admin/GobyVuls
1
0 Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-24 08:54:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
635 Commits 1 Branch 0 Tags
master
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Goby a5de8e3be1 Add CVE-2025-68493 documentation 
Documented the Apache Struts XWork Component XML External Entity Injection Vulnerability (CVE-2025-68493) with details on impact and affected assets.
2026-01-15 17:07:47 +08:00
ActiveMQ/CVE-2016-3088
Update CVE-2016-3088.gif
2020-04-20 09:57:40 +08:00
ANTlabs/IG3100_telnet_default_account
Add antlabs_default_account.gif
2020-06-11 11:33:40 +08:00
Apache CouchDB/CVE-2022-24706
add : CVE-2022-24706
2022-05-20 12:22:32 +08:00
Apache OFBiz
add vul demo
2021-05-18 14:14:09 +08:00
Apache Tapestry/CVE-2021-27850
fix name
2021-07-02 19:05:16 +08:00
Arcadyan/CVE-2021-20090
add Arcadyan_Routers_Authentication_Bypassing_CVE_2021_20090
2021-08-04 20:40:11 +08:00
Atlassian/Confluence
add : CVE-2022-26134
2022-06-04 16:47:56 +08:00
AVCON-6/CNVD-2020-30193
Add CNVD-2020-30193
2021-08-18 10:58:33 +08:00
Bitbucket/CVE-2022-26133
add CVE-2022-26133
2022-04-21 15:47:39 +08:00
Bithighway/CNVD-2021-37007
Add CNVD-2021-37007
2021-08-25 17:45:55 +08:00
BruteForce/RDP
add RDP bruteforce
2020-12-11 10:10:28 +08:00
BusinessIntelligence/CVE-2020-14864
add CVE-2020-14864
2020-12-03 20:16:14 +08:00
Byzoro/CNVD-2021-40201
Add CNVD-2021-40201
2021-08-18 11:00:10 +08:00
Casdoor/CVE-2022-24124
add CVE-2021-44910、CVE-2022-24124
2022-03-25 16:06:36 +08:00
Chemex/CNVD-2021-15573
Add CNVD-2021-15573
2021-09-24 17:55:11 +08:00
CirCarLife/CVE-2018-12634
Add CVE-2018-12634
2021-09-16 18:02:47 +08:00
Cisco
add CVE-2022-20705
2022-04-08 16:39:26 +08:00
Citrix
add CVE-2020-8209
2020-11-20 10:54:38 +08:00
Clinical_Browsing_System
add Clinical Browsing System Boolean SQLi
2021-08-02 15:11:48 +08:00
COMMAX/Ruvie CCTV Bridge DVR Unauthorized
Add COMMAX Ruvie CCTV Bridge DVR Unauthorized
2021-08-18 11:02:41 +08:00
Consul/Consul_Service_API_RCE
add Consul_Service_API_RCE
2021-07-16 10:22:41 +08:00
Crestron
fix: CVE-2022-23178
2022-03-30 15:31:46 +08:00
CRMEB/DaTong_sid_sqli
Add CRMEB DaTong sid sqli
2021-09-16 18:00:53 +08:00
DocCMS/Doccms keyword sqli
Add Doccms keyword sqli
2021-08-30 18:46:30 +08:00
DotCMS/CVE-2022-26352
add: CVE-2022-26352
2022-05-07 11:09:38 +08:00
DrayTek/CVE-2020-8515
Add CVE-2020-8515
2020-06-08 16:22:05 +08:00
Druid/CVE-2021-25646
add CVE-2021-25646
2021-02-04 15:30:24 +08:00
Drupal
ADD drupal_6340
2020-12-13 20:00:27 +08:00
Dubbo/CVE-2020-1948
update README.md
2020-08-21 17:24:17 +08:00
Dwsurvey/Dwsurvey_3_2_Arbitrary_File_Read
Add Dwsurvey 3.2 Arbitrary File Read
2021-09-24 18:20:14 +08:00
ECOA/ECOA_Building_System
Add ECOA Building System multiple vulnerabilities
2021-09-16 18:11:27 +08:00
Eyoucms
fix image path
2021-08-04 20:43:19 +08:00
F5
add : CVE-2022-1388
2022-05-09 18:48:05 +08:00
Fastjson/CNVD-2017-02833
add CNVD-2017-02833
2020-11-06 22:51:39 +08:00
Flink
update CVE-2020-17518.gif
2021-01-08 12:09:19 +08:00
ForgeRock/CVE-2021-35464
add CVE_2021_35464
2021-07-01 11:31:21 +08:00
FortiLogger/CVE-2021-3378
add CVE-2021-3378
2021-07-22 17:56:35 +08:00
FortiOS/CVE-2018-13379
Update README.md
2020-06-08 19:53:04 +08:00
Geowebserver/5_3_3_Arbitrary_File_Read
Add Geowebserver 5.3.3 Arbitrary File Read
2021-09-10 14:40:26 +08:00
GlassFish/GlassFish Server
add: GlassFish_Server_Open_Source_Edition_3_01_Local_File_Inclusion
2022-05-07 11:10:51 +08:00
Gurock/CVE-2021-40875
Add CVE-2021-40875
2021-09-24 17:53:42 +08:00
HD-Network/CVE-2021-45043
add HD_Network_Local_File_Inclusion_CVE_2021_45043
2021-12-16 16:44:40 +08:00
Hongdian/CVE-2021-28149
Add CVE-2021-28149
2021-08-14 18:33:51 +08:00
Huahou/iRDM4000
Add iRDM4000 cookie bypass
2021-09-24 18:09:40 +08:00
HybridDVR/default_admin_account_rce
Add hybrid_dvr_default_admin_account_rce
2020-06-09 14:17:09 +08:00
imgs
Update verify.png
2020-04-03 10:42:47 +08:00
Intelbras Wireless/CVE-2021-3017
Add CVE-2021-3017
2021-08-25 17:47:48 +08:00
Jenkins
Add CVE-2017-1000353
2020-04-23 10:57:51 +08:00
Jetty
fix image path
2021-08-04 20:43:19 +08:00
JingHang/JingHang online marking Arbitrary File Upload
Add JingHang online marking Arbitrary File Upload
2021-08-14 18:40:00 +08:00
Kingsoft/get_file_content_php
Add Kingsoft V8V9 get_file_content.php File Read
2021-08-30 16:03:55 +08:00
KlogServer/CVE-2020-35729
add CVE-2020-35729
2021-08-02 14:45:40 +08:00
Kyan/Kyan_time_RCE
Add Kyan Network monitoring time RCE
2021-09-10 14:34:03 +08:00
Landray-OA
update Landray OA custom.jsp RCE
2021-07-01 18:27:01 +08:00
lanproxy/CVE-2021-3019
add CVE-2021-3019
2021-01-13 10:41:35 +08:00
LiferayPortal/CVE-2020-7961
Add CVE-2020-7961.gif
2020-06-08 11:00:22 +08:00
Log4j2
add: Horizon
2022-01-18 11:02:51 +08:00
ManageEngine
add CVE-2020-28653
2021-08-05 18:48:25 +08:00
MCms
add: Crestron_Hd_Md4X2_Credential_Disclosure_CVE_2022_23178
2022-01-26 16:04:16 +08:00
Microsoft/Exchange
add Exchange/CVE-2021-34473/Microsoft_Exchange_Server_Remote_Code_Execution_Vulnerability_CVE-2021-34473.gif
2021-08-30 19:50:12 +08:00
Mida_eFramework/CVE-2020-15920
add CVE-2020-15920
2021-08-02 14:50:23 +08:00
Mobinat Wireless Router
Add Mobinat Wireless Router system_log.cgi RCE
2021-08-14 18:47:09 +08:00
Mobotix/Mobotix_default_account
Add Mobotix_default_account
2020-04-23 10:51:10 +08:00
Mongo-Express/CVE-2019-10758
Add CVE-2019-10758
2020-04-28 12:31:55 +08:00
NETGEAR/DGND3700
add: NETGEAR DGND3700v2 c4 IPAddr RCE
2022-03-18 16:40:37 +08:00
Nexus/CVE-2019-7238
ADD neuxs_7238
2020-12-13 23:03:39 +08:00
NexusDB/CVE-2020-24571
add CVE-2020-24571
2020-12-04 09:54:47 +08:00
NiFi/Api_RCE
Update README.md
2020-12-04 16:37:09 +08:00
NuCom/NuCom 11N Wireless Router v5.07.90 Remote Privilege Escalation
Add NuCom Remote Privilege Escalation
2021-08-09 12:31:13 +08:00
Nuuo/CVE-2019-9653
add : CVE-2019-9653
2022-05-13 12:00:44 +08:00
OpenCats/CVE-2019-13358
Add CVE-2019-13358
2021-09-24 17:48:23 +08:00
OpenSMTPD/CVE-2020-7247
Add CVE-2020-7247.gif
2020-06-12 20:29:33 +08:00
Optilink
add Optilink/Optilink_Management_system_gene.php_RCE
2022-04-08 16:39:53 +08:00
PbootCMS/PbootCMS_parserIfLabel_RCE
rename
2021-07-06 16:49:08 +08:00
pfsense
add : pfSense_Arbitrary_File_Write_to_RCE
2022-06-24 12:02:40 +08:00
PHP/PHP 8.1.0-dev Zerodium Backdoor
add PHP 8.1.0-dev Zerodium Backdoor vulnerabilities
2021-08-05 17:54:27 +08:00
PPGo_Job/PPGo_Job Auth Login Bypass
add HD_Network_Local_File_Inclusion_CVE_2021_45043
2021-12-16 16:44:40 +08:00
qdPM/qdPM 9.2 Database Information leakage
Add qdPM 9.2 Database Information leakage
2021-08-09 12:32:43 +08:00
RaspAP/CVE-2021-33357
add : CVE-2021-33357
2022-06-24 12:02:08 +08:00
Ricon/Ricon Industrial Cellular Router apply.cgi RCE
Add Ricon Industrial Cellular Router apply.cgi RCE
2021-08-09 14:07:52 +08:00
Sahi-Pro
add Sahi_pro_7.x_8.x_Arbitrary_File_Read_CVE_2018_20470, Sahi_Pro_v8.x_RCE_CVE_2019_13597
2021-08-10 14:58:01 +08:00
SaltStack
add CVE-2021-25282
2021-07-13 11:40:32 +08:00
Scrapyd
add Scrapyd Unauthorized Access RCE
2021-07-29 15:01:53 +08:00
Seeyon
[add] Seeyon_OA_Fastjson_loginController_do_RCE
2021-07-07 16:47:49 +08:00
SharePoint/CVE-2019-0604
add CVE-2019-0604
2020-11-24 10:06:28 +08:00
Shiro/CVE-2016-4437
Add CVE-2016-4437
2020-05-25 19:53:00 +08:00
shuipFCMS/ShuipFCMS_authcode_leak_and_RCE
add ShuipFCMS authcode leak and RCE
2021-08-02 21:38:37 +08:00
Softneta/MedDream_Directory_Traversal
Add Softneta MedDream 6.7.11 Directory Traversal
2021-09-16 18:17:02 +08:00
SolarWinds/CVE-2020-10148
add CVE-2020-10148
2021-01-06 11:08:12 +08:00
SonicWall/SonicWall_SSL-VPN_RCE
add SonicWall_SSL-VPN_RCE
2021-02-04 15:57:03 +08:00
Sophos/CVE-2020-25223
Add CVE-2020-25223
2021-09-16 17:58:43 +08:00
Spring
fix query
2022-04-02 14:23:09 +08:00
Spring Cloud
add Spring_Cloud_Function_SPEL_Vulnerability
2022-04-02 14:21:57 +08:00
SpringBlade/CVE-2021-44910
add CVE-2021-44910、CVE-2022-24124
2022-03-25 16:06:36 +08:00
Strapi/CVE-2019-18818
Add CVE-2019-18818
2021-09-10 14:36:03 +08:00
Struts2
add S2-061
2020-12-16 10:39:16 +08:00
SunloginClient/CNVD-2022-10270
add: SunloginClient ping RCE (CNVD-2022-10270)
2022-02-16 12:24:02 +08:00
Supervisor/CVE-2017-11610
Add another gif
2020-07-10 17:22:29 +08:00
TCExam/CVE-2021-20114
Add CVE-2021-20114
2021-08-14 18:53:03 +08:00
Telerik-UI/CVE-2019-18935
add Progress_Telerik_UI_for_ASP_NET_AJAX_Deserialization_CVE_2019_18935
2021-07-17 16:18:08 +08:00
Tenda/uploadWewifiPic RCE
add: Zabbix CVE-2022-23131
2022-02-24 14:54:43 +08:00
TG-WanWangBoTong
fix image path
2021-08-04 20:43:19 +08:00
Thecus/Thecus NAS
Add Thecus NAS Post Auth Command Injection
2021-08-14 18:56:56 +08:00
ThinkPHP
Update gif
2020-04-23 14:15:21 +08:00
Tomcat
add CVE-2017-12615
2020-11-06 22:13:51 +08:00
TongdaOA
update README.md
2020-12-30 11:39:51 +08:00
TotoLink/CVE-2020-25499
add TOTOLINK routers remote command injection vulnerabilities (CVE-2020-25499)
2021-08-06 18:06:04 +08:00
Unomi/CVE-2020-13942
add CVE-2020-13942
2020-11-26 18:31:12 +08:00
Unraid/CVE-2020-5847
ADD drupal_6340
2020-12-13 22:50:58 +08:00
UNV
add : UNV_ip_camera_RCE
2022-06-02 17:29:34 +08:00
URVE/CVE-2020-29552
Add CVE-2020-29552
2021-08-14 19:01:21 +08:00
vBulletin/CVE-2019-16759
Add CVE-2019-16759
2020-04-28 13:35:59 +08:00
VMware
add : CVE-2022-22972
2022-05-20 12:23:06 +08:00
Wanhu/ezEIP
Add CNVD-2021-30192
2021-08-18 11:10:21 +08:00
Weaver
Weaver-OA E-Cology RCE
2021-05-18 10:16:01 +08:00
WebLogic
add Weblogic Secondary Deserialization RCE (CVE-2021-2135)
2021-07-25 16:07:12 +08:00
Webmin/CVE-2019-15107
add CVE-2019-15107
2020-11-06 22:30:36 +08:00
Windor/FileDownLoad_aspx
Add Windor FileDownLoad.aspx Arbitrary File Read
2021-08-30 16:51:42 +08:00
WordPress
add : WordPress CVE-2019-11185
2022-06-02 17:29:09 +08:00
XXL-JOB/XXL-JOB_API_Unauthenticated_glueSource_RCE
11_16
2020-11-16 16:17:23 +08:00
YApi
fix image path
2021-08-04 20:43:19 +08:00
Yealink/CVE-2021-27561
add Yealink_Device_Management_Platform_SSRF_CVE_2021_27561
2021-08-02 20:27:13 +08:00
Yonyou/Yonyou_NC_RCE_with_file_upload
add Yonyou_NC_RCE_with_file_upload
2020-12-10 16:30:30 +08:00
Yunxintong/SMS
Add Yunxintong Cropper.aspx Arbitrary File Read
2021-08-30 16:13:16 +08:00
Zabbix
add: Zabbix(CVE-2022-23134)
2022-03-18 18:25:33 +08:00
ZBL/ZBL EPON ONU Broadband Router 1.0
Add ZBL Router 1.0 Remote Privilege Escalation
2021-08-09 14:13:30 +08:00
zhongkebohua/CNVD-2016-07063
Add CNVD-2016-07063
2021-08-25 18:28:32 +08:00
Zimbra/CVE-2019-9670
add CVE-2019-9670
2020-12-03 20:08:21 +08:00
Zyxel/CVE-2022-30525
Update README.md
2022-05-16 11:36:56 +08:00
.gitattributes
Initial commit
2020-04-03 10:13:03 +08:00
91skzy_Enterprise_process_control_system_formservice_File_Upload_vulnerability.md
Create 91skzy_Enterprise_process_control_system_formservice_File_Upload_vulnerability.md
2023-07-14 11:27:17 +08:00
91skzy_Enterprise_process_control_system_wc.db_Information_Disclosure_vulnerability.md
Create 91skzy_Enterprise_process_control_system_wc.db_Information_Disclosure_vulnerability.md
2023-07-07 15:35:57 +08:00
Adobe_ColdFusion_CFIDE_adminapi_servermanager_servermanager.cfc_File_Read_Vulnerability_(CVE-2024-20767).md
Create Adobe_ColdFusion_CFIDE_adminapi_servermanager_servermanager.cfc_File_Read_Vulnerability_(CVE-2024-20767).md
2024-03-28 18:52:32 +08:00
Adobe_ColdFusion_WDDX_C3P0_remote code_execution_vulnerability.md
Update Adobe_ColdFusion_WDDX_C3P0_remote code_execution_vulnerability.md
2023-09-07 22:42:11 +08:00
Adobe_ColdFusion_WDDX_JGroups_remote_code_execution_vulnerability.md
Update Adobe_ColdFusion_WDDX_JGroups_remote_code_execution_vulnerability.md
2023-09-07 22:42:59 +08:00
Akamai CloudTest XML External Entity Injection Vulnerability (CVE-2025-49493).md
Update Akamai CloudTest XML External Entity Injection Vulnerability (CVE-2025-49493).md
2025-07-01 18:54:49 +08:00
Apache OFbiz ProgramExport Command Execution Vulnerability(CVE-2024-38856).md
Create Apache OFbiz ProgramExport Command Execution Vulnerability(CVE-2024-38856).md
2024-08-06 19:11:23 +08:00
Apache Solr Permission Bypass Vulnerability(CVE-2024-45216).md
Create Apache Solr Permission Bypass Vulnerability(CVE-2024-45216).md
2024-10-31 19:12:31 +08:00
Apache Tomcat Remote Command Execution Vulnerability (CVE-2025-24813).md
Create Apache Tomcat Remote Command Execution Vulnerability (CVE-2025-24813).md
2025-03-12 20:11:34 +08:00
Apache_Kafka_Connect_remote_code_execution_vulnerability_(CVE-2023-25194).md
Create Apache_Kafka_Connect_remote_code_execution_vulnerability_(CVE-2023-25194).md
2024-03-15 19:58:12 +08:00
Apache_OFBiz_webtools_control_ProgramExport_remote_code_execution_vulnerability.md
Create Apache_OFBiz_webtools_control_ProgramExport_remote_code_execution_vulnerability.md
2023-12-28 15:49:46 +08:00
Apache_OFBiz_webtools\control\xmlrpc_Remote_Code_Execution_Vulnerability.md
Create Apache_OFBiz_webtools\control\xmlrpc_Remote_Code_Execution_Vulnerability.md
2023-12-07 16:53:51 +08:00
Apache_Superset_Cookie_Permission_Bypass_Vulnerability_(CVE-2023-30776).md
Create Apache_Superset_Cookie_Permission_Bypass_Vulnerability_(CVE-2023-30776).md
2023-10-10 13:03:10 +08:00
AstrBot install-upload Command Execution Vulnerability (CVE-2025-55449).md
Add documentation for CVE-2025-55449 in AstrBot
2025-11-18 16:59:46 +08:00
Atlassian_Confluence_permission_bypass_vulnerability_(CVE-2023-22515).md
Create Atlassian_Confluence_permission_bypass_vulnerability_(CVE-2023-22515).md
2023-10-11 20:48:12 +08:00
Atlassian_Confluence_template_aui_text-inline.vm_code_execution_vulnerability_(CVE-2023-22527).md
Create Atlassian_Confluence_template_aui_text-inline.vm_code_execution_vulnerability_(CVE-2023-22527).md
2024-01-23 17:13:54 +08:00
Avaya_Aura_Device_Services_PhoneBackup_File_Upload_Vulnerability.md
Create Avaya_Aura_Device_Services_PhoneBackup_File_Upload_Vulnerability.md
2023-06-21 17:11:14 +08:00
CaiMore_Gateway_formping_file_Command_Execution_Vulnerability.md
Update and rename CVE-2022-35405 to CaiMore_Gateway_formping_file_Command_Execution_Vulnerability.md
2023-04-13 15:43:13 +08:00
CheckPoint_Gateway_clients_MyCRL_File_Reading_Vulnerability(CVE-2024-24919).md
Create CheckPoint_Gateway_clients_MyCRL_File_Reading_Vulnerability(CVE-2024-24919).md
2024-05-30 18:47:01 +08:00
CNVD-2023-03903.md
Create CNVD-2023-03903.md
2023-06-28 18:25:19 +08:00
Cockpit_assetsmanager_upload_file_upload_vulnerability_(CVE-2023-1313).md
Create Cockpit_assetsmanager_upload_file_upload_vulnerability_(CVE-2023-1313).md
2023-09-29 10:42:37 +08:00
ComfyUI_follow_symlinks_File_Read_Vulnerability_(CVE-2024-23334).md
Create ComfyUI_follow_symlinks_File_Read_Vulnerability_(CVE-2024-23334).md
2024-03-01 20:29:01 +08:00
Command_Execution_Vulnerability_in_Hikvision_Operations_Management_Center.md
Create Command_Execution_Vulnerability_in_Hikvision_Operations_Management_Center.md
2023-07-21 18:01:52 +08:00
CrushFTP_as2-to_Authentication_Permission_bypass_Vulnerability.md
Create CrushFTP_as2-to_Authentication_Permission_bypass_Vulnerability.md
2023-11-30 23:42:03 +08:00
CrushFTP_WebInterface_function_File_Read_Vulnerability.md
Create CrushFTP_WebInterface_function_File_Read_Vulnerability.md
2024-04-26 11:59:27 +08:00
CVD-2021-4417.md
Rename CVD-2021-4417 to CVD-2021-4417.md
2023-04-21 15:58:07 +08:00
CVD-2023-2177.md
Create CVD-2023-2177.md
2023-04-06 20:07:53 +08:00
CVE-2013-2251.md
Rename CVE-2013-2251 to CVE-2013-2251.md
2023-04-21 15:56:55 +08:00
CVE-2019-16278.md
Rename CVE-2019-16278 to CVE-2019-16278.md
2023-04-21 15:57:40 +08:00
CVE-2019-16891.md
Create CVE-2019-16891.md
2023-04-01 12:39:52 +08:00
CVE-2020-7961.md
Create CVE-2020-7961.md
2023-04-07 11:13:57 +08:00
CVE-2020-8644.md
Create CVE-2020-8644.md
2023-04-06 20:07:11 +08:00
CVE-2020-9496.md
Create CVE-2020-9496.md
2023-04-01 12:39:26 +08:00
CVE-2020-24589.md
Create CVE-2020-24589.md
2023-04-07 11:32:03 +08:00
CVE-2021-4642.md
Create CVE-2021-4642.md
2023-05-12 18:12:14 +08:00
CVE-2021-24375.md
Create CVE-2021-24375.md
2023-06-28 18:25:00 +08:00
CVE-2021-24762.md
Create CVE-2021-24762.md
2023-07-14 11:11:19 +08:00
CVE-2021-26857\CVE-2021-26858.md
Create CVE-2021-26857\CVE-2021-26858.md
2023-04-07 11:42:37 +08:00
CVE-2021-41419.md
Create CVE-2021-41419.md
2023-04-01 12:38:50 +08:00
CVE-2021-42392.md
Create CVE-2021-42392.md
2023-04-07 10:58:06 +08:00
CVE-2022-0342.md
Create CVE-2022-0342.md
2023-04-01 12:35:04 +08:00
CVE-2022-1442.md
Update CVE-2022-1442.md
2023-04-13 15:29:51 +08:00
CVE-2022-2030.md
Create CVE-2022-2030.md
2023-04-01 12:43:23 +08:00
CVE-2022-2486.md
Create CVE-2022-2486.md
2023-04-07 11:47:18 +08:00
CVE-2022-2544.md
Create CVE-2022-2544.md
2023-05-23 15:35:04 +08:00
CVE-2022-3254.md
Create CVE-2022-3254.md
2023-04-13 15:44:59 +08:00
CVE-2022-3926.md
Create CVE-2022-3926.md
2023-06-09 17:58:46 +08:00
CVE-2022-4060.md
Create CVE-2022-4060.md
2023-06-21 17:41:49 +08:00
CVE-2022-4298.md
Create CVE-2022-4298.md
2023-06-21 17:48:36 +08:00
CVE-2022-4693.md
Create CVE-2022-4693.md
2023-06-21 17:44:37 +08:00
CVE-2022-22928.md
Create CVE-2022-22928.md
2023-04-13 15:26:50 +08:00
CVE-2022-23944.md
Create CVE-2022-23944.md
2023-04-07 11:06:13 +08:00
CVE-2022-24706.md
Create CVE-2022-24706.md
2023-04-17 18:32:20 +08:00
CVE-2022-26135.md
Create CVE-2022-26135.md
2023-04-01 12:38:22 +08:00
CVE-2022-26138.md
Create CVE-2022-26138.md
2023-04-01 12:37:31 +08:00
CVE-2022-27373.md
Create CVE-2022-27373.md
2023-04-01 12:36:52 +08:00
CVE-2022-27596.md
Create CVE-2022-27596.md
2023-04-04 18:52:32 +08:00
CVE-2022-31474.md
Create CVE-2022-31474.md
2023-04-01 12:40:51 +08:00
CVE-2022-31845.md
Create CVE-2022-31845.md
2023-05-23 15:59:12 +08:00
CVE-2022-32300.md
Create CVE-2022-32300.md
2023-04-06 20:06:49 +08:00
CVE-2022-32409.md
Create CVE-2022-32409.md
2023-05-23 15:57:59 +08:00
CVE-2022-32417.md
Create CVE-2022-32417.md
2023-04-01 12:35:46 +08:00
CVE-2022-35405.md
Create CVE-2022-35405.md
2023-04-13 15:28:07 +08:00
CVE-2022-36642.md
Create CVE-2022-36642.md
2023-05-23 15:57:06 +08:00
CVE-2022-41544.md
Create CVE-2022-41544.md
2023-04-13 15:45:23 +08:00
CVE-2023-0669.md
Create CVE-2023-0669.md
2023-04-13 15:27:37 +08:00
CVE-2023-2183.md
Create CVE-2023-2183.md
2023-04-01 12:36:24 +08:00
CVE-2023-20887.gif
Add files via upload
2023-06-21 19:19:19 +08:00
CVE-2023-20887.md
Create CVE-2023-20887.md
2023-06-25 18:08:35 +08:00
CVE-2023-21931.md
Create CVE-2023-21931.md
2023-04-19 04:50:04 +08:00
CVE-2023-21979.md
Rename CVE-2023-21979 to CVE-2023-21979.md
2023-04-21 15:56:14 +08:00
CVE-2023-23333.md
Create CVE-2023-23333.md
2023-04-06 20:06:18 +08:00
CVE-2023-25814.md
Create CVE-2023-25814.md
2023-04-13 15:47:43 +08:00
CVE-2023-27524.md
Create CVE-2023-27524.md
2023-05-22 19:03:38 +08:00
CVE-2023-32315.md
Create CVE-2023-32315.md
2023-06-16 21:27:51 +08:00
CVE-2023-33246.gif
Add files via upload
2023-06-16 15:46:18 +08:00
CVE-2023-33246.md
Create CVE-2023-33246.md
2023-06-16 21:28:17 +08:00
CVE-2023-38203.md
Create CVE-2023-38203.md
2023-07-24 18:39:19 +08:00
CVE-2023-38646.md
Create CVE-2023-38646.md
2023-07-28 14:23:14 +08:00
CVE-2024-8353 GiveWP WordPress Plugin admin-ajax.php Command Execution Vulnerability.md
Create CVE-2024-8353 GiveWP WordPress Plugin admin-ajax.php Command Execution Vulnerability.md
2024-10-11 19:59:30 +08:00
CVE-2025-58360.md
Add CVE-2025-58360 vulnerability documentation
2025-11-26 18:45:50 +08:00
CVE-2025-61757.md
Add CVE-2025-61757 vulnerability documentation
2025-11-25 15:43:33 +08:00
CVE-2025-68493.md
Add CVE-2025-68493 documentation
2026-01-15 17:07:47 +08:00
CVE-2025-68645.md
Add CVE-2025-68645 vulnerability documentation
2025-12-30 17:38:00 +08:00
CyberPanel upgrademysqlstatus Command Execution Vulnerability.md
Create CyberPanel upgrademysqlstatus Command Execution Vulnerability.md
2024-10-29 15:13:58 +08:00
Erlang-OTP SSH Server Code Execution Vulnerability (CVE-2025-32433).md
Create Erlang-OTP SSH Server Code Execution Vulnerability (CVE-2025-32433).md
2025-04-25 18:04:19 +08:00
ezOFFICE OA OfficeServer.jsp Arbitrarily File Upload Vulnerability.md
Create ezOFFICE OA OfficeServer.jsp Arbitrarily File Upload Vulnerability.md
2023-04-27 21:58:32 +08:00
Fortinet FortiWeb fwbcgi PePermission Bypassulnerability (CVE-2025-64446).md
Add documentation for CVE-2025-64446 vulnerability
2025-11-18 16:58:52 +08:00
Gemtek_Modem_Configuration_Interface_Default_password_vulnerability.md
Create Gemtek_Modem_Configuration_Interface_Default_password_vulnerability.md
2023-05-27 10:08:01 +08:00
GeoServer Code Execution Vulnerability.md
Update and rename GeoServer Code Execution Vulnerability to GeoServer Code Execution Vulnerability.md
2024-07-03 19:02:24 +08:00
GJP_SelectImage.aspx_file_upload_vulnerability.md
Update GJP_SelectImage.aspx_file_upload_vulnerability.md
2023-09-15 17:27:26 +08:00
Glodon-Linkworks_GetUserByEmployeeCode_employeeCode_SQL_Injection_Vulnerability.md
Create Glodon-Linkworks_GetUserByEmployeeCode_employeeCode_SQL_Injection_Vulnerability.md
2023-07-14 11:29:33 +08:00
GoAnywhere_MFT_InitialAccountSetup.xhtml_Bypass_Vulnerability_(CVE-2024-0204).md
Create GoAnywhere_MFT_InitialAccountSetup.xhtml_Bypass_Vulnerability_(CVE-2024-0204).md
2024-01-24 19:15:27 +08:00
GobyVuls-Document.md
Update GobyVuls document with new vulnerabilities
2026-01-15 17:06:42 +08:00
Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md
Create Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md
2023-04-13 15:47:12 +08:00
Hikvision_iSecure_Center_springboot_Information_disclosure_vulnerability.md
Create Hikvision_iSecure_Center_springboot_Information_disclosure_vulnerability.md
2023-04-13 15:42:22 +08:00
Hikvision_NCG_Networking_Gateway_login.php_Directory_traversal_Vulnerability.md
Create Hikvision_NCG_Networking_Gateway_login.php_Directory_traversal_Vulnerability.md
2023-05-23 15:51:51 +08:00
Honeywell_PM43_loadfile.lp_file_command_execution_vulnerability.md
Create Honeywell_PM43_loadfile.lp_file_command_execution_vulnerability.md
2023-10-17 21:39:16 +08:00
Huatian-OA8000_MyHttpServlet_reportFile_Arbitrary_File_Upload_Vulnerability.md
Create Huatian-OA8000_MyHttpServlet_reportFile_Arbitrary_File_Upload_Vulnerability.md
2023-07-07 15:31:27 +08:00
Ivanti_Connect_Secure_and_Policy_Secure_keys-status_remote_command_execution_vulnerability_(CVE-2023-46805,CVE-2024-21887).md
Create Ivanti_Connect_Secure_and_Policy_Secure_keys-status_remote_command_execution_vulnerability_(CVE-2023-46805,CVE-2024-21887).md
2024-01-18 17:09:10 +08:00
Ivanti_Connect_Secure_and_Policy_Secure_saml20.ws_server-side_request_forgery_vulnerability_(CVE-2024-21893).md
Create Ivanti_Connect_Secure_and_Policy_Secure_saml20.ws_server-side_request_forgery_vulnerability_(CVE-2024-21893).md
2024-02-06 11:38:13 +08:00
JeeSpringCloud_uploadFile.jsp_file_upload_vulnerability.md
Create JeeSpringCloud_uploadFile.jsp_file_upload_vulnerability.md
2023-10-12 17:16:21 +08:00
Jenkins_args4j_file_read_vulnerability_(CVE-2024-23897).md
Create Jenkins_args4j_file_read_vulnerability_(CVE-2024-23897).md
2024-01-26 19:50:27 +08:00
JetBrains_TeamCity_permission_bypass_vulnerability_(CVE-2024-27198 & CVE-2024-27199).md
Create JetBrains_TeamCity_permission_bypass_vulnerability_(CVE-2024-27198 & CVE-2024-27199).md
2024-03-21 18:58:03 +08:00
JetBrains_TeamCity_remote_command_execution_vulnerability.md
Create JetBrains_TeamCity_remote_command_execution_vulnerability.md
2023-10-13 15:33:16 +08:00
Junos_webauth_operation.php_File_Upload_Vulnerability.md
Create Junos_webauth_operation.php_File_Upload_Vulnerability.md
2023-09-14 13:28:58 +08:00
Junos_webauth_operation.php_PHPRC_Code_Execution_Vulnerability.md
Create Junos_webauth_operation.php_PHPRC_Code_Execution_Vulnerability.md
2023-10-11 20:50:21 +08:00
kafka-ui_messages_remote_code_execution_vulnerability_(CVE-2023-52251).md
Create kafka-ui_messages_remote_code_execution_vulnerability_(CVE-2023-52251).md
2024-02-29 17:38:49 +08:00
Kingdee_Cloud_Starry_Sky-Management_Center_Kingdee.BOS.ServiceFacade.ServicesStub.DevReportService.GetBusinessObjectData.common.kdsvc_Arbitrary_Code_Execution_Vulnerability.md
Create Kingdee_Cloud_Starry_Sky-Management_Center_Kingdee.BOS.ServiceFacade.ServicesStub.DevReportService.GetBusinessObjectData.common.kdsvc_Arbitrary_Code_Execution_Vulnerability.md
2023-07-01 09:40:10 +08:00
koronsoft_AIO_management_system_UtilServlet_fileName_File_Read_vulnerability.md
Create koronsoft_AIO_management_system_UtilServlet_fileName_File_Read_vulnerability.md
2023-07-07 15:33:31 +08:00
Langflow Code Execution Vulnerability (CVE-2025-3248).md
Create Langflow Code Execution Vulnerability (CVE-2025-3248).md
2025-04-09 20:18:25 +08:00
maxView_Storage_Manager_dynamiccontent.properties.xhtml_RCE.md
Create maxView_Storage_Manager_dynamiccontent.properties.xhtml_RCE.md
2023-06-09 18:01:11 +08:00
MCMS_list_Interface_sqlWhere_Sql_Injection_Vulnerability.md
Create MCMS_list_Interface_sqlWhere_Sql_Injection_Vulnerability.md
2023-05-12 18:21:10 +08:00
MDT_KNX_manager_panel_default_credentials_vulnerability.md
Create MDT_KNX_manager_panel_default_credentials_vulnerability.md
2023-06-09 18:00:07 +08:00
MongoDB Zlib Information Disclosure Vulnerability (CVE-2025-14847).md
Document MongoDB Zlib Information Disclosure Vulnerability
2025-12-29 17:52:40 +08:00
Mura_CMS_index.cfm_api_json_v1_default_SQL_Injection_Vulnerability(CVE-2024-32640).md
Create Mura_CMS_index.cfm_api_json_v1_default_SQL_Injection_Vulnerability(CVE-2024-32640).md
2024-05-15 12:06:06 +08:00
Netgear_Devices_boardDataWW.php_Unauthenticated_Remote_Command_Execution.md
Create Netgear_Devices_boardDataWW.php_Unauthenticated_Remote_Command_Execution.md
2023-07-31 10:33:45 +08:00
Netgod_SecGate_3600_Firewall sys_export_conf_local_save_File_Read_Vulnerability.md
Create Netgod_SecGate_3600_Firewall sys_export_conf_local_save_File_Read_Vulnerability.md
2023-06-21 17:37:10 +08:00
Netgod_SecGate_3600_Firewall_obj_area_import_save_File_Upload_Vulnerability.md
Create Netgod_SecGate_3600_Firewall_obj_area_import_save_File_Upload_Vulnerability.md
2023-07-21 18:02:48 +08:00
Next.js Code Execution Vulnerability（CVE-2025-55182）.md
Add documentation for Next.js CVE-2025-55182
2025-12-05 16:58:03 +08:00
nginxWebUI_runCmd_file_remote_comand_execution_vulnerability.md
Create nginxWebUI_runCmd_file_remote_comand_execution_vulnerability.md
2023-05-23 15:36:26 +08:00
NUUO_NVR___debugging_center_utils___.php_Command_Execution.md
Create NUUO_NVR___debugging_center_utils___.php_Command_Execution.md
2023-04-13 15:46:31 +08:00
Ollama Unauthorized Access Vulnerability (CNVD-2025-04094).md
Update Ollama Unauthorized Access Vulnerability (CNVD-2025-04094).md
2025-03-03 18:35:46 +08:00
OpenCart_So_Newsletter_Custom_Popup_4.0_module_email_parameter_SQL_injection_vulnerability.md
Create OpenCart_So_Newsletter_Custom_Popup_4.0_module_email_parameter_SQL_injection_vulnerability.md
2023-04-13 15:44:25 +08:00
Palo-alto-panos createRemoteAppwebSession.php Command Execution Vulnerability (CVE-2024-0012)(CVE-2024-9474).md
Create Palo-alto-panos createRemoteAppwebSession.php Command Execution Vulnerability (CVE-2024-0012)(CVE-2024-9474).md
2024-11-20 20:44:28 +08:00
PandoraFMS_upload_head_image.php_Arbitrary_File_Upload_Vulnerability.md
Create PandoraFMS_upload_head_image.php_Arbitrary_File_Upload_Vulnerability.md
2023-06-21 17:39:03 +08:00
README.md
Update README.md
2024-02-29 17:45:12 +08:00
Revive_Adserver_adxmlrpc.php_Remote_Code_Execution_Vulnerability.md
Create Revive_Adserver_adxmlrpc.php_Remote_Code_Execution_Vulnerability.md
2023-09-25 10:27:38 +08:00
RSeeyou-OA_wpsAssistServlet_templateUrl_Arbitrary_File_Read_Vulnerability.md
Create RSeeyou-OA_wpsAssistServlet_templateUrl_Arbitrary_File_Read_Vulnerability.md
2023-07-14 11:10:49 +08:00
Ruijie_EWEB_Network_Management_System_flwo.control.php_type_Arbitrary_Command_Execution_Vulnerability.md
Update Ruijie_EWEB_Network_Management_System_flwo.control.php_type_Arbitrary_Command_Execution_Vulnerability.md
2023-09-07 22:33:55 +08:00
Ruijie_NBR_Router_webgl.data_information.md
Create Ruijie_NBR_Router_webgl.data_information.md
2023-05-27 10:06:31 +08:00
Ruijie_WEB_Management_System_EXCU_SHELL_Information_Disclosure_Vulnerability.md
Create Ruijie_WEB_Management_System_EXCU_SHELL_Information_Disclosure_Vulnerability.md
2023-07-07 15:32:31 +08:00
Ruiyou_Tianyi_Application_Virtualization_System_Index.php_File_Remote_Code_Execution_Vulnerability.md
Create Ruiyou_Tianyi_Application_Virtualization_System_Index.php_File_Remote_Code_Execution_Vulnerability.md
2023-04-13 15:53:03 +08:00
seaflysoft_ERP_getylist_login.do_SQL_Injection.md
Create seaflysoft_ERP_getylist_login.do_SQL_Injection.md
2023-05-12 18:20:18 +08:00
secnet_Intelligent_Router_actpt_5g.data_Infoleakage.md
Create secnet_Intelligent_Router_actpt_5g.data_Infoleakage.md
2023-05-12 18:15:39 +08:00
seeyon_M1_Server_userTokenService_Code_Execution_Vulnerability.md
Create seeyon_M1_Server_userTokenService_Code_Execution_Vulnerability.md
2023-07-14 11:32:22 +08:00
ServiceNowUI _login.do Input Validation Vulnerability(CVE-2024-4879).md
Create ServiceNowUI _login.do Input Validation Vulnerability(CVE-2024-4879).md
2024-07-17 18:22:21 +08:00
Sinovision_Cloud_CDN_live_default_passwd.md
Create Sinovision_Cloud_CDN_live_default_passwd.md
2023-05-12 18:13:24 +08:00
Smartbi DB2 JDBC Arbitrary Code Execution Vulnerability.md
Create Smartbi DB2 JDBC Arbitrary Code Execution Vulnerability.md
2023-03-30 19:34:21 +08:00
Some_Hikvision_iVMS_file_upload_vulnerabilities.md
Create Some_Hikvision_iVMS_file_upload_vulnerabilities.md
2023-06-02 18:14:29 +08:00
Sonatype_Nexus_Repository_Manager_File_Read_Vulnerability(CVE-2024-4956).md
Create Sonatype_Nexus_Repository_Manager_File_Read_Vulnerability(CVE-2024-4956).md
2024-05-23 19:00:10 +08:00
SOPHOS-Netgenie_Default_Password.md
Create SOPHOS-Netgenie_Default_Password.md
2023-05-23 16:01:05 +08:00
Splunk Enterprise for Windows en-US_modules_messaging File Reading Vulnerability.md
Create Splunk Enterprise for Windows en-US_modules_messaging File Reading Vulnerability.md
2024-07-10 14:40:56 +08:00
Splunk_Enterprise_XSLT_Command_Execute_Vulnerability.md
Create Splunk_Enterprise_XSLT_Command_Execute_Vulnerability.md
2023-11-27 11:07:09 +08:00
SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md
Create SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md
2023-05-12 18:17:45 +08:00
SysAid_userentry_file_upload_vulnerability.md
Create SysAid_userentry_file_upload_vulnerability.md
2023-11-15 23:04:14 +08:00
TamronOS_IPTV_backup_file_down_vulnerability.md
Create TamronOS_IPTV_backup_file_down_vulnerability.md
2023-05-23 15:54:48 +08:00
Telecom_system_manager_teletext_material_upload.php_fileupload_vulnerability.md
Create Telecom_system_manager_teletext_material_upload.php_fileupload_vulnerability.md
2023-06-21 16:48:11 +08:00
Telesquare_TLR-2005Ksh_getUsernamePassword_Information_Disclosure.md
Create Telesquare_TLR-2005Ksh_getUsernamePassword_Information_Disclosure.md
2023-05-12 18:11:01 +08:00
Telesquare_TLR-2005Ksh_setSyncTimeHost_RCE.md
Create Telesquare_TLR-2005Ksh_setSyncTimeHost_RCE.md
2023-05-12 18:09:36 +08:00
Tianqing_terminal_security_management_system_YII_CSRF_TOKEN_remote_code_execution_vulnerability.md
Create Tianqing_terminal_security_management_system_YII_CSRF_TOKEN_remote_code_execution_vulnerability.md
2023-07-14 11:13:30 +08:00
UF_U8_Cloud_upload.jsp_file_upload_vulnerability.md
Create UF_U8_Cloud_upload.jsp_file_upload_vulnerability.md
2023-09-06 17:36:51 +08:00
vulnerability_list.md
update vulnerability_list.md
2020-12-31 11:22:44 +08:00
Weaver_E-office_flow_xml.php_file_SORT_ID_parameter_SQL_injection_vulnerability.md
Create Weaver_E-office_flow_xml.php_file_SORT_ID_parameter_SQL_injection_vulnerability.md
2023-09-25 10:28:53 +08:00
Weaver_E-office_Office_Automation_System_download.php_filename_file_read_vulnerability.md
Create Weaver_E-office_Office_Automation_System_download.php_filename_file_read_vulnerability.md
2023-06-21 17:00:35 +08:00
Weaver_ecology_XmlRpcServlet_Path_File_Read_Vulnerability.md
Create Weaver_ecology_XmlRpcServlet_Path_File_Read_Vulnerability.md
2023-09-07 22:41:21 +08:00
Weaver_OA_PluginViewServlet_Authentication_Bypass_Vulnerability.md
Create Weaver_OA_PluginViewServlet_Authentication_Bypass_Vulnerability.md
2023-06-21 17:24:13 +08:00
Weblogic_ForeignOpaqueReference_remote_code_execution_vulnerability_(CVE-2024-20931).md
Create Weblogic_ForeignOpaqueReference_remote_code_execution_vulnerability_(CVE-2024-20931).md
2024-02-22 14:21:22 +08:00
WordPress_Bricks_render_element_Remote_Code_Execution_Vulnerability_(CVE-2024-25600).md
Create WordPress_Bricks_render_element_Remote_Code_Execution_Vulnerability_(CVE-2024-25600).md
2024-02-23 20:40:19 +08:00
WordPress_Plugin_Extensive_VC_Addons_File_Inclusion_Vulnerability.md
Create WordPress_Plugin_Extensive_VC_Addons_File_Inclusion_Vulnerability.md
2023-06-21 17:07:21 +08:00
WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability.md
Rename WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability to WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability.md
2023-05-12 18:16:22 +08:00
wssrs-29kf1.gif
Add files via upload
2023-06-16 15:44:59 +08:00
XAMPP_PHP-CGI_Windows_Code_Execution_Vulnerability.md
Create XAMPP_PHP-CGI_Windows_Code_Execution_Vulnerability.md
2024-06-12 19:01:42 +08:00
yongyou_GRP-U8_U8App_Proxy_Arbitrary_file_upload_vulnerability.md
Create yongyou_GRP-U8_U8App_Proxy_Arbitrary_file_upload_vulnerability.md
2023-06-09 17:58:19 +08:00
Yun-Box_authService_fastjson_serialization_code_execution_vulnerability.md
Create Yun-Box_authService_fastjson_serialization_code_execution_vulnerability.md
2023-05-23 15:39:43 +08:00
ZXHN H108NS Router tools_admin.asp Permission Bypass Vulnerability.md
Create ZXHN H108NS Router tools_admin.asp Permission Bypass Vulnerability.md
2023-04-27 21:58:02 +08:00
ZyXEL_routers_Export_Log_arbitrary_file_read.md
Create ZyXEL_routers_Export_Log_arbitrary_file_read.md
2023-05-12 18:19:11 +08:00

README.md

GobyVuls

Vulnerabilities of Goby supported with exploitation.

This folder contains a variety of vulnerability exploitations for working with goby.

Running an explotation

Download goby from release page, and run.

Scan ips which may exist the vulnerability

goby new scan

Click "verify" button

goby verify

Do some action like execute cmd, or get a reverse shell

goby explotation

Contributing

Pull Requests and contributions to this project are encouraged and greatly welcomed! The goby project always needs new vulnerabilities, and needs talented developers (such as yourself!) to submit fixes for the existing demos when they break.

Download

You can go to the official website to download Goby.

Reference in new issue View Git Blame Copy Permalink
S
Description
Vulnerabilities of Goby supported with exploitation.
cvecve-2023-22527cve-2023-51467cve-2024-0204cve-2024-20931cve-2024-21887cve-2024-21893cve-2024-23897cve-2024-25600exploitexplotationgobyproxyshellvulnerabilities
Readme
204 MiB
0 Stars 1 Watchers 0 Forks
Languages
Go 100%