Code Monkey home page Code Monkey logo

2022-hw-poc's Introduction

2022-HW-POC

2022 护网行动 POC 整理

免责申明:此POC严禁用于任何非授权测试,请遵守法律底线!


泛微云桥e-Bridge存在SQL注入漏洞	2022/7/11	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-11894

Apache Commons远程代码执行漏洞(CVE-2022-33980)	2022/7/7	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-10567

GitLab远程代码执行漏洞(CVE-2022-2185)	2022/7/1	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-10296

泛微OA存在SQL注入漏洞(CNVD-2022-43843)	2022/6/30	新近真实漏洞	https://www.cnvd.org.cn/flaw/show/CNVD-2022-43843

通达OA存在代码执行漏洞	2020/8/20	历史真实漏洞	https://mp.weixin.qq.com/s/II1s-xwn4lD5_couvadI9g

用友U8-OA企业版存在SQL注入漏洞(CNVD-2022-31182)	2022/4/30	新近真实漏洞	https://www.cnvd.org.cn/flaw/show/CNVD-2022-31182

泛微OA存在命令执行漏洞(CNVD-2022-06870)	2022/2/13	新近真实漏洞	https://www.cnvd.org.cn/flaw/show/CNVD-2022-06870

FastJson代码执行漏洞		无已知公开的与情报对应的新近漏洞	

致远A8 getshell	2019/6/26	历史真实漏洞	https://cn-sec.com/archives/1101195.html

禅道存在SQL注入漏洞(CNVD-2022-42853)	新近真实漏洞	

FastJson代码执行漏洞 (CVE-2022-25845)	2022/5/23	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-7654

万户OA getshell		历史真实漏洞	http://cn-sec.com/archives/75986.html

蓝凌OA远程代码执行漏洞	2021/4/9	历史真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2021-13023

拓尔思mas5 getshell	2022/4/28	新近真实漏洞	https://www.little2pig.work/archives/trs-mas http://cn-sec.com/archives/960259.html

thinkphp远程代码执行漏洞	2018/12/9	历史真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-11895

jboss EAP /AS 6.远程代码执行	2019/12/11	历史真实漏洞	https://packetstormsecurity.com/files/167730/JBOSS-EAP-AS-6.x-Remote-Code-Execution.html https://s3.amazonaws.com/files.joaomatosf.com/slides/alligator_slides.pdf

thinkphp任意文件读取	2018/12/9	历史真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-11895

明御Web应用防火墙任意登录	2022/7/24	历史真实漏洞,安恒已辟谣存在新近漏洞	http://cn-sec.com/archives/1196646.html

Laravel存在命令执行漏洞(CNVD-2022-44351)	2022/6/7	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-8513

安恒web应用防火墙远程命令执行漏洞	2022/7/24	历史真实漏洞,安恒已辟谣存在新近漏洞	https://mp.weixin.qq.com/s/VdCjgxDL9qoAWIax5G3e0g http://cn-sec.com/archives/1196646.html

某软sdp软件定义边界系统命令执行漏洞		无已知公开的与情报对应的新近漏洞	

某软网络准入控制系统反序列化漏洞		无已知公开的与情报对应的新近漏洞	

某某服VPN存在远程缓冲区溢出漏洞(非web端口)		无已知公开的与情报对应的新近漏洞,深信服已辟谣,历史相关的漏洞见相关链接	https://security.sangfor.com.cn/index.php?m=&c=page&a=view&id=19 https://security.sangfor.com.cn/index.php?m=&c=page&a=view&id=18

某盟NF防火墙版本<6.0.3.198存在远程命令执行漏洞		无已知公开的与情报对应的新近漏洞	

qax天擎版本<6.7.0.4910存在安全漏洞		无已知公开的与情报对应的新近漏洞	

通达 OA 后台 SQL 注入漏洞	2022/7/25	新近真实漏洞	https://mp.weixin.qq.com/s/HU-KxA75PR3u47QOqKWktQ

通达 OA 后台文件上传漏洞	2022/7/25	新近真实漏洞	https://mp.weixin.qq.com/s/HU-KxA75PR3u47QOqKWktQ

华天动力OA前台任意文件上传漏洞	2022/7/25	存在性未确认,且大概率不影响最新版本	

启明星辰天玥网络安全审计系统SQL注入0day	2021/7/15	历史真实漏洞	https://woj.app/7183.html

uniview监控设备oday	2018/2/7	历史真实漏洞	https://vulners.com/zdt/1337DAY-ID-29739

蓝凌OA授权RCE和未授权RCE	2022/7/12	新近真实漏洞	https://mp.weixin.qq.com/s/zV4h5d9DrI7Nm49suSzIWw

PHP 8.1.0-dev RCE	2021/5/23	历史真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2021-27111

泛微Office 10 SQL注入漏洞	2021/8/13	历史真实漏洞	https://www.buaq.net/go-86552.html

org.webjars:dojo 包 <1.17.2 多个漏洞	2021/7/31	历史真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2021-3594

锐捷网络设备多个存在逻辑漏洞,可绕过身份验证登录多个系统	2022/6/21	新近真实漏洞	

疑似用友NC 0day	2021/11/15	历史真实漏洞	https://www.cnsrc.org.cn/hw/1911.html https://decoded.avast.io/janneduchal/analysis-of-attack-against-national-games-of-china-systems/

Coremail Air邮件客户端附件后缀名显示不正确	2022/7/26	新近真实漏洞,厂商已确认	https://community.icoremail.net/article/460?bsh_bid=5789296111

泛微 V9 文件上传漏洞	2022/7/26	存在性未确认	

小鱼易连疑似0day	2022/7/26	存在性未确认	

泛微 E-office 文件包含漏洞(CNVD-2022-43247)	2022/6/8	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-11900

泛微 E-office SQL 注入漏洞(CNVD-2022-43246)	2022/6/8	新近真实漏洞	https://nox.qianxin.com/vulnerability/detail/QVD-2022-11899

禅道 v16.5 SQL注入漏洞	2022/7/25	新近真实漏洞	https://github.com/z92g/ZentaoSqli

2022-hw-poc's People

Contributors

nex-s avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.