLook.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM FormDefault.aspx, FormDefaultCommon.aspx Multiple SQL Injection Vulnerabilities
  • Tiandi Weiye Easy7 queryRoomName SQL Injection Vulnerability
  • Tiandi Weiye Easy7 queryRoomConfigs SQL Injection Vulnerability
  • Tiandi Weiye Easy7 UploadOwnerImage.jsp File Upload Vulnerability
  • mdserver-web (Kuafu Panel) <= 0.18.4 Multiple Unauthorized Access + Information Leak + RCE Vulnerability Analysis
  • Tiandi Weiye Easy7 GetOtherDomainServer.jsp SSRF Vulnerability
  • Tiandi Weiye Easy7 getInquestIdByRoomId SQL Injection Vulnerability
  • Tiandi Weiye Easy7 getInquestRoomChannelInfo SQL Injection Vulnerability
  • V2Board Information Leak Vulnerability Leading to Privilege Bypass and Account Takeover (CVE-2026-39912) Analysis and Reproduction
  • Tiandi Weiye Easy7 isHashCameraAuth SQL Injection Vulnerability
  • Tiandi Weiye Easy7 getConfigInfoList SQL Injection Vulnerability
  • Tiandi Weiye Easy7 capture Command Execution Vulnerability
  • Tiandi Weiye Easy7 uploadLedImage File Upload Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/delete File Delete Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/downloadFile File Read Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/uploadIdsHttpFile SSRF + File Write Vulnerability
  • Fumeng Cloud CRM CustomizeReportSelectMould.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ClientNameCard.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM BusinessPrice.aspx SQL Injection Vulnerability
  • cPanel WHM Permission Bypass Leading to RCE [CVE-2026-41940] | CVE-2026-41940 Vulnerability Analysis
  • Fumeng Cloud CRM BusinessPriceListList.aspx SQL Injection Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/uploadFile File Upload Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/deleteFile File Delete Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/file/download File Read Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/user/getAuthorityByUserId SQL Injection Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/user/IsPermissible SQL Injection Vulnerability
  • Tiandi Weiye Easy7 /Easy7/rest/user/getAuthorityByUserId SQL Injection Vulnerability (duplicate)
  • Fumeng Cloud CRM BusinessPriceOk.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM BusinessPriceReport.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM BusiPriceOkPrint.aspx SQL Injection Vulnerability
  • Yonyou NC System IMsgCenterWebService SQL Injection Vulnerability
  • Fumeng Cloud CRM LoadMailAttachFile.aspx Arbitrary File Read/Move
  • Fumeng Cloud CRM Inquiry.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM Price_detail.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductGrid.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM AjaxProductList.ashx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductList.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM Product_field.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductDetail.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductSelect.aspx SQL Injection Vulnerability
  • CVE-2026-8054 High-Risk Pre-auth SQL Injection Vulnerability Analysis and Reproduction | CVE-2026-8054
  • Fumeng Cloud CRM ProviderList.aspx SQL Injection Vulnerability
  • Fumeng Cloud CRM ProductDetail.aspx SQL Injection Vulnerability
  • BigAnt Instant Messaging System user_expire_post SQL Injection Vulnerability
  • BigAnt Instant Messaging System uploadMultipleFile Arbitrary File Upload Vulnerability
  • BigAnt Instant Messaging System Pan/Upload/upload File Upload Vulnerability
  • BigAnt Instant Messaging System getFileTrueAddress SQL Injection Vulnerability
  • BigAnt Instant Messaging System downloadSharedFile Arbitrary File Read Vulnerability
  • BigAnt Instant Messaging System clearUserDevice SQL Injection Vulnerability