admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 01:40:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
424 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Goby 6ad1f2600c
Create SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md 
add SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag
2023-05-12 18:17:45 +08:00
ActiveMQ/CVE-2016-3088
Update CVE-2016-3088.gif
2020-04-20 09:57:40 +08:00
ANTlabs/IG3100_telnet_default_account
Add antlabs_default_account.gif
2020-06-11 11:33:40 +08:00
Apache CouchDB/CVE-2022-24706
add : CVE-2022-24706
2022-05-20 12:22:32 +08:00
Apache OFBiz
add vul demo
2021-05-18 14:14:09 +08:00
Apache Tapestry/CVE-2021-27850
fix name
2021-07-02 19:05:16 +08:00
Arcadyan/CVE-2021-20090
add Arcadyan_Routers_Authentication_Bypassing_CVE_2021_20090
2021-08-04 20:40:11 +08:00
Atlassian/Confluence
add : CVE-2022-26134
2022-06-04 16:47:56 +08:00
AVCON-6/CNVD-2020-30193
Add CNVD-2020-30193
2021-08-18 10:58:33 +08:00
Bitbucket/CVE-2022-26133
add CVE-2022-26133
2022-04-21 15:47:39 +08:00
Bithighway/CNVD-2021-37007
Add CNVD-2021-37007
2021-08-25 17:45:55 +08:00
BruteForce/RDP
add RDP bruteforce
2020-12-11 10:10:28 +08:00
BusinessIntelligence/CVE-2020-14864
add CVE-2020-14864
2020-12-03 20:16:14 +08:00
Byzoro/CNVD-2021-40201
Add CNVD-2021-40201
2021-08-18 11:00:10 +08:00
Casdoor/CVE-2022-24124
add CVE-2021-44910、CVE-2022-24124
2022-03-25 16:06:36 +08:00
Chemex/CNVD-2021-15573
Add CNVD-2021-15573
2021-09-24 17:55:11 +08:00
CirCarLife/CVE-2018-12634
Add CVE-2018-12634
2021-09-16 18:02:47 +08:00
Cisco
add CVE-2022-20705
2022-04-08 16:39:26 +08:00
Citrix
add CVE-2020-8209
2020-11-20 10:54:38 +08:00
Clinical_Browsing_System
add Clinical Browsing System Boolean SQLi
2021-08-02 15:11:48 +08:00
COMMAX/Ruvie CCTV Bridge DVR Unauthorized
Add COMMAX Ruvie CCTV Bridge DVR Unauthorized
2021-08-18 11:02:41 +08:00
Consul/Consul_Service_API_RCE
add Consul_Service_API_RCE
2021-07-16 10:22:41 +08:00
Crestron
fix: CVE-2022-23178
2022-03-30 15:31:46 +08:00
CRMEB/DaTong_sid_sqli
Add CRMEB DaTong sid sqli
2021-09-16 18:00:53 +08:00
DocCMS/Doccms keyword sqli
Add Doccms keyword sqli
2021-08-30 18:46:30 +08:00
DotCMS/CVE-2022-26352
add: CVE-2022-26352
2022-05-07 11:09:38 +08:00
DrayTek/CVE-2020-8515
Add CVE-2020-8515
2020-06-08 16:22:05 +08:00
Druid/CVE-2021-25646
add CVE-2021-25646
2021-02-04 15:30:24 +08:00
Drupal
ADD drupal_6340
2020-12-13 20:00:27 +08:00
Dubbo/CVE-2020-1948
update README.md
2020-08-21 17:24:17 +08:00
Dwsurvey/Dwsurvey_3_2_Arbitrary_File_Read
Add Dwsurvey 3.2 Arbitrary File Read
2021-09-24 18:20:14 +08:00
ECOA/ECOA_Building_System
Add ECOA Building System multiple vulnerabilities
2021-09-16 18:11:27 +08:00
Eyoucms
fix image path
2021-08-04 20:43:19 +08:00
F5
add : CVE-2022-1388
2022-05-09 18:48:05 +08:00
Fastjson/CNVD-2017-02833
add CNVD-2017-02833
2020-11-06 22:51:39 +08:00
Flink
update CVE-2020-17518.gif
2021-01-08 12:09:19 +08:00
ForgeRock/CVE-2021-35464
add CVE_2021_35464
2021-07-01 11:31:21 +08:00
FortiLogger/CVE-2021-3378
add CVE-2021-3378
2021-07-22 17:56:35 +08:00
FortiOS/CVE-2018-13379
Update README.md
2020-06-08 19:53:04 +08:00
Geowebserver/5_3_3_Arbitrary_File_Read
Add Geowebserver 5.3.3 Arbitrary File Read
2021-09-10 14:40:26 +08:00
GlassFish/GlassFish Server
add: GlassFish_Server_Open_Source_Edition_3_01_Local_File_Inclusion
2022-05-07 11:10:51 +08:00
Gurock/CVE-2021-40875
Add CVE-2021-40875
2021-09-24 17:53:42 +08:00
HD-Network/CVE-2021-45043
add HD_Network_Local_File_Inclusion_CVE_2021_45043
2021-12-16 16:44:40 +08:00
Hongdian/CVE-2021-28149
Add CVE-2021-28149
2021-08-14 18:33:51 +08:00
Huahou/iRDM4000
Add iRDM4000 cookie bypass
2021-09-24 18:09:40 +08:00
HybridDVR/default_admin_account_rce
Add hybrid_dvr_default_admin_account_rce
2020-06-09 14:17:09 +08:00
imgs
Update verify.png
2020-04-03 10:42:47 +08:00
Intelbras Wireless/CVE-2021-3017
Add CVE-2021-3017
2021-08-25 17:47:48 +08:00
Jenkins
Add CVE-2017-1000353
2020-04-23 10:57:51 +08:00
Jetty
fix image path
2021-08-04 20:43:19 +08:00
JingHang/JingHang online marking Arbitrary File Upload
Add JingHang online marking Arbitrary File Upload
2021-08-14 18:40:00 +08:00
Kingsoft/get_file_content_php
Add Kingsoft V8V9 get_file_content.php File Read
2021-08-30 16:03:55 +08:00
KlogServer/CVE-2020-35729
add CVE-2020-35729
2021-08-02 14:45:40 +08:00
Kyan/Kyan_time_RCE
Add Kyan Network monitoring time RCE
2021-09-10 14:34:03 +08:00
Landray-OA
update Landray OA custom.jsp RCE
2021-07-01 18:27:01 +08:00
lanproxy/CVE-2021-3019
add CVE-2021-3019
2021-01-13 10:41:35 +08:00
LiferayPortal/CVE-2020-7961
Add CVE-2020-7961.gif
2020-06-08 11:00:22 +08:00
Log4j2
add: Horizon
2022-01-18 11:02:51 +08:00
ManageEngine
add CVE-2020-28653
2021-08-05 18:48:25 +08:00
MCms
add: Crestron_Hd_Md4X2_Credential_Disclosure_CVE_2022_23178
2022-01-26 16:04:16 +08:00
Microsoft/Exchange
add Exchange/CVE-2021-34473/Microsoft_Exchange_Server_Remote_Code_Execution_Vulnerability_CVE-2021-34473.gif
2021-08-30 19:50:12 +08:00
Mida_eFramework/CVE-2020-15920
add CVE-2020-15920
2021-08-02 14:50:23 +08:00
Mobinat Wireless Router
Add Mobinat Wireless Router system_log.cgi RCE
2021-08-14 18:47:09 +08:00
Mobotix/Mobotix_default_account
Add Mobotix_default_account
2020-04-23 10:51:10 +08:00
Mongo-Express/CVE-2019-10758
Add CVE-2019-10758
2020-04-28 12:31:55 +08:00
NETGEAR/DGND3700
add: NETGEAR DGND3700v2 c4 IPAddr RCE
2022-03-18 16:40:37 +08:00
Nexus/CVE-2019-7238
ADD neuxs_7238
2020-12-13 23:03:39 +08:00
NexusDB/CVE-2020-24571
add CVE-2020-24571
2020-12-04 09:54:47 +08:00
NiFi/Api_RCE
Update README.md
2020-12-04 16:37:09 +08:00
NuCom/NuCom 11N Wireless Router v5.07.90 Remote Privilege Escalation
Add NuCom Remote Privilege Escalation
2021-08-09 12:31:13 +08:00
Nuuo/CVE-2019-9653
add : CVE-2019-9653
2022-05-13 12:00:44 +08:00
OpenCats/CVE-2019-13358
Add CVE-2019-13358
2021-09-24 17:48:23 +08:00
OpenSMTPD/CVE-2020-7247
Add CVE-2020-7247.gif
2020-06-12 20:29:33 +08:00
Optilink
add Optilink/Optilink_Management_system_gene.php_RCE
2022-04-08 16:39:53 +08:00
PbootCMS/PbootCMS_parserIfLabel_RCE
rename
2021-07-06 16:49:08 +08:00
pfsense
add : pfSense_Arbitrary_File_Write_to_RCE
2022-06-24 12:02:40 +08:00
PHP/PHP 8.1.0-dev Zerodium Backdoor
add PHP 8.1.0-dev Zerodium Backdoor vulnerabilities
2021-08-05 17:54:27 +08:00
PPGo_Job/PPGo_Job Auth Login Bypass
add HD_Network_Local_File_Inclusion_CVE_2021_45043
2021-12-16 16:44:40 +08:00
qdPM/qdPM 9.2 Database Information leakage
Add qdPM 9.2 Database Information leakage
2021-08-09 12:32:43 +08:00
RaspAP/CVE-2021-33357
add : CVE-2021-33357
2022-06-24 12:02:08 +08:00
Ricon/Ricon Industrial Cellular Router apply.cgi RCE
Add Ricon Industrial Cellular Router apply.cgi RCE
2021-08-09 14:07:52 +08:00
Sahi-Pro
add Sahi_pro_7.x_8.x_Arbitrary_File_Read_CVE_2018_20470, Sahi_Pro_v8.x_RCE_CVE_2019_13597
2021-08-10 14:58:01 +08:00
SaltStack
add CVE-2021-25282
2021-07-13 11:40:32 +08:00
Scrapyd
add Scrapyd Unauthorized Access RCE
2021-07-29 15:01:53 +08:00
Seeyon
[add] Seeyon_OA_Fastjson_loginController_do_RCE
2021-07-07 16:47:49 +08:00
SharePoint/CVE-2019-0604
add CVE-2019-0604
2020-11-24 10:06:28 +08:00
Shiro/CVE-2016-4437
Add CVE-2016-4437
2020-05-25 19:53:00 +08:00
shuipFCMS/ShuipFCMS_authcode_leak_and_RCE
add ShuipFCMS authcode leak and RCE
2021-08-02 21:38:37 +08:00
Softneta/MedDream_Directory_Traversal
Add Softneta MedDream 6.7.11 Directory Traversal
2021-09-16 18:17:02 +08:00
SolarWinds/CVE-2020-10148
add CVE-2020-10148
2021-01-06 11:08:12 +08:00
SonicWall/SonicWall_SSL-VPN_RCE
add SonicWall_SSL-VPN_RCE
2021-02-04 15:57:03 +08:00
Sophos/CVE-2020-25223
Add CVE-2020-25223
2021-09-16 17:58:43 +08:00
Spring
fix query
2022-04-02 14:23:09 +08:00
Spring Cloud
add Spring_Cloud_Function_SPEL_Vulnerability
2022-04-02 14:21:57 +08:00
SpringBlade/CVE-2021-44910
add CVE-2021-44910、CVE-2022-24124
2022-03-25 16:06:36 +08:00
Strapi/CVE-2019-18818
Add CVE-2019-18818
2021-09-10 14:36:03 +08:00
Struts2
add S2-061
2020-12-16 10:39:16 +08:00
SunloginClient/CNVD-2022-10270
add: SunloginClient ping RCE (CNVD-2022-10270)
2022-02-16 12:24:02 +08:00
Supervisor/CVE-2017-11610
Add another gif
2020-07-10 17:22:29 +08:00
TCExam/CVE-2021-20114
Add CVE-2021-20114
2021-08-14 18:53:03 +08:00
Telerik-UI/CVE-2019-18935
add Progress_Telerik_UI_for_ASP_NET_AJAX_Deserialization_CVE_2019_18935
2021-07-17 16:18:08 +08:00
Tenda/uploadWewifiPic RCE
add: Zabbix CVE-2022-23131
2022-02-24 14:54:43 +08:00
TG-WanWangBoTong
fix image path
2021-08-04 20:43:19 +08:00
Thecus/Thecus NAS
Add Thecus NAS Post Auth Command Injection
2021-08-14 18:56:56 +08:00
ThinkPHP
Update gif
2020-04-23 14:15:21 +08:00
Tomcat
add CVE-2017-12615
2020-11-06 22:13:51 +08:00
TongdaOA
update README.md
2020-12-30 11:39:51 +08:00
TotoLink/CVE-2020-25499
add TOTOLINK routers remote command injection vulnerabilities (CVE-2020-25499)
2021-08-06 18:06:04 +08:00
Unomi/CVE-2020-13942
add CVE-2020-13942
2020-11-26 18:31:12 +08:00
Unraid/CVE-2020-5847
ADD drupal_6340
2020-12-13 22:50:58 +08:00
UNV
add : UNV_ip_camera_RCE
2022-06-02 17:29:34 +08:00
URVE/CVE-2020-29552
Add CVE-2020-29552
2021-08-14 19:01:21 +08:00
vBulletin/CVE-2019-16759
Add CVE-2019-16759
2020-04-28 13:35:59 +08:00
VMware
add : CVE-2022-22972
2022-05-20 12:23:06 +08:00
Wanhu/ezEIP
Add CNVD-2021-30192
2021-08-18 11:10:21 +08:00
Weaver
Weaver-OA E-Cology RCE
2021-05-18 10:16:01 +08:00
WebLogic
add Weblogic Secondary Deserialization RCE (CVE-2021-2135)
2021-07-25 16:07:12 +08:00
Webmin/CVE-2019-15107
add CVE-2019-15107
2020-11-06 22:30:36 +08:00
Windor/FileDownLoad_aspx
Add Windor FileDownLoad.aspx Arbitrary File Read
2021-08-30 16:51:42 +08:00
WordPress
add : WordPress CVE-2019-11185
2022-06-02 17:29:09 +08:00
XXL-JOB/XXL-JOB_API_Unauthenticated_glueSource_RCE
11_16
2020-11-16 16:17:23 +08:00
YApi
fix image path
2021-08-04 20:43:19 +08:00
Yealink/CVE-2021-27561
add Yealink_Device_Management_Platform_SSRF_CVE_2021_27561
2021-08-02 20:27:13 +08:00
Yonyou/Yonyou_NC_RCE_with_file_upload
add Yonyou_NC_RCE_with_file_upload
2020-12-10 16:30:30 +08:00
Yunxintong/SMS
Add Yunxintong Cropper.aspx Arbitrary File Read
2021-08-30 16:13:16 +08:00
Zabbix
add: Zabbix(CVE-2022-23134)
2022-03-18 18:25:33 +08:00
ZBL/ZBL EPON ONU Broadband Router 1.0
Add ZBL Router 1.0 Remote Privilege Escalation
2021-08-09 14:13:30 +08:00
zhongkebohua/CNVD-2016-07063
Add CNVD-2016-07063
2021-08-25 18:28:32 +08:00
Zimbra/CVE-2019-9670
add CVE-2019-9670
2020-12-03 20:08:21 +08:00
Zyxel/CVE-2022-30525
Update README.md
2022-05-16 11:36:56 +08:00
.gitattributes
Initial commit
2020-04-03 10:13:03 +08:00
CaiMore_Gateway_formping_file_Command_Execution_Vulnerability.md
Update and rename CVE-2022-35405 to CaiMore_Gateway_formping_file_Command_Execution_Vulnerability.md
2023-04-13 15:43:13 +08:00
CVD-2021-4417.md
Rename CVD-2021-4417 to CVD-2021-4417.md
2023-04-21 15:58:07 +08:00
CVD-2023-2177.md
Create CVD-2023-2177.md
2023-04-06 20:07:53 +08:00
CVE-2013-2251.md
Rename CVE-2013-2251 to CVE-2013-2251.md
2023-04-21 15:56:55 +08:00
CVE-2019-16278.md
Rename CVE-2019-16278 to CVE-2019-16278.md
2023-04-21 15:57:40 +08:00
CVE-2019-16891.md
Create CVE-2019-16891.md
2023-04-01 12:39:52 +08:00
CVE-2020-7961.md
Create CVE-2020-7961.md
2023-04-07 11:13:57 +08:00
CVE-2020-8644.md
Create CVE-2020-8644.md
2023-04-06 20:07:11 +08:00
CVE-2020-9496.md
Create CVE-2020-9496.md
2023-04-01 12:39:26 +08:00
CVE-2020-24589.md
Create CVE-2020-24589.md
2023-04-07 11:32:03 +08:00
CVE-2021-4642.md
Create CVE-2021-4642.md
2023-05-12 18:12:14 +08:00
CVE-2021-26857\CVE-2021-26858.md
Create CVE-2021-26857\CVE-2021-26858.md
2023-04-07 11:42:37 +08:00
CVE-2021-41419.md
Create CVE-2021-41419.md
2023-04-01 12:38:50 +08:00
CVE-2021-42392.md
Create CVE-2021-42392.md
2023-04-07 10:58:06 +08:00
CVE-2022-0342.md
Create CVE-2022-0342.md
2023-04-01 12:35:04 +08:00
CVE-2022-1442.md
Update CVE-2022-1442.md
2023-04-13 15:29:51 +08:00
CVE-2022-2030.md
Create CVE-2022-2030.md
2023-04-01 12:43:23 +08:00
CVE-2022-2486.md
Create CVE-2022-2486.md
2023-04-07 11:47:18 +08:00
CVE-2022-3254.md
Create CVE-2022-3254.md
2023-04-13 15:44:59 +08:00
CVE-2022-22928.md
Create CVE-2022-22928.md
2023-04-13 15:26:50 +08:00
CVE-2022-23944.md
Create CVE-2022-23944.md
2023-04-07 11:06:13 +08:00
CVE-2022-24706.md
Create CVE-2022-24706.md
2023-04-17 18:32:20 +08:00
CVE-2022-26135.md
Create CVE-2022-26135.md
2023-04-01 12:38:22 +08:00
CVE-2022-26138.md
Create CVE-2022-26138.md
2023-04-01 12:37:31 +08:00
CVE-2022-27373.md
Create CVE-2022-27373.md
2023-04-01 12:36:52 +08:00
CVE-2022-27596.md
Create CVE-2022-27596.md
2023-04-04 18:52:32 +08:00
CVE-2022-31474.md
Create CVE-2022-31474.md
2023-04-01 12:40:51 +08:00
CVE-2022-32300.md
Create CVE-2022-32300.md
2023-04-06 20:06:49 +08:00
CVE-2022-32417.md
Create CVE-2022-32417.md
2023-04-01 12:35:46 +08:00
CVE-2022-35405.md
Create CVE-2022-35405.md
2023-04-13 15:28:07 +08:00
CVE-2022-41544.md
Create CVE-2022-41544.md
2023-04-13 15:45:23 +08:00
CVE-2023-0669.md
Create CVE-2023-0669.md
2023-04-13 15:27:37 +08:00
CVE-2023-2183.md
Create CVE-2023-2183.md
2023-04-01 12:36:24 +08:00
CVE-2023-21931.md
Create CVE-2023-21931.md
2023-04-19 04:50:04 +08:00
CVE-2023-21979.md
Rename CVE-2023-21979 to CVE-2023-21979.md
2023-04-21 15:56:14 +08:00
CVE-2023-23333.md
Create CVE-2023-23333.md
2023-04-06 20:06:18 +08:00
CVE-2023-25814.md
Create CVE-2023-25814.md
2023-04-13 15:47:43 +08:00
ezOFFICE OA OfficeServer.jsp Arbitrarily File Upload Vulnerability.md
Create ezOFFICE OA OfficeServer.jsp Arbitrarily File Upload Vulnerability.md
2023-04-27 21:58:32 +08:00
GobyVuls-Document.md
Update GobyVuls-Document.md
2023-05-12 18:03:58 +08:00
Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md
Create Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md
2023-04-13 15:47:12 +08:00
Hikvision_iSecure_Center_springboot_Information_disclosure_vulnerability.md
Create Hikvision_iSecure_Center_springboot_Information_disclosure_vulnerability.md
2023-04-13 15:42:22 +08:00
NUUO_NVR___debugging_center_utils___.php_Command_Execution.md
Create NUUO_NVR___debugging_center_utils___.php_Command_Execution.md
2023-04-13 15:46:31 +08:00
OpenCart_So_Newsletter_Custom_Popup_4.0_module_email_parameter_SQL_injection_vulnerability.md
Create OpenCart_So_Newsletter_Custom_Popup_4.0_module_email_parameter_SQL_injection_vulnerability.md
2023-04-13 15:44:25 +08:00
README.md
Update README.md
2020-12-11 04:06:45 +08:00
Ruiyou_Tianyi_Application_Virtualization_System_Index.php_File_Remote_Code_Execution_Vulnerability.md
Create Ruiyou_Tianyi_Application_Virtualization_System_Index.php_File_Remote_Code_Execution_Vulnerability.md
2023-04-13 15:53:03 +08:00
secnet_Intelligent_Router_actpt_5g.data_Infoleakage.md
Create secnet_Intelligent_Router_actpt_5g.data_Infoleakage.md
2023-05-12 18:15:39 +08:00
Sinovision_Cloud_CDN_live_default_passwd.md
Create Sinovision_Cloud_CDN_live_default_passwd.md
2023-05-12 18:13:24 +08:00
Smartbi DB2 JDBC Arbitrary Code Execution Vulnerability.md
Create Smartbi DB2 JDBC Arbitrary Code Execution Vulnerability.md
2023-03-30 19:34:21 +08:00
SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md
Create SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md
2023-05-12 18:17:45 +08:00
Telesquare_TLR-2005Ksh_getUsernamePassword_Information_Disclosure.md
Create Telesquare_TLR-2005Ksh_getUsernamePassword_Information_Disclosure.md
2023-05-12 18:11:01 +08:00
Telesquare_TLR-2005Ksh_setSyncTimeHost_RCE.md
Create Telesquare_TLR-2005Ksh_setSyncTimeHost_RCE.md
2023-05-12 18:09:36 +08:00
vulnerability_list.md
update vulnerability_list.md
2020-12-31 11:22:44 +08:00
WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability.md
Rename WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability to WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability.md
2023-05-12 18:16:22 +08:00
ZXHN H108NS Router tools_admin.asp Permission Bypass Vulnerability.md
Create ZXHN H108NS Router tools_admin.asp Permission Bypass Vulnerability.md
2023-04-27 21:58:02 +08:00

README.md

GobyVuls

Vulnerabilities of Goby supported with exploitation.

This folder contains a variety of vulnerability exploitations for working with goby.

Running an explotation

Download goby from release page, and run.

Scan ips which may exist the vulnerability

goby new scan

Click "verify" button

goby verify

Do some action like execute cmd, or get a reverse shell

goby explotation

Contributing

Pull Requests and contributions to this project are encouraged and greatly welcomed! The goby project always needs new vulnerabilities, and needs talented developers (such as yourself!) to submit fixes for the existing demos when they break.

Download

You can go to the official website to download Goby.

Description
Vulnerabilities of Goby supported with exploitation.
cvecve-2023-22527cve-2023-51467cve-2024-0204cve-2024-20931cve-2024-21887cve-2024-21893cve-2024-23897cve-2024-25600exploitexplotationgobyproxyshellvulnerabilities
Readme 204 MiB
Languages
Go 100%