0 Fork 0

mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-27 19:10:51 +00:00

T

Goby 8bca2d6c49 Create ZyXEL_routers_Export_Log_arbitrary_file_read.md

add ZyXEL_routers_Export_Log_arbitrary_file_read

2023-05-12 18:19:11 +08:00

ActiveMQ/CVE-2016-3088

Update CVE-2016-3088.gif

2020-04-20 09:57:40 +08:00

ANTlabs/IG3100_telnet_default_account

Add antlabs_default_account.gif

2020-06-11 11:33:40 +08:00

Apache CouchDB/CVE-2022-24706

add : CVE-2022-24706

2022-05-20 12:22:32 +08:00

Apache OFBiz

add vul demo

2021-05-18 14:14:09 +08:00

Apache Tapestry/CVE-2021-27850

fix name

2021-07-02 19:05:16 +08:00

Arcadyan/CVE-2021-20090

add Arcadyan_Routers_Authentication_Bypassing_CVE_2021_20090

2021-08-04 20:40:11 +08:00

Atlassian/Confluence

add : CVE-2022-26134

2022-06-04 16:47:56 +08:00

AVCON-6/CNVD-2020-30193

Add CNVD-2020-30193

2021-08-18 10:58:33 +08:00

Bitbucket/CVE-2022-26133

add CVE-2022-26133

2022-04-21 15:47:39 +08:00

Bithighway/CNVD-2021-37007

Add CNVD-2021-37007

2021-08-25 17:45:55 +08:00

BruteForce/RDP

add RDP bruteforce

2020-12-11 10:10:28 +08:00

BusinessIntelligence/CVE-2020-14864

add CVE-2020-14864

2020-12-03 20:16:14 +08:00

Byzoro/CNVD-2021-40201

Add CNVD-2021-40201

2021-08-18 11:00:10 +08:00

Casdoor/CVE-2022-24124

add CVE-2021-44910、CVE-2022-24124

2022-03-25 16:06:36 +08:00

Chemex/CNVD-2021-15573

Add CNVD-2021-15573

2021-09-24 17:55:11 +08:00

CirCarLife/CVE-2018-12634

Add CVE-2018-12634

2021-09-16 18:02:47 +08:00

Cisco

add CVE-2022-20705

2022-04-08 16:39:26 +08:00

Citrix

add CVE-2020-8209

2020-11-20 10:54:38 +08:00

Clinical_Browsing_System

add Clinical Browsing System Boolean SQLi

2021-08-02 15:11:48 +08:00

COMMAX/Ruvie CCTV Bridge DVR Unauthorized

Add COMMAX Ruvie CCTV Bridge DVR Unauthorized

2021-08-18 11:02:41 +08:00

Consul/Consul_Service_API_RCE

add Consul_Service_API_RCE

2021-07-16 10:22:41 +08:00

Crestron

fix: CVE-2022-23178

2022-03-30 15:31:46 +08:00

CRMEB/DaTong_sid_sqli

Add CRMEB DaTong sid sqli

2021-09-16 18:00:53 +08:00

DocCMS/Doccms keyword sqli

Add Doccms keyword sqli

2021-08-30 18:46:30 +08:00

DotCMS/CVE-2022-26352

add: CVE-2022-26352

2022-05-07 11:09:38 +08:00

DrayTek/CVE-2020-8515

Add CVE-2020-8515

2020-06-08 16:22:05 +08:00

Druid/CVE-2021-25646

add CVE-2021-25646

2021-02-04 15:30:24 +08:00

Drupal

ADD drupal_6340

2020-12-13 20:00:27 +08:00

Dubbo/CVE-2020-1948

update README.md

2020-08-21 17:24:17 +08:00

Dwsurvey/Dwsurvey_3_2_Arbitrary_File_Read

Add Dwsurvey 3.2 Arbitrary File Read

2021-09-24 18:20:14 +08:00

ECOA/ECOA_Building_System

Add ECOA Building System multiple vulnerabilities

2021-09-16 18:11:27 +08:00

Eyoucms

fix image path

2021-08-04 20:43:19 +08:00

add : CVE-2022-1388

2022-05-09 18:48:05 +08:00

Fastjson/CNVD-2017-02833

add CNVD-2017-02833

2020-11-06 22:51:39 +08:00

Flink

update CVE-2020-17518.gif

2021-01-08 12:09:19 +08:00

ForgeRock/CVE-2021-35464

add CVE_2021_35464

2021-07-01 11:31:21 +08:00

FortiLogger/CVE-2021-3378

add CVE-2021-3378

2021-07-22 17:56:35 +08:00

FortiOS/CVE-2018-13379

Update README.md

2020-06-08 19:53:04 +08:00

Geowebserver/5_3_3_Arbitrary_File_Read

Add Geowebserver 5.3.3 Arbitrary File Read

2021-09-10 14:40:26 +08:00

GlassFish/GlassFish Server

add: GlassFish_Server_Open_Source_Edition_3_01_Local_File_Inclusion

2022-05-07 11:10:51 +08:00

Gurock/CVE-2021-40875

Add CVE-2021-40875

2021-09-24 17:53:42 +08:00

HD-Network/CVE-2021-45043

add HD_Network_Local_File_Inclusion_CVE_2021_45043

2021-12-16 16:44:40 +08:00

Hongdian/CVE-2021-28149

Add CVE-2021-28149

2021-08-14 18:33:51 +08:00

Huahou/iRDM4000

Add iRDM4000 cookie bypass

2021-09-24 18:09:40 +08:00

HybridDVR/default_admin_account_rce

Add hybrid_dvr_default_admin_account_rce

2020-06-09 14:17:09 +08:00

imgs

Update verify.png

2020-04-03 10:42:47 +08:00

Intelbras Wireless/CVE-2021-3017

Add CVE-2021-3017

2021-08-25 17:47:48 +08:00

Jenkins

Add CVE-2017-1000353

2020-04-23 10:57:51 +08:00

Jetty

fix image path

2021-08-04 20:43:19 +08:00

JingHang/JingHang online marking Arbitrary File Upload

Add JingHang online marking Arbitrary File Upload

2021-08-14 18:40:00 +08:00

Kingsoft/get_file_content_php

Add Kingsoft V8V9 get_file_content.php File Read

2021-08-30 16:03:55 +08:00

KlogServer/CVE-2020-35729

add CVE-2020-35729

2021-08-02 14:45:40 +08:00

Kyan/Kyan_time_RCE

Add Kyan Network monitoring time RCE

2021-09-10 14:34:03 +08:00

Landray-OA

update Landray OA custom.jsp RCE

2021-07-01 18:27:01 +08:00

lanproxy/CVE-2021-3019

add CVE-2021-3019

2021-01-13 10:41:35 +08:00

LiferayPortal/CVE-2020-7961

Add CVE-2020-7961.gif

2020-06-08 11:00:22 +08:00

Log4j2

add: Horizon

2022-01-18 11:02:51 +08:00

ManageEngine

add CVE-2020-28653

2021-08-05 18:48:25 +08:00

MCms

add: Crestron_Hd_Md4X2_Credential_Disclosure_CVE_2022_23178

2022-01-26 16:04:16 +08:00

Microsoft/Exchange

add Exchange/CVE-2021-34473/Microsoft_Exchange_Server_Remote_Code_Execution_Vulnerability_CVE-2021-34473.gif

2021-08-30 19:50:12 +08:00

Mida_eFramework/CVE-2020-15920

add CVE-2020-15920

2021-08-02 14:50:23 +08:00

Mobinat Wireless Router

Add Mobinat Wireless Router system_log.cgi RCE

2021-08-14 18:47:09 +08:00

Mobotix/Mobotix_default_account

Add Mobotix_default_account

2020-04-23 10:51:10 +08:00

Mongo-Express/CVE-2019-10758

Add CVE-2019-10758

2020-04-28 12:31:55 +08:00

NETGEAR/DGND3700

add: NETGEAR DGND3700v2 c4 IPAddr RCE

2022-03-18 16:40:37 +08:00

Nexus/CVE-2019-7238

ADD neuxs_7238

2020-12-13 23:03:39 +08:00

NexusDB/CVE-2020-24571

add CVE-2020-24571

2020-12-04 09:54:47 +08:00

NiFi/Api_RCE

Update README.md

2020-12-04 16:37:09 +08:00

NuCom/NuCom 11N Wireless Router v5.07.90 Remote Privilege Escalation

Add NuCom Remote Privilege Escalation

2021-08-09 12:31:13 +08:00

Nuuo/CVE-2019-9653

add : CVE-2019-9653

2022-05-13 12:00:44 +08:00

OpenCats/CVE-2019-13358

Add CVE-2019-13358

2021-09-24 17:48:23 +08:00

OpenSMTPD/CVE-2020-7247

Add CVE-2020-7247.gif

2020-06-12 20:29:33 +08:00

Optilink

add Optilink/Optilink_Management_system_gene.php_RCE

2022-04-08 16:39:53 +08:00

PbootCMS/PbootCMS_parserIfLabel_RCE

rename

2021-07-06 16:49:08 +08:00

pfsense

add : pfSense_Arbitrary_File_Write_to_RCE

2022-06-24 12:02:40 +08:00

PHP/PHP 8.1.0-dev Zerodium Backdoor

add PHP 8.1.0-dev Zerodium Backdoor vulnerabilities

2021-08-05 17:54:27 +08:00

PPGo_Job/PPGo_Job Auth Login Bypass

add HD_Network_Local_File_Inclusion_CVE_2021_45043

2021-12-16 16:44:40 +08:00

qdPM/qdPM 9.2 Database Information leakage

Add qdPM 9.2 Database Information leakage

2021-08-09 12:32:43 +08:00

RaspAP/CVE-2021-33357

add : CVE-2021-33357

2022-06-24 12:02:08 +08:00

Ricon/Ricon Industrial Cellular Router apply.cgi RCE

Add Ricon Industrial Cellular Router apply.cgi RCE

2021-08-09 14:07:52 +08:00

Sahi-Pro

add Sahi_pro_7.x_8.x_Arbitrary_File_Read_CVE_2018_20470, Sahi_Pro_v8.x_RCE_CVE_2019_13597

2021-08-10 14:58:01 +08:00

SaltStack

add CVE-2021-25282

2021-07-13 11:40:32 +08:00

Scrapyd

add Scrapyd Unauthorized Access RCE

2021-07-29 15:01:53 +08:00

Seeyon

[add] Seeyon_OA_Fastjson_loginController_do_RCE

2021-07-07 16:47:49 +08:00

SharePoint/CVE-2019-0604

add CVE-2019-0604

2020-11-24 10:06:28 +08:00

Shiro/CVE-2016-4437

Add CVE-2016-4437

2020-05-25 19:53:00 +08:00

shuipFCMS/ShuipFCMS_authcode_leak_and_RCE

add ShuipFCMS authcode leak and RCE

2021-08-02 21:38:37 +08:00

Softneta/MedDream_Directory_Traversal

Add Softneta MedDream 6.7.11 Directory Traversal

2021-09-16 18:17:02 +08:00

SolarWinds/CVE-2020-10148

add CVE-2020-10148

2021-01-06 11:08:12 +08:00

SonicWall/SonicWall_SSL-VPN_RCE

add SonicWall_SSL-VPN_RCE

2021-02-04 15:57:03 +08:00

Sophos/CVE-2020-25223

Add CVE-2020-25223

2021-09-16 17:58:43 +08:00

Spring

fix query

2022-04-02 14:23:09 +08:00

Spring Cloud

add Spring_Cloud_Function_SPEL_Vulnerability

2022-04-02 14:21:57 +08:00

SpringBlade/CVE-2021-44910

add CVE-2021-44910、CVE-2022-24124

2022-03-25 16:06:36 +08:00

Strapi/CVE-2019-18818

Add CVE-2019-18818

2021-09-10 14:36:03 +08:00

Struts2

add S2-061

2020-12-16 10:39:16 +08:00

SunloginClient/CNVD-2022-10270

add: SunloginClient ping RCE (CNVD-2022-10270)

2022-02-16 12:24:02 +08:00

Supervisor/CVE-2017-11610

Add another gif

2020-07-10 17:22:29 +08:00

TCExam/CVE-2021-20114

Add CVE-2021-20114

2021-08-14 18:53:03 +08:00

Telerik-UI/CVE-2019-18935

add Progress_Telerik_UI_for_ASP_NET_AJAX_Deserialization_CVE_2019_18935

2021-07-17 16:18:08 +08:00

Tenda/uploadWewifiPic RCE

add: Zabbix CVE-2022-23131

2022-02-24 14:54:43 +08:00

TG-WanWangBoTong

fix image path

2021-08-04 20:43:19 +08:00

Thecus/Thecus NAS

Add Thecus NAS Post Auth Command Injection

2021-08-14 18:56:56 +08:00

ThinkPHP

Update gif

2020-04-23 14:15:21 +08:00

Tomcat

add CVE-2017-12615

2020-11-06 22:13:51 +08:00

TongdaOA

update README.md

2020-12-30 11:39:51 +08:00

TotoLink/CVE-2020-25499

add TOTOLINK routers remote command injection vulnerabilities (CVE-2020-25499)

2021-08-06 18:06:04 +08:00

Unomi/CVE-2020-13942

add CVE-2020-13942

2020-11-26 18:31:12 +08:00

Unraid/CVE-2020-5847

ADD drupal_6340

2020-12-13 22:50:58 +08:00

UNV

add : UNV_ip_camera_RCE

2022-06-02 17:29:34 +08:00

URVE/CVE-2020-29552

Add CVE-2020-29552

2021-08-14 19:01:21 +08:00

vBulletin/CVE-2019-16759

Add CVE-2019-16759

2020-04-28 13:35:59 +08:00

VMware

add : CVE-2022-22972

2022-05-20 12:23:06 +08:00

Wanhu/ezEIP

Add CNVD-2021-30192

2021-08-18 11:10:21 +08:00

Weaver

Weaver-OA E-Cology RCE

2021-05-18 10:16:01 +08:00

WebLogic

add Weblogic Secondary Deserialization RCE (CVE-2021-2135)

2021-07-25 16:07:12 +08:00

Webmin/CVE-2019-15107

add CVE-2019-15107

2020-11-06 22:30:36 +08:00

Windor/FileDownLoad_aspx

Add Windor FileDownLoad.aspx Arbitrary File Read

2021-08-30 16:51:42 +08:00

WordPress

add : WordPress CVE-2019-11185

2022-06-02 17:29:09 +08:00

XXL-JOB/XXL-JOB_API_Unauthenticated_glueSource_RCE

11_16

2020-11-16 16:17:23 +08:00

YApi

fix image path

2021-08-04 20:43:19 +08:00

Yealink/CVE-2021-27561

add Yealink_Device_Management_Platform_SSRF_CVE_2021_27561

2021-08-02 20:27:13 +08:00

Yonyou/Yonyou_NC_RCE_with_file_upload

add Yonyou_NC_RCE_with_file_upload

2020-12-10 16:30:30 +08:00

Yunxintong/SMS

Add Yunxintong Cropper.aspx Arbitrary File Read

2021-08-30 16:13:16 +08:00

Zabbix

add: Zabbix(CVE-2022-23134)

2022-03-18 18:25:33 +08:00

ZBL/ZBL EPON ONU Broadband Router 1.0

Add ZBL Router 1.0 Remote Privilege Escalation

2021-08-09 14:13:30 +08:00

zhongkebohua/CNVD-2016-07063

Add CNVD-2016-07063

2021-08-25 18:28:32 +08:00

Zimbra/CVE-2019-9670

add CVE-2019-9670

2020-12-03 20:08:21 +08:00

Zyxel/CVE-2022-30525

Update README.md

2022-05-16 11:36:56 +08:00

.gitattributes

Initial commit

2020-04-03 10:13:03 +08:00

CaiMore_Gateway_formping_file_Command_Execution_Vulnerability.md

Update and rename CVE-2022-35405 to CaiMore_Gateway_formping_file_Command_Execution_Vulnerability.md

2023-04-13 15:43:13 +08:00

CVD-2021-4417.md

Rename CVD-2021-4417 to CVD-2021-4417.md

2023-04-21 15:58:07 +08:00

CVD-2023-2177.md

Create CVD-2023-2177.md

2023-04-06 20:07:53 +08:00

CVE-2013-2251.md

Rename CVE-2013-2251 to CVE-2013-2251.md

2023-04-21 15:56:55 +08:00

CVE-2019-16278.md

Rename CVE-2019-16278 to CVE-2019-16278.md

2023-04-21 15:57:40 +08:00

CVE-2019-16891.md

Create CVE-2019-16891.md

2023-04-01 12:39:52 +08:00

CVE-2020-7961.md

Create CVE-2020-7961.md

2023-04-07 11:13:57 +08:00

CVE-2020-8644.md

Create CVE-2020-8644.md

2023-04-06 20:07:11 +08:00

CVE-2020-9496.md

Create CVE-2020-9496.md

2023-04-01 12:39:26 +08:00

CVE-2020-24589.md

Create CVE-2020-24589.md

2023-04-07 11:32:03 +08:00

CVE-2021-4642.md

Create CVE-2021-4642.md

2023-05-12 18:12:14 +08:00

CVE-2021-26857\CVE-2021-26858.md

Create CVE-2021-26857\CVE-2021-26858.md

2023-04-07 11:42:37 +08:00

CVE-2021-41419.md

Create CVE-2021-41419.md

2023-04-01 12:38:50 +08:00

CVE-2021-42392.md

Create CVE-2021-42392.md

2023-04-07 10:58:06 +08:00

CVE-2022-0342.md

Create CVE-2022-0342.md

2023-04-01 12:35:04 +08:00

CVE-2022-1442.md

Update CVE-2022-1442.md

2023-04-13 15:29:51 +08:00

CVE-2022-2030.md

Create CVE-2022-2030.md

2023-04-01 12:43:23 +08:00

CVE-2022-2486.md

Create CVE-2022-2486.md

2023-04-07 11:47:18 +08:00

CVE-2022-3254.md

Create CVE-2022-3254.md

2023-04-13 15:44:59 +08:00

CVE-2022-22928.md

Create CVE-2022-22928.md

2023-04-13 15:26:50 +08:00

CVE-2022-23944.md

Create CVE-2022-23944.md

2023-04-07 11:06:13 +08:00

CVE-2022-24706.md

Create CVE-2022-24706.md

2023-04-17 18:32:20 +08:00

CVE-2022-26135.md

Create CVE-2022-26135.md

2023-04-01 12:38:22 +08:00

CVE-2022-26138.md

Create CVE-2022-26138.md

2023-04-01 12:37:31 +08:00

CVE-2022-27373.md

Create CVE-2022-27373.md

2023-04-01 12:36:52 +08:00

CVE-2022-27596.md

Create CVE-2022-27596.md

2023-04-04 18:52:32 +08:00

CVE-2022-31474.md

Create CVE-2022-31474.md

2023-04-01 12:40:51 +08:00

CVE-2022-32300.md

Create CVE-2022-32300.md

2023-04-06 20:06:49 +08:00

CVE-2022-32417.md

Create CVE-2022-32417.md

2023-04-01 12:35:46 +08:00

CVE-2022-35405.md

Create CVE-2022-35405.md

2023-04-13 15:28:07 +08:00

CVE-2022-41544.md

Create CVE-2022-41544.md

2023-04-13 15:45:23 +08:00

CVE-2023-0669.md

Create CVE-2023-0669.md

2023-04-13 15:27:37 +08:00

CVE-2023-2183.md

Create CVE-2023-2183.md

2023-04-01 12:36:24 +08:00

CVE-2023-21931.md

Create CVE-2023-21931.md

2023-04-19 04:50:04 +08:00

CVE-2023-21979.md

Rename CVE-2023-21979 to CVE-2023-21979.md

2023-04-21 15:56:14 +08:00

CVE-2023-23333.md

Create CVE-2023-23333.md

2023-04-06 20:06:18 +08:00

CVE-2023-25814.md

Create CVE-2023-25814.md

2023-04-13 15:47:43 +08:00

ezOFFICE OA OfficeServer.jsp Arbitrarily File Upload Vulnerability.md

Create ezOFFICE OA OfficeServer.jsp Arbitrarily File Upload Vulnerability.md

2023-04-27 21:58:32 +08:00

GobyVuls-Document.md

Update GobyVuls-Document.md

2023-05-12 18:03:58 +08:00

Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md

Create Grafana_welcome_Arbitrary_File_Reading_Vulnerability.md

2023-04-13 15:47:12 +08:00

Hikvision_iSecure_Center_springboot_Information_disclosure_vulnerability.md

Create Hikvision_iSecure_Center_springboot_Information_disclosure_vulnerability.md

2023-04-13 15:42:22 +08:00

NUUO_NVR___debugging_center_utils___.php_Command_Execution.md

Create NUUO_NVR___debugging_center_utils___.php_Command_Execution.md

2023-04-13 15:46:31 +08:00

OpenCart_So_Newsletter_Custom_Popup_4.0_module_email_parameter_SQL_injection_vulnerability.md

Create OpenCart_So_Newsletter_Custom_Popup_4.0_module_email_parameter_SQL_injection_vulnerability.md

2023-04-13 15:44:25 +08:00

README.md

Update README.md

2020-12-11 04:06:45 +08:00

Ruiyou_Tianyi_Application_Virtualization_System_Index.php_File_Remote_Code_Execution_Vulnerability.md

Create Ruiyou_Tianyi_Application_Virtualization_System_Index.php_File_Remote_Code_Execution_Vulnerability.md

2023-04-13 15:53:03 +08:00

secnet_Intelligent_Router_actpt_5g.data_Infoleakage.md

Create secnet_Intelligent_Router_actpt_5g.data_Infoleakage.md

2023-05-12 18:15:39 +08:00

Sinovision_Cloud_CDN_live_default_passwd.md

Create Sinovision_Cloud_CDN_live_default_passwd.md

2023-05-12 18:13:24 +08:00

Smartbi DB2 JDBC Arbitrary Code Execution Vulnerability.md

Create Smartbi DB2 JDBC Arbitrary Code Execution Vulnerability.md

2023-03-30 19:34:21 +08:00

SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md

Create SQL_injection_exists_on_Lotus_ERP_DictionaryEdit.aspx_pag.md

2023-05-12 18:17:45 +08:00

Telesquare_TLR-2005Ksh_getUsernamePassword_Information_Disclosure.md

Create Telesquare_TLR-2005Ksh_getUsernamePassword_Information_Disclosure.md

2023-05-12 18:11:01 +08:00

Telesquare_TLR-2005Ksh_setSyncTimeHost_RCE.md

Create Telesquare_TLR-2005Ksh_setSyncTimeHost_RCE.md

2023-05-12 18:09:36 +08:00

vulnerability_list.md

update vulnerability_list.md

2020-12-31 11:22:44 +08:00

WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability.md

Rename WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability to WordPress_plugin_Welcart_e-Commerce_content-log.php_logfile_File_Read_Vulnerability.md

2023-05-12 18:16:22 +08:00

ZXHN H108NS Router tools_admin.asp Permission Bypass Vulnerability.md

Create ZXHN H108NS Router tools_admin.asp Permission Bypass Vulnerability.md

2023-04-27 21:58:02 +08:00

ZyXEL_routers_Export_Log_arbitrary_file_read.md

Create ZyXEL_routers_Export_Log_arbitrary_file_read.md

2023-05-12 18:19:11 +08:00

README.md

GobyVuls

Vulnerabilities of Goby supported with exploitation.

This folder contains a variety of vulnerability exploitations for working with goby.

Running an explotation

Download goby from release page, and run.

Scan ips which may exist the vulnerability

Click "verify" button

Do some action like execute cmd, or get a reverse shell

Contributing

Pull Requests and contributions to this project are encouraged and greatly welcomed! The goby project always needs new vulnerabilities, and needs talented developers (such as yourself!) to submit fixes for the existing demos when they break.

Download

You can go to the official website to download Goby.