admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 09:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

ADD drupal_6340

Browse Source
This commit is contained in:
mahui 2020-12-13 22:50:58 +08:00
parent 0c9b6a34ed
commit e4fcb65e0b
5 changed files with 5 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
Nexus/CVE-2019-7238/CVE-2019-7238.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 250 KiB

BIN
Seeyon/htmlofficeservlet_uploadfile_getshell/zhiyuan_htmlofficeservlet_getshell.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 220 KiB

BIN
Unraid/CVE-2020-5847/CVE-2020-5847.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 333 KiB

10
Unraid/CVE-2020-5847/README.md
View File

@ -1,11 +1,11 @@
# CVE-2020-24571 NexusDB path traversal # CVE-2020-5847 Unraid 6.8.0 authenticate bypass remote code execution
NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal. Unraid是一套主要用于个人和小型企业的操作系统。Unraid 6.8.0及之前版本中存在安全漏洞。攻击者可利用该漏洞绕过访问控制并执行代码，从而获取服务器权限。
**Affected version**: nexusdb < 4.50.23 **Affected version**: Unraid <= 6.8.0
**[FOFA](https://fofa.so/result?q=header%3D%22Server%3A+NexusDB%22&qbase64=aGVhZGVyPSJTZXJ2ZXI6IE5leHVzREIi&file=&file=) query rule**: header="Server: NexusDB" **[FOFA](https://fofa.so/result?qbase64=Ym9keT0iL3dlYkd1aS9pbWFnZXMvZ3JlZW4tb24ucG5nIg) query rule**: body="/webGui/images/green-on.png"
# Demo # Demo
![](CVE-2020-24571.gif) ![](CVE-2020-5847.gif)

11
WebSphere/CVE-2020-4450/README.md
View File

@ -1,11 +0,0 @@
# CVE-2020-24571 NexusDB path traversal
NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal.
**Affected version**: nexusdb < 4.50.23
**[FOFA](https://fofa.so/result?q=header%3D%22Server%3A+NexusDB%22&qbase64=aGVhZGVyPSJTZXJ2ZXI6IE5leHVzREIi&file=&file=) query rule**: header="Server: NexusDB"
# Demo
![](CVE-2020-24571.gif)