From 0faf310982d6e90ebcd54e9424e99826131ff44c Mon Sep 17 00:00:00 2001 From: Rainyseason <73454853+rainyseason-c@users.noreply.github.com> Date: Mon, 17 Mar 2025 11:22:01 +0800 Subject: [PATCH] Update README.md --- README.md | 2 ++ img.png | Bin 0 -> 10379 bytes 2 files changed, 2 insertions(+) create mode 100644 img.png diff --git a/README.md b/README.md index 53b6fbb..6e2f6cf 100644 --- a/README.md +++ b/README.md @@ -9,6 +9,8 @@ # 漏洞收集 收集整理漏洞EXP/POC,大部分漏洞来源网络 +# test111 +![img.png](img.png~~) # 2025.03.17 新增漏洞 - [Cleo Harmony接口Synchronization存在任意文件读取漏洞](./wpoc/Cleo%20Harmony/Cleo%20Harmony接口Synchronization存在任意文件读取漏洞.md) diff --git a/img.png b/img.png new file mode 100644 index 0000000000000000000000000000000000000000..c8c826447f65a6107b613c59b5c2e67e46c8434f GIT binary patch literal 10379 zcmcI~Wl&r}x9vno0t5>l0tENLgF|q42sS`)3k)#0MsU}`G7#Jcmq8O;1_(Mh!3KBt z%lBT@`}6+Xx>fhj=~LBxx@+yd`}FR;R=9?mJPy`dEC2w2qo^RG1pqure0=}*>gnS% zg7o(r0DxIbQASe7%VZCR>8CR}(>P*mGibTQXqn;P&%^!=ANpQNpN|#Gg|1o_Un`8v z!2BcEM>{}1K{pX|nC`cLS&iav5!u9@Hu*gfA%T+`rIM$-hMOrQ61m0bz~NTj#556J z1E$|W7gsP-m3<%UHPMqc8^jOc$K}7{&@VhT&Xdp3PXX^Q0gxvEe7~;<0N|DQZx8_R zocc5HaS$FCDFE>2Whyq{>%V7648X_3C;yY-jmK!8or$fIy^&!yR_Y92^$4f$!lE!6 zn)5pikpttn0@|f)! zKV#6R><*S>ghQ#!QwlXrwyIMtHv=*6#AsSc9zP`0`wg0FI8av3h!PZAapBe~BaaL> zJ7dq?AS0AFvIQnvX?x4{^7@24!os(aX^An%VgC`?pZ=k4yWb`sg#q}NzFeK|u)&E( zztaPWGLhTz?)g~b6T$m8iooRsJ7X6GzKv8AMt^kJy zlvY%7b{V^sTni>kCF;4^sN9C6{7XrCu(dh{@H#l}P1-mw?~D(5|W2@^XAO zzoBM=+{0to#W}da`d+HgdA}ciYkM@>2eB}1s&-q|+m+DOlrl9|lf+tERjH%dRPXg= zZPMb|X z9I;C6J%2e5#sS}TpD!C&bZ*h8x8v6x#>Xi_I(8fSWhmh%e11yzEMmbFp^cIIR!$GXX5zRv($3gr3_j?@RPt&oib!7&Rf zDWy{DS*bh1m)h!WDd+tgTY=)`Ge@PVH&Y?1M(?TJDcS~HtQZsQ?Bsg2KXs9Bke0_y z0RUhB^a0Wx7Qctu0mIQ+_zsDKA-(emjhpkEYwQQE+mRHO_99Gb-J*zrZ0YehR^om) zR@o+2-vYQ>>2^$VHl0mrwRL~NB594^51*c=-Z~@+JMp4v+6F|U7P>PR1>!DTsg<FR%L}acvj;yt;zThIew)J6dAzMIGc-99_`z>Mbt?M}N^=!5e;{qH}O%KbP zGs;QabauER!%;~uG8wfQELkiPQDDXU+XHBzN%cD+mJBy0VslLCyg3Jqyl4Q|G&w$G zZ`S|osbjyEAfvH3#136ZoiXBvUvnlDY(<+uVK@A{Quv(>4FY!~fe)OklDH!9MSG1i z0%$_YV-fB;3p!i7Dxo0l9yX@rwu(RgCQo~8&5K3Ry<;mL9H0O9XN;AqzMolt;+qe9 zHFxV4CpJS>4IDXwuxYb)Y~kG}pEU@*AgxQ6G@TSeN+UEiZ*XFls+L^qSv;n&Sm`N` z3?l@%eui5hd1h&I%XwylI@n8mNrF|4^3pDByG~zr7O+d@7L3m{l!8-Bhcl=@HGUs% z;%5?mWJK4MW%+I#SW8XVV)=QxxnfS&FbD4|0>w4K?et@Bm=%ms{9*D7O?uD z+H+GIrk+rB-L=%7etg~Rdb0N}>wRxHRa#=cyekKXa`z}4(9B zAuIVsKFiUjqLsR1yAw<8{pi#q!tKn2R75G6GO*K#C@BqHt`L%JBl}ZUk%>;WT1kTA z?5rVlDiePSlK`^(y_BY$902$c49IYJ{6XZ1Foy)mDh>P!JXl?ul_;VOUC|iKCq{{~ z^Ayr_z*!7_$jz6q+!bFp%`ig@cg3(1q2f82T3z#8Z0umC&F}Kk2f!37wVt$spJP=& zN%~L21dhI7neXbytEhx*<*zms;E~Ou)7OHrRgRy2{iF1CC^?7X;4fk1dQNx0@in4? z5U-_UfWvaKHm-M>_B!&mpWKpWi#zgDj*F)(#~hi<-Osq)Icad3m|L%t>SF7%!T1DS zAuH1oA!5^vl_fMG!zv2DuKzV37z!y4qf~0T(k+-UZB00m*dW+31A@ry?f?KXqUU2E z-MK6m3~fs*JY^{DY+Fmwf_7)6T$kcdaA3BeSUJxLYJs56)^U?^P=|LvmeUY=zu`H) z_z*Z{+L}~roj3qxiX_iPSP^Iyj<~)s%&=h9eG1(oszNCFJL4DGJbiCm_f< zIj`>d<6(xGhbXg4To~%+5>|4m4e-`%IAMVDYw-|j#v-Gz?}Iz;S5(=DNr+z%W#l6& z*mvP?CO65$E%qxZh0X3(c=u{v(#b8xBz@RrA#yDA;_X~zBa55=*ssbCMz0xm;j9Wh z8=>G62~b5cq@-i(DH;wgj$bQ6O5Kd8Z5@Qi*%zipM_tQu{tZVok!+pEjQje7+YKLk z^wVLc27!`IxhRl**^H)fYi`r|mkc*la(+I1W%&DdcfF&BAcxeiX*+$RsD)&j9+04o z%FXT$(L0ElZvRjcQf0X|p6D1mIxs#ht^+wZrg6O4H={ghVN=2bo_IKqJ|zrP6h4we zE6a1V-$%P#0A+`xEr)X7QLA9(zu(}&;#di-YWWsV{wDLjBHJ`T?MUk}DA^dx9l*9C z#>o|`{e&|8v}=(Nl)8uvBL zAz+jh&x*@ZweI_vk;E;#*@Ky!m6gs1M*3*o!qqHzNAVc5?pv%n+T{4os#G3cxMlP? zH7Sn~C(hl502(~!zPDs`aA$lRB*g=x?NSQX?+@SRQ-bw`yp6Y~r!ddfEyy#as`kJ3 zgdS~fyisnqnQWK>v%Gg4G|_ig`itwL6gxBZuMwGFa3@7r$GNcNR-C&RDW~aJXN1L< z{(YeHJ6f%wwyusZVqi{h7O^n&RgVyNYwcjOrg`>l{W|u6qO8yrI6zn0(@d{o(U0X3 zCC*&m(##dmX5Ge@>LUPR-2EI0;yyCiZ~JUZxl-pkP$YI`(vhu~R-|I+Xd^YQq5mRx z*ixD&el}!6(2a*SO|vIsW@2=?6O0QJHoaNnJx496-j0i0H!SkrUr8^#4CH+{{=8kr zK(E+UOe@YnB*I1+Tv%gfO_UJaq537Y`>;cEVM{KCwlgK+|2Xr&PMo%u{Y%9jPPx=7 z%d{37P6hqCGlPd#AtGpS0!a9_54qj+L+Ur}6M;8XbzZA3utE79g9_BTNsKOW3@2P1 zUAJJ6-Za24_qHCJ8gp7NMOb)vk|;7Tj2iDAfAO{ixb!-EST&*aRY^j6>4|W;`}*a9 z!Hrms_|Zc*vCqagIA#=LQP|yZ1^f7r{TRd{J%BBrXd>3XBR41|S7k=-r_V^~R4B#k zl@<&o-|X7moP*MTSxojS8a^Bj-OBQ}YCawM`*0I`c5^Uxf5$m^#mNz^3KdYZ!+RHz z+6;;pebOJD)bUGaw#Zq8GF~y*Dw~WVLs0Z;9p%ms)>uOn|0k?VnaW)b>_nQ|`Q-a- zgL<^xikj8Ummc;rcBY7%OK^)(MD?SGaeg#h%PRs~;>KSbD-FVXvvG+rbLt?LGK z1jh-|mQv<1NJsKIqQQ1@gDthU_8qLfX!k(rhHC zJdT#22O=SXCqJt8ZjdAQR=y{#)5jdueet3WJ=~b=A~wCw$=c_Bb7{%NXazQ%6t4^Gcd4 zr8Z5d;f7~+UG~dza<5T-ZEYQ-y(83GMR+_M|u98!<}O< zvsvav7pUCbN(OWz;X=jn6x|f@=vxpB1UD!MQ~B|i2En*rpC3-`Kd{6{(Or;DL+66* zu99QCL6>RcOi>3YY;AJg7IK_Dv<*z3tDHueU#XtxT(HYV>S<$B;j&%LR4%krFM2JW zS~RaWKhy*~IQq%oRDuH)?&g-H7>DI}o)J4`o6F}kmi=|{WNJnA0rfj;iWg^dt|uoa zr@Zn$rF#hymQ?w@C+uHq0YIoNmCg)IWw6ST{PYRDa*mRtk z+uZ(^Y3n%$+;tT({WX-2`49l1f+#k1Qe>qhTI=HeXN%jpVwI|2wbpz#IUp1b3bQ^2`j5U6+3uYgIRv5ssc6TOaz$Ci5A|54^w)XV*V= z^Zv=jSoFoaM?F3Fz*~VtNGgA5J!I+a$zgqMO%|i)t?g~L#YDTvm%s0~OD(~rIBvg$ISm%rO+B{Sg9^|5B>z(B1HZfd~QPOXiDgKaof@^x>9J{SPo<%KNnc3$N#A$(8;W_;v~keNneQvLy=E@G9RgbT7@Y~fur@5z z6Irpv_~ixs`8VzqLHEVhzhzIV7=?1z&G(9%al4QlsQHE|{Z@h1Xo=`+_`1NBlYYMCecNXj z(6ag(W^SkBI1g2MwbLT8_rhzrg6{A_9w3_~(k-vPT7?!-mx8$FO>4VS2o|iK-hx4| zw}YkReFMDrgpQa;Wq=65P&$axMWp64r-)LF(V?<8H7fD-Atj$h`Z+>3R;gf zR9U7vG1V7p`4jBkuB`;G8--1<4q{bhi(W4Pg~qFX-j3m1rVbn%NCmgPJOIg?8x66S z|Bjf~Q0i!fznGZa7Wk*VyWZQ9-Xt;4zwM*ml)G-}t{LNu6>ySrP)?e^%11if4Quk` zB$i$6)&})3VHBR<4^6fNlC(+Z$9Bzg#~5HrqI4BLBZ=QYY2qO}K$qGL2>nW*=^oZEE)ITd7|x$?u6J8b5%oPV zsZ736M0wpeLFV?_q{iGDqqj`i-P1? zM_rX&mRHWrY3WoG&$7Ea>$K$H%X_A!%wk4#((6ul#Z|S@x*1s!`*Wb@db=32(K*VA zjdskvbrD$8jh0@6)g+?m#kwjG@3Nj>P1=aY^wz!ul9U*~-+OopfBMt{7|Rt(K$Xx< zww4s1f2N`ZzhCHyIuMrgN12IvIU@(#i?hBiWh_!E3}-tLUJ4 ztpOsqTEORKkGqTr`tzpd5O#xTBD>>Skm|COv|^ff zH_2d0dC%ldG+xDspDo1oXj?-Yn3gmWIT+j5;2wt|_fyhvby4bjfflO$^N3n0ZWg+u z)+Fx31Dcdg23!X#rwdULgx|%gr~5qH|uHm^qr5b#AFrJxucV zsFP>ZlrD3&~2B2 zij&!zDqavWKvK7{~XQ4(CgNvp3;O~%# zni#sKtE)@kC^VV{@=xx%c;pzDR3Hf|RD1%r^B_CjPXda?MUmCUNYadpCB=Jo@p(E6 zeBfl_6Kr2^7+*RefpApI28o+;`w#;f1m`Jn|JP+OenOLLcvE z%eQ1Qjc>ZMTj=!fnxTldOV2Ie1wy6~CtDKty{FQlt>ttzt({)mwJSXs)w?2%m^GUj zq@fF~jHmY;M}t{fDWW9Jw_BT5a~4!(5o|N*$J4;GOY(4RXlW&yC=C;}L@azi#Wg6H zY^KyP#njoOrZ>pL;{GC+eo2OHtwhS@Q-OroDQ$UgsnW$nIB$oD4W6Ja+$cqP_M2Q{ zbG}K_IAlQTnetZ?mE&?ij%?ukwWluK)RaN{EVv>%8%7*WK7uWiWk; zEa&z9zc+HkeCOgpOn1B~7T!NvE3czgVf&GYcT@*IKQiG8CS2BL59~wM2pV&q_kh~0 zWy6-_IYfIyCLx*z>7i3hDrwY4#|qcYg{pfGRrQ`xwl||bTT)2Ek&+&yrdn#}VoO-N zZ@$my2p?M}uED*G&enO~x;k@;Zb6%y;PJKh=qgwpbQx!jjB2c9S%xZ_VdhHd*o_)_ zq%DdO+V@*b6Ln?S_Q+vpLkA7aw@%7lk>cd-$gD#6qEE3lNJ$d|FTA}In@n10U&z2S z8MBFI~~xHOgPDx%*~~(ugWV+S!SgG>mwlAy5sXSgXTCYR@NGLY68f+da$?^~u!ffw%O=nvRa zOMr!M5PM5|#H;j;n!GWxs;k^7EMpyf7qsWk;_Su z3=);~`w;2yMbqz6vdzt>B+Lso?5AWK3>(*Ijr@Cb;BLy2X=gguuav#IU<%e@8Xmrf zGbSn7iW%v(PIGe)idQvWdui`r^zw35r%ZaRmIHb~y}>RrrVhkEsd>eCQIal;VE1)b z8V|^{>FY+}mu8gyCW)+K);R#Zq~EE7zTI`6*+SA2W6|{mu~Oh>Y8Iq|Q%n{Y+kO=+ zWENE(cvX6}TWA;PP~UbHv-P)hR%~QP0Ic595Hud6DHp3@?@C*)y;@Vy8-rj$azU}H zs-uM1!7*DuVsrHz^Sz%9VVeF@ZPQX<5_i<)A+O6~gLjV#kE}PAl(! zNxlB)$H(fz3N^wXO$mS(tnw#JDsY4<*0^?q^0u(NDbq$6$|e2JBAp1JbloT7)pc7* zwZ~Moe7j2;%r8FEcI?))jWq^WIp=bWK4oW_3R@0{9nqZ-%FUP6n~X3-qbJf7tjs5*lND!JZUS;e z&O_MU_;7n|)zo@?VN8-k@O?jzSp?8-74kZlkpxW@4%g zJq$$YKS&bHm;!4r>mXoH3V+cLlvpfIujhUA(Ko>=Huh4Ym@;PKtdHy7&Go#KF?7bL z$80v_ee>BXs9qWu1ya&uwEk_Zm9SVL80}hE-qz8|T2s>cgKi0JziE4y_f5uQ!?4?o z&_ydXHf)mHY|^B10c;9z7Q#$Lv@|!h4CNOf=T$v3MlvJy8==uvxm`!E9(2Ohh3hm* z_(DVl|4Ic%{hFk!oF&4_kg{H0v!>^DZ3)Js{?ohRJSuI4J?N;K#eA|s*VDHg$t&1V z{r)(~hnfw3GuO`$ld{C(@wZ;sIs%LBVE!J%cSyz^ctN8^a3kL}H96BiIVu3*Z{I|i zYtoS$xvd!HOkjE>3Q|t&DA+vR{GDmkGIBSG7+sv2*U(;9BD484@zbuvlY+U=7-W1A zu4mO$@PKxuK0I@UhDksWtEY_znMxaE81Z_XrZo6oPpyF$g+jg+?})Hh&UAwK+gwxb zPJ6S@Gp0BB7z0F;xuB8Mbdh}trM#9jB%g{4*T@yp!Y9a?`EXS?zZ2|hH zT+hcJChv35*&MS=N~#d?3I=jw3z{{0i~Fe&>S!}katLDDGc?;T{ld!lXD)9=>A-k+ zObDjuHG(ym_tMR1K=I#vGQv<@H#|$xSX9T5ERMkBU&nUHeiOmBCk&q-qyF{<4){l0 zM}A+trd3AK)m{H-E|{6!LUWhw6K{kn*${nHc1VA=F~#<3)m8k?hMQIbPt*g6cO6{!H~+BL0Jr>>e5M38 zU$&#|#XbR_7oD3+)J%c|*BA^0us|M9?SL0xjznQ)=CBX6;%Te35&gmF_Dlis3*SW^ zXatp7cdX1?P<8R;yAK|(e>|v=g;$pI<=PFA<@HNm+Uz<92Y|*F-!8~gmog3I^aFA< zV^qR;tD~UHT5+JkQJ6Y}sN^8-vNWCY z<;YcfN^cHgLy~+@R4lTZENA~9p$;FiMi0mXiXo9{pFQ4jw! zGRF3=nm_^K-srDg)@2ZLBrcb_^l`^~@m->xrSGV;wIGaBUY-$J?a$Y5|v z$zbx-0qc)io6F68;=MJoo%oLopkw@Bt0Ur|myN=&DiI$0;_qFc%?M{dBBf)IvE}X= zrc&KpS`~rPp@yKH!qU?QR$>cX%tYPUjH}e;FkZSV4I*>tDr?qxVB~Q4%~cIF(2u}> z@J-Al%{u;tbvCV;w$ruHfAG6N!Ftom%x}WE+8Aq`^of>6;+=B&7z*)Qjb^)- zloE@TE;h3cfjkGImj0_jJpMlB{ph@s)+&bB0=~A4b0p0mHm5_wJ?$+tC$-;`rn)Tj z6oQx=xby5IeDc|u_dU9!O#g}(>`gOV^wEbNMYo9G;OKBVAYTq{x4R!QJGr;XrP7bD z+#$ay4OE%E%`2`FhZnJL6>q%eq#ToI;og9aXX81>80hBD-GSV;?C++^l?D_bhUvsq zZQE8rKLq+c>m?rbu#dK1*8G(h)5sJl8AcS!}C?Czb0*}qod=seW zGM1FZOeYsQ#2oQcG$W=Dno-E8-fBc;p|{D@wa$r)(=S_#bHpO(N9Rz|Z$*jmu((8i z@+fI|_RJQDyuJDKM*Zjo<0I!klpu?jLL}}(MlF&QpFxX6**RqrfADj?ZQL@e51+mD zO|%}4LvKUCQD1MAk0%OUPPONFX`Gz@J6aO!x{5!o=T7|-@;P2%w z^MX4~52m^1syQt~S86F=Ok(l4IpaL^YJ#vH!7vpO?E)dO2G0t+4%Tay3e4JYNM`qF zbb1|mEfX!ftv=89{yvaO0p)>y(zokrbhXMqT?7DLYrU8UQJROgc6?7Fk=xI$bghZv zJ{fR8QwzbUBh%M3ukXV~oA-^R zUb6csNn|x(0Diy!7m+sDZB(eX%KVzm4zy3n(sV>)M!xc$>K6N+5Zu*#_~gzHD*8yk zhO>bm#VubKpZ-s@EdRSong4%wJp=;yfimFcwqdMXFR1rf9dsL0nl?BI7&V-L1X6fCX-!U)dL}Cjs znsAXibMWG$U1h{fhK85Ue=k=DsdE#&>;H9Ny<`Kqsv#^6QGba!c?hQ$KhG_QT+`38 z5qbi7f)f2EkP>&PAQJxb70y_5x3CMN>cVR70v3vK&R^E=>99CEb@Ow2^f8jw|DP9) z)7#_GZuGch0CF;Xq~_;W#8-z*K!&nTY*wGluR+|3%rlbsPaKX7Ku1gk-x-j+f`HG; zASe^%w&$iDdsF@g1aLNZm4|3TL7!>Timz0Qrw{5Wdw6)omm-AQ{pvj=j4i-f?bCD+ z?+L^O+7*v?p=9HPovF=)69CeFJ^+f5DKpw>bgtDO>6xkcGD=~S%JA2JG7r6HhFn)W z7+ROfvG{+uxb;TN88};bdNYlC+0e(qc$hwsJwfqpZKsCZSxiQazQ+hjMl zu%VBehx)^`!irfK>Du8kGe^zup8S&P+zhD4w^6WrpSEM3cq8ZMPfh&-;JnBE5q<2G zrsm@SH?fj4Ke?F7f4La*zRo?w@NO%cl)>HPuxzK#BqMTOVSatn=cFZRM1ceV=YG)x zGT!Ww7hiXHSGm!soDD`dZThMG=mKSWr4N$A$7NRqyC&Em#zeWw**+cNT0#-aHVqX7 zfEPl~%z#;{!`}qopz;BtTTTEwUz_+-=K2bp@wi)#-9_x) zzW|^fInk5{M)^&j3eFdcAlPXq$VAQqLw-g1JU9dKQ=6>|+wB4veskyd0r0!-{_=drjPjiX8`3vs7_#QR>T7(Im%PH|3OdQ}vPc6HS}gt?XC0Rv9YuOc1A;g3=_z&9S$uV3nD+D>e7 l%IARJU;i88yWWSF178;$f$`2ckMcf%qO6(>T