admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-06 02:31:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
257 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Goby 003b9819d0
Merge pull request #19 from xiaoheihei1107/master 
Add Kingsoft V8V9 get_file_content.php File Read
Add Yunxintong Cropper.aspx Arbitrary File Read
Add Windor FileDownLoad.aspx Arbitrary File Read
Add Doccms keyword sqli
2021-09-01 10:08:52 +08:00
ActiveMQ/CVE-2016-3088
Update CVE-2016-3088.gif
2020-04-20 09:57:40 +08:00
ANTlabs/IG3100_telnet_default_account
Add antlabs_default_account.gif
2020-06-11 11:33:40 +08:00
Apache OFBiz
add vul demo
2021-05-18 14:14:09 +08:00
Apache Tapestry/CVE-2021-27850
fix name
2021-07-02 19:05:16 +08:00
Arcadyan/CVE-2021-20090
add Arcadyan_Routers_Authentication_Bypassing_CVE_2021_20090
2021-08-04 20:40:11 +08:00
AVCON-6/CNVD-2020-30193
Add CNVD-2020-30193
2021-08-18 10:58:33 +08:00
Bithighway/CNVD-2021-37007
Add CNVD-2021-37007
2021-08-25 17:45:55 +08:00
BruteForce/RDP
add RDP bruteforce
2020-12-11 10:10:28 +08:00
BusinessIntelligence/CVE-2020-14864
add CVE-2020-14864
2020-12-03 20:16:14 +08:00
Byzoro/CNVD-2021-40201
Add CNVD-2021-40201
2021-08-18 11:00:10 +08:00
Cisco/CVE-2020-3452
Update CVE-2020-3452
2020-07-23 19:21:17 +08:00
Citrix
add CVE-2020-8209
2020-11-20 10:54:38 +08:00
Clinical_Browsing_System
add Clinical Browsing System Boolean SQLi
2021-08-02 15:11:48 +08:00
COMMAX/Ruvie CCTV Bridge DVR Unauthorized
Add COMMAX Ruvie CCTV Bridge DVR Unauthorized
2021-08-18 11:02:41 +08:00
Consul/Consul_Service_API_RCE
add Consul_Service_API_RCE
2021-07-16 10:22:41 +08:00
DocCMS/Doccms keyword sqli
Add Doccms keyword sqli
2021-08-30 18:46:30 +08:00
DrayTek/CVE-2020-8515
Add CVE-2020-8515
2020-06-08 16:22:05 +08:00
Druid/CVE-2021-25646
add CVE-2021-25646
2021-02-04 15:30:24 +08:00
Drupal
ADD drupal_6340
2020-12-13 20:00:27 +08:00
Dubbo/CVE-2020-1948
update README.md
2020-08-21 17:24:17 +08:00
Eyoucms
fix image path
2021-08-04 20:43:19 +08:00
F5/CVE-2021-22986
add CVE-2021-22986
2021-03-25 10:43:14 +08:00
Fastjson/CNVD-2017-02833
add CNVD-2017-02833
2020-11-06 22:51:39 +08:00
Flink
update CVE-2020-17518.gif
2021-01-08 12:09:19 +08:00
ForgeRock/CVE-2021-35464
add CVE_2021_35464
2021-07-01 11:31:21 +08:00
FortiLogger/CVE-2021-3378
add CVE-2021-3378
2021-07-22 17:56:35 +08:00
FortiOS/CVE-2018-13379
Update README.md
2020-06-08 19:53:04 +08:00
Hongdian/CVE-2021-28149
Add CVE-2021-28149
2021-08-14 18:33:51 +08:00
HybridDVR/default_admin_account_rce
Add hybrid_dvr_default_admin_account_rce
2020-06-09 14:17:09 +08:00
imgs
Update verify.png
2020-04-03 10:42:47 +08:00
Intelbras Wireless/CVE-2021-3017
Add CVE-2021-3017
2021-08-25 17:47:48 +08:00
Jenkins
Add CVE-2017-1000353
2020-04-23 10:57:51 +08:00
Jetty
fix image path
2021-08-04 20:43:19 +08:00
JingHang/JingHang online marking Arbitrary File Upload
Add JingHang online marking Arbitrary File Upload
2021-08-14 18:40:00 +08:00
Kingsoft/get_file_content_php
Add Kingsoft V8V9 get_file_content.php File Read
2021-08-30 16:03:55 +08:00
KlogServer/CVE-2020-35729
add CVE-2020-35729
2021-08-02 14:45:40 +08:00
Landray-OA
update Landray OA custom.jsp RCE
2021-07-01 18:27:01 +08:00
lanproxy/CVE-2021-3019
add CVE-2021-3019
2021-01-13 10:41:35 +08:00
LiferayPortal/CVE-2020-7961
Add CVE-2020-7961.gif
2020-06-08 11:00:22 +08:00
ManageEngine
add CVE-2020-28653
2021-08-05 18:48:25 +08:00
Microsoft/Exchange
add Exchange/CVE-2021-34473/Microsoft_Exchange_Server_Remote_Code_Execution_Vulnerability_CVE-2021-34473.gif
2021-08-30 19:50:12 +08:00
Mida_eFramework/CVE-2020-15920
add CVE-2020-15920
2021-08-02 14:50:23 +08:00
Mobinat Wireless Router
Add Mobinat Wireless Router system_log.cgi RCE
2021-08-14 18:47:09 +08:00
Mobotix/Mobotix_default_account
Add Mobotix_default_account
2020-04-23 10:51:10 +08:00
Mongo-Express/CVE-2019-10758
Add CVE-2019-10758
2020-04-28 12:31:55 +08:00
Nexus/CVE-2019-7238
ADD neuxs_7238
2020-12-13 23:03:39 +08:00
NexusDB/CVE-2020-24571
add CVE-2020-24571
2020-12-04 09:54:47 +08:00
NiFi/Api_RCE
Update README.md
2020-12-04 16:37:09 +08:00
NuCom/NuCom 11N Wireless Router v5.07.90 Remote Privilege Escalation
Add NuCom Remote Privilege Escalation
2021-08-09 12:31:13 +08:00
OpenSMTPD/CVE-2020-7247
Add CVE-2020-7247.gif
2020-06-12 20:29:33 +08:00
PbootCMS/PbootCMS_parserIfLabel_RCE
rename
2021-07-06 16:49:08 +08:00
PHP/PHP 8.1.0-dev Zerodium Backdoor
add PHP 8.1.0-dev Zerodium Backdoor vulnerabilities
2021-08-05 17:54:27 +08:00
qdPM/qdPM 9.2 Database Information leakage
Add qdPM 9.2 Database Information leakage
2021-08-09 12:32:43 +08:00
Ricon/Ricon Industrial Cellular Router apply.cgi RCE
Add Ricon Industrial Cellular Router apply.cgi RCE
2021-08-09 14:07:52 +08:00
Sahi-Pro
add Sahi_pro_7.x_8.x_Arbitrary_File_Read_CVE_2018_20470, Sahi_Pro_v8.x_RCE_CVE_2019_13597
2021-08-10 14:58:01 +08:00
SaltStack
add CVE-2021-25282
2021-07-13 11:40:32 +08:00
Scrapyd
add Scrapyd Unauthorized Access RCE
2021-07-29 15:01:53 +08:00
Seeyon
[add] Seeyon_OA_Fastjson_loginController_do_RCE
2021-07-07 16:47:49 +08:00
SharePoint/CVE-2019-0604
add CVE-2019-0604
2020-11-24 10:06:28 +08:00
Shiro/CVE-2016-4437
Add CVE-2016-4437
2020-05-25 19:53:00 +08:00
shuipFCMS/ShuipFCMS_authcode_leak_and_RCE
add ShuipFCMS authcode leak and RCE
2021-08-02 21:38:37 +08:00
SolarWinds/CVE-2020-10148
add CVE-2020-10148
2021-01-06 11:08:12 +08:00
SonicWall/SonicWall_SSL-VPN_RCE
add SonicWall_SSL-VPN_RCE
2021-02-04 15:57:03 +08:00
Spring
add CVE-2018-1273
2020-11-06 22:08:11 +08:00
Struts2
add S2-061
2020-12-16 10:39:16 +08:00
Supervisor/CVE-2017-11610
Add another gif
2020-07-10 17:22:29 +08:00
TCExam/CVE-2021-20114
Add CVE-2021-20114
2021-08-14 18:53:03 +08:00
Telerik-UI/CVE-2019-18935
add Progress_Telerik_UI_for_ASP_NET_AJAX_Deserialization_CVE_2019_18935
2021-07-17 16:18:08 +08:00
TG-WanWangBoTong
fix image path
2021-08-04 20:43:19 +08:00
Thecus/Thecus NAS
Add Thecus NAS Post Auth Command Injection
2021-08-14 18:56:56 +08:00
ThinkPHP
Update gif
2020-04-23 14:15:21 +08:00
Tomcat
add CVE-2017-12615
2020-11-06 22:13:51 +08:00
TongdaOA
update README.md
2020-12-30 11:39:51 +08:00
TotoLink/CVE-2020-25499
add TOTOLINK routers remote command injection vulnerabilities (CVE-2020-25499)
2021-08-06 18:06:04 +08:00
Unomi/CVE-2020-13942
add CVE-2020-13942
2020-11-26 18:31:12 +08:00
Unraid/CVE-2020-5847
ADD drupal_6340
2020-12-13 22:50:58 +08:00
URVE/CVE-2020-29552
Add CVE-2020-29552
2021-08-14 19:01:21 +08:00
vBulletin/CVE-2019-16759
Add CVE-2019-16759
2020-04-28 13:35:59 +08:00
VMware
update CVE-2021-21978
2021-03-16 16:18:33 +08:00
Wanhu/ezEIP
Add CNVD-2021-30192
2021-08-18 11:10:21 +08:00
Weaver
Weaver-OA E-Cology RCE
2021-05-18 10:16:01 +08:00
WebLogic
add Weblogic Secondary Deserialization RCE (CVE-2021-2135)
2021-07-25 16:07:12 +08:00
Webmin/CVE-2019-15107
add CVE-2019-15107
2020-11-06 22:30:36 +08:00
Windor/FileDownLoad_aspx
Add Windor FileDownLoad.aspx Arbitrary File Read
2021-08-30 16:51:42 +08:00
WordPress
Add CVE-2021-24146
2021-08-25 17:49:57 +08:00
XXL-JOB/XXL-JOB_API_Unauthenticated_glueSource_RCE
11_16
2020-11-16 16:17:23 +08:00
YApi
fix image path
2021-08-04 20:43:19 +08:00
Yealink/CVE-2021-27561
add Yealink_Device_Management_Platform_SSRF_CVE_2021_27561
2021-08-02 20:27:13 +08:00
Yonyou/Yonyou_NC_RCE_with_file_upload
add Yonyou_NC_RCE_with_file_upload
2020-12-10 16:30:30 +08:00
Yunxintong/SMS
Add Yunxintong Cropper.aspx Arbitrary File Read
2021-08-30 16:13:16 +08:00
ZBL/ZBL EPON ONU Broadband Router 1.0
Add ZBL Router 1.0 Remote Privilege Escalation
2021-08-09 14:13:30 +08:00
zhongkebohua/CNVD-2016-07063
Add CNVD-2016-07063
2021-08-25 18:28:32 +08:00
Zimbra/CVE-2019-9670
add CVE-2019-9670
2020-12-03 20:08:21 +08:00
.gitattributes
Initial commit
2020-04-03 10:13:03 +08:00
README.md
Update README.md
2020-12-11 04:06:45 +08:00
vulnerability_list.md
update vulnerability_list.md
2020-12-31 11:22:44 +08:00

README.md

GobyVuls

Vulnerabilities of Goby supported with exploitation.

This folder contains a variety of vulnerability exploitations for working with goby.

Running an explotation

Download goby from release page, and run.

Scan ips which may exist the vulnerability

goby new scan

Click "verify" button

goby verify

Do some action like execute cmd, or get a reverse shell

goby explotation

Contributing

Pull Requests and contributions to this project are encouraged and greatly welcomed! The goby project always needs new vulnerabilities, and needs talented developers (such as yourself!) to submit fixes for the existing demos when they break.

Download

You can go to the official website to download Goby.

Description
Vulnerabilities of Goby supported with exploitation.
cvecve-2023-22527cve-2023-51467cve-2024-0204cve-2024-20931cve-2024-21887cve-2024-21893cve-2024-23897cve-2024-25600exploitexplotationgobyproxyshellvulnerabilities
Readme 204 MiB
Languages
Go 100%