Giter Club home page Giter Club logo

yougar0.github.io's Introduction

前言

基于零组公开漏洞库

Change Log

  • 2021-03-31 VMware vRealize Operations Manager SSRF漏洞 CVE-2021-21975
  • 2021-03-31 DD-WRT UPNP缓冲区溢出漏洞 CVE-2021-27137
  • 2021-03-31 中新金盾信息安全管理系统 默认超级管理员密码漏洞
  • 2021-03-31 帆软报表 v8.0 任意文件读取漏洞 CNVD-2018-04757
  • 2021-03-31 Jupyter Notebook 未授权访问远程命令执行漏洞
  • 2021-03-29 Mybb-XSS_SQL_RCE-POC(CVE-2021-27890 & CVE-2021-27889)
  • 2021-03-29 JD-FreeFuck 后台命令执行漏洞
  • 2021-03-29 思福迪堡垒机 任意⽤户登录漏洞
  • 2021-03-29 （CVE-2020-25078）D-Link DCS系列监控 账号密码信息泄露漏洞
  • 2021-03-29 HIKVISION 流媒体管理服务器 后台任意文件读取漏洞 CNVD-2021-14544
  • 2021-03-25 蓝凌OA EKP 后台SQL注入漏洞 CNVD-2021-01363
  • 2021-03-24 Apache OFBiz RMI反序列化漏洞 CVE-2021-26295
  • 2021-03-24 MessageSolution 邮件归档系统EEA 信息泄露漏洞 CNVD-2021-10543
  • 2021-03-21 vCenter 6.5-7.0 RCE 漏洞检测POC(CVE-2021-21972)
  • 2021-03-19 Apache Solr 任意文件读取
  • 2021-03-19 F5 BIG-IP iControl RCE(CVE-2021-22986)
  • 2021-02-20 Apache Druid 远程代码执行漏洞（CVE-2021-25646）
  • 2021-01-13 CVE-2020-3452
  • 2021-01-04 添加 Beescms_v4.0 sql注入漏洞分析
  • 2020-12-29 添加 Docker 容器逃逸漏洞 (CVE-2020-15257)复现、gitlab-11.4.7远程代码执行漏洞及exp史诗级详细剖析
  • 2020-12-25 添加 狂雨CMS后台SQL代码执行、狂雨CMS后台文件包含getshell、狂雨CMS数据库备份地址爆破、MKCMS v7.0.3 sql注入漏洞审计、Nexus Repository Manager3 ProXXE分析(CVE-2020-29436)
  • 2020-12-21 添加 Apache Unomi远程代码执行漏洞复现-CVE-2020-13942
  • 2020-12-19 添加 PowerCreatorCms任意上传
  • 2020-12-14 添加 74cms v6.0.48模版注入+文件包含getshell,CVE-2019-11580 Atlassian Crowd RCE,s2-061
  • 2020-12-3 添加 ThinkAdmin未授权列目录任意文件读取(CVE-2020-25540)漏洞
  • 2020-11-17 添加 CVE-2020-26217 XStream XML反序列化远程代码执行，Citrix XenMobile CVE-2020-8209
  • 2020-11-3 添加 禅道<=12.4.2 后台getshell，windows本地提权漏洞，Linux本地提权漏洞
  • 2020-10-28 添加 s2-059,CVE-2020-14882 weblogic 未授权命令执行，（CVE-2020-14825）Weblogic反序列化漏洞
  • 2020-10-21 添加RuoYi CMS 任意文件读取漏洞
  • 2020-10-20 添加护网中的漏洞,CVE-2020-10189 Zoho ManageEngine反序列化RCE,Fastjson Payload汇总，修复%20造成的侧栏折叠问题

To-do

  • 在线版本

Web安全

  • 添加护网中的漏洞

系统安全

  • 完善系统提权漏洞

IOT安全

  • Cisco

  • （CVE-2020-3452）Cisco ASA/FTD 任意文件读取漏洞

    • Hikvision

  • （CVE-2017-7921）Hikvision IP Camera Access Bypass

    • Hisilicon

  • （CVE-2020-24214）Buffer%20overflow: definite DoS and potential RCE

  • （CVE-2020-24215）HiSilicon Backdoor password

  • （CVE-2020-24216）RTSP 未授权访问

  • （CVE-2020-24217）任意文件上传漏洞

  • （CVE-2020-24218）root access via telnet

  • （CVE-2020-24219）任意文件读取漏洞

    • ZTE

  • （CVE-2020-6871）ZTE R5300G4、R8500G4和R5500G4 未授权访问漏洞

  • 默认设备密码

yougar0.github.io's People

Contributors

yougar0 avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar

Forkers

wadewfsssss h1iba1 czz1233 sixteen250 harry1080 lwzxs xxcdd toolsec kk98kk0 mister-leo silentsoul04 h4ckth3w0r1d uuic pamentierx cxyzupup ekko-zhao dk47os3r secsystem baoayongga cronos996 pcanyi t4di5 aaasssqqqz tu-sj i3ef0xh4ck diannaofengzi t3nk0 ludashuai001 shellsniper octa moryyi poyhub j0hn30n lijiaxing1997 gcawliw jager-man zhzyker ja9er idlcode epic1028 offensive-defensive ppsuc hllcaiji123 mmk66123 dream-knight xunyang1 ml1236 bohr777 natsuk0 hacketthsu evi1hack stardustin 349821277 windsay xajhlhl swittertigeryeah f4cky0u heihuo8 bjliyanliang xxxxxyyyy hackedsb qianniaoge bbbfkl hlhai eqwadasd somnuszzg acheiii shawce guda04021 highgerms 0x24bin vtodream sunpeak jenny202402

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.