2020-04-26 18:05:02 +08:00
|
|
|
# Vulnerability List
|
|
|
|
|
2020-04-28 10:50:32 +08:00
|
|
|
Vulnerability list that [Goby](https://gobies.org/) can **exploit**.
|
|
|
|
|
2020-12-04 16:47:08 +08:00
|
|
|
- [CVE-2020-24571](NexusDB/CVE-2020-24571)
|
2020-12-16 10:44:06 +08:00
|
|
|
- [CVE-2020-17530](Struts2/S2-061(CVE-2020-17530))
|
2020-12-04 16:47:08 +08:00
|
|
|
- [CVE-2020-14864](BusinessIntelligence/CVE-2020-14864)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2020-16846](SaltStack/CVE-2020-16846)
|
|
|
|
- [CVE-2020-14825](WebLogic/CVE-2020-14825)
|
2020-11-26 19:24:23 +08:00
|
|
|
- [CVE-2020-13942](Unomi/CVE-2020-13942)
|
2020-05-25 20:17:10 +08:00
|
|
|
- [CVE-2020-11651](SaltStack/CVE-2020-11651)
|
2020-06-24 09:45:19 +08:00
|
|
|
- [CVE-2020-10189](ManageEngine/CVE-2020-10189)
|
2020-11-27 10:35:43 +08:00
|
|
|
- [CVE-2020-9496](OFBiz/CVE-2020-9496)
|
2020-06-08 19:56:07 +08:00
|
|
|
- [CVE-2020-8515](DrayTek/CVE-2020-8515)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2020-8209](Citrix/CVE-2020-8209)
|
2020-04-26 18:05:02 +08:00
|
|
|
- [CVE-2020-7961](LiferayPortal/CVE-2020-7961)
|
2020-06-10 14:18:04 +08:00
|
|
|
- [CVE-2020-7247](OpenSMTPD/CVE-2020-7247)
|
2020-07-17 15:52:25 +08:00
|
|
|
- [CVE-2020-5410](Spring/CVE-2020-5410)
|
2020-07-23 19:27:52 +08:00
|
|
|
- [CVE-2020-3452](Cisco/CVE-2020-3452)
|
2020-04-26 18:05:02 +08:00
|
|
|
- [CVE-2020-2555](WebLogic/CVE-2020-2555)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2020-2551](WebLogic/CVE-2020-2555)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2020-1948](Dubbo/CVE-2020-1948)
|
2020-05-06 22:07:10 +08:00
|
|
|
- [CVE-2020-1938](Tomcat/CVE-2020-1938)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2019-19781](Citrix/CVE-2019-19781)
|
2020-04-28 10:50:32 +08:00
|
|
|
- CVE-2019-17558
|
2020-04-28 14:04:34 +08:00
|
|
|
- [CVE-2019-16759](vBulletin/CVE-2019-16759)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2019-15107](Webmin/CVE-2019-15107)
|
2020-04-28 14:04:34 +08:00
|
|
|
- [CVE-2019-10758](Mongo-Express/CVE-2019-10758)
|
2020-12-04 16:47:08 +08:00
|
|
|
- [CVE-2019-9670](Zimbra/CVE-2019-9670)
|
2020-07-17 15:52:25 +08:00
|
|
|
- [CVE-2019-3799](Spring/CVE-2019-3799)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2019-0604](SharePoint/CVE-2019-0604)
|
2020-06-08 19:56:07 +08:00
|
|
|
- [CVE-2018-13379](FortiOS/CVE-2018-13379)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2018-1000861](Jenkins/CVE-2018-1000861)
|
2020-11-27 10:35:43 +08:00
|
|
|
- [CVE-2018-8033](OFBiz/CVE-2018-8033)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2018-7600](Drupal/CVE-2018-7600)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2018-1273](Spring/CVE-2018-1273)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2017-1000353](Jenkins/CVE-2017-1000353)
|
2020-11-24 10:27:39 +08:00
|
|
|
- [CVE-2017-12615](Tomcat/CVE-2017-12615)
|
2020-07-06 18:29:39 +08:00
|
|
|
- [CVE-2017-11610](Supervisor/CVE-2017-11610)
|
2020-04-28 10:50:32 +08:00
|
|
|
- CVE-2017-9791(S2-048)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2017-5638(S2-046)](Struts2/S2-046(CVE-2017-5638))
|
2020-05-25 20:17:10 +08:00
|
|
|
- [CVE-2016-4437](Shiro/CVE-2016-4437)
|
2020-04-26 18:41:15 +08:00
|
|
|
- [CVE-2016-3088](ActiveMQ/CVE-2016-3088)
|
2020-04-28 10:50:32 +08:00
|
|
|
- CVE-2015-5254
|
2020-04-28 10:29:03 +08:00
|
|
|
- [CVE-2013-2251(S2-016)](Struts2/S2-016(CVE-2013-2251))
|
2020-12-31 11:22:44 +08:00
|
|
|
- [Yonyou_NC_RCE_with_file_upload](Yonyou/Yonyou_NC_RCE_with_file_upload)
|
2020-12-04 16:47:08 +08:00
|
|
|
- [Apache_Nifi_Api_RCE](NiFi/Api_RCE)
|
2020-12-31 11:22:44 +08:00
|
|
|
- [VMware_vCenter_File_Read](VMware/VMware_vCenter_File_Read)
|
|
|
|
- [TongdaOA_anyfile_delete_getshell](TongdaOA/TongdaOA_anyfile_delete_getshell)
|
|
|
|
- [TongdaOA_file_include_getshell](TongdaOA/TongdaOA_file_include_getshell)
|
2020-04-28 10:29:03 +08:00
|
|
|
- [ThinkPHP2.1_RCE](ThinkPHP/ThinkPHP2.1_RCE)
|
2020-12-31 11:22:44 +08:00
|
|
|
- [ThinkPHP5_RCE](ThinkPHP/ThinkPHP5_RCE)
|
|
|
|
- [default_admin_account_rce](HybridDVR/default_admin_account_rce)
|
|
|
|
- [IG3100_telnet_default_account](ANTlabs/IG3100_telnet_default_account)
|