admin/Penetration_Testing_POC
1
0 Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-10-24 08:54:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,092 Commits 60 Branches 0 Tags
master
Commit Graph
2092 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] f743f51306 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 downloadzt接口任意文件读取漏洞 [skip ci] 2026-10-24 04:03:15 +00:00
github-actions[bot] 7dad62c6e3 docs: 更新 1 篇文章 - PHP2SHELL: CVE-2026-109618-CVE-2026-109619-PHP会话上传进度状态残留全链研究之WordPress默认PHP环境下的RCE漏洞 [skip ci] 2026-10-23 16:48:28 +00:00
github-actions[bot] 840913c708 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 StorageInfoUpdateProductListPrtTimes接口SQL注入漏洞 [skip ci] 2026-10-23 11:19:43 +00:00
github-actions[bot] 2c7a3b4776 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 UnitCreateDynamicGridHead接口SQL注入漏洞 [skip ci] 2026-10-23 04:11:06 +00:00
github-actions[bot] 6e7c956fc4 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 ReportClassAllHTMLANDDBInfo接口SQL注入漏洞 | 友加畅捷管理系统标准版 ReportClassAll接口SQL注入漏洞 [skip ci] 2026-10-22 11:30:00 +00:00
github-actions[bot] ad6fc9e14e docs: 更新 2 篇文章 - 亿赛通 UnInstallApplication接口未授权SQL 注入漏洞 | 友加畅捷管理系统标准版 GetBenYeClass接口SQL注入漏洞 [skip ci] 2026-10-22 04:07:32 +00:00
CopilotMr-xn东方有鱼名为咸
 		ce8980b949 Add PHP PoC links to README (#98) 
* docs: add php exploit repo links to README

Co-authored-by: Mr-xn <[email protected]>

* Consolidate CVE exploit links in README

add php2shell

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
Co-authored-by: 东方有鱼名为咸 <[email protected]>
 2026-10-21 11:45:03 -04:00
github-actions[bot] c3cdfcd22c docs: 更新 3 篇文章 - PHP “php2shell”（CVE-2026-109618/109619）：从 session.upload_progress 到多条 RCE 攻击链 | 友加畅捷管理系统标准版 UpdateWayJJD接口SQL注入漏洞 | 友加畅捷管理系统标准版 GetProductStorNumber接口SQL注入漏洞 [skip ci] 2026-10-21 11:30:00 +00:00
github-actions[bot] 888a68f48c docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetNewStatusJJD接口SQL注入漏洞 [skip ci] 2026-10-21 04:06:39 +00:00
github-actions[bot] c2be534c07 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 SaveQueryConditionGroupName接口SQL注入漏洞 [skip ci] 2026-10-20 14:13:13 +00:00
github-actions[bot] fd17182df8 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 SaveQueryConditionGroup接口SQL注入漏洞 | 友加畅捷管理系统标准版 SaveDefaultQueryConditionGroup接口SQL注入漏洞 [skip ci] 2026-10-20 08:21:05 +00:00
github-actions[bot] 25284570ef docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 SaveCancelDefaultQueryConditionGroup接口SQL注入漏洞 | 友加畅捷管理系统标准版 GetQueryConditionGroup接口SQL注入漏洞 [skip ci] 2026-10-19 12:42:26 +00:00
github-actions[bot] 34a54d9109 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetGridHeadData接口SQL注入漏洞 [skip ci] 2026-10-19 04:05:23 +00:00
github-actions[bot] f33600e512 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 GetEmpZH接口SQL注入漏洞 | 友加畅捷管理系统标准版 GetEmpPayReceiveAccount接口SQL注入漏洞 [skip ci] 2026-10-18 10:43:38 +00:00
github-actions[bot] ad588d7dbb docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetCommonCustList接口SQL注入漏洞 [skip ci] 2026-10-18 03:57:06 +00:00
github-actions[bot] ed3644d65d docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetAllContextMenuCustom接口SQL注入漏洞 [skip ci] 2026-10-17 15:18:41 +00:00
github-actions[bot] f5b2c037b8 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetAccountList接口信息泄露漏洞 [skip ci] 2026-10-17 10:25:31 +00:00
github-actions[bot] 41b9f28b8a docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetProdAvgPrice接口SQL注入漏洞 [skip ci] 2026-10-17 03:50:01 +00:00
github-actions[bot] 7b191a9951 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 GetOrderByDisAndTag接口SQL注入漏洞 | 友加畅捷管理系统标准版 GetInfoByPrintType接口SQL注入漏洞 [skip ci] 2026-10-16 11:05:40 +00:00
CopilotandMr-xn 1b9f5c691b Fix broken README links (#97) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-10-15 23:28:06 -07:00
github-actions[bot] 65d7f8c1ec docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 CheckVipRechargeRefund接口SQL注入漏洞 [skip ci] 2026-10-16 03:59:44 +00:00
dependabot[bot] 1e713a225a Bump urllib3 in /vuln_pocs/exploit-tools/discuz-ml-rce (#95) 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.7.0...2.8.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-10-15 09:26:43 -04:00
CopilotandMr-xn 2b0f5a5e19 Move newly added IoT docs into /iot and update README links (#96) 
* Move IoT docs into root iot directory

Co-authored-by: Mr-xn <[email protected]>

* Append missing IoT README entries

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-10-15 09:25:15 -04:00
东方有鱼名为咸 c3146a22ab Add files via upload 2026-10-15 20:28:22 +08:00
东方有鱼名为咸 a7ceabe10c Add files via upload 2026-10-15 20:25:47 +08:00
东方有鱼名为咸 9f2ea97ccf Add files via upload 2026-10-15 20:22:23 +08:00
东方有鱼名为咸 3127901ff1 Create README.md 2026-10-15 08:20:36 -04:00
github-actions[bot] caa8073420 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 CGHH接口SQL注入漏洞 | 友加畅捷管理系统标准版 Image接口SQL注入漏洞 [skip ci] 2026-10-15 11:12:30 +00:00
github-actions[bot] 74769de2d5 docs: 更新 1 篇文章 - 友加畅捷管理系统标准版 GetParentIDInfoByTabName接口SQL注入漏洞 [skip ci] 2026-10-15 04:03:12 +00:00
github-actions[bot] df91c9f2eb docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 getOpersmap接口SQL注入漏洞 | 友加畅捷管理系统标准版 GetLoginUserImg接口SQL注入漏洞 [skip ci] 2026-10-14 11:32:28 +00:00
github-actions[bot] 307155dc14 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 GetFullIDFullPath接口SQL注入漏洞 | 友加畅捷管理系统标准版 CreateImage接口SQL注入漏洞 [skip ci] 2026-10-14 04:21:29 +00:00
github-actions[bot] 7cf102fc16 docs: 更新 1 篇文章 - 用友U8+ UFFileManagerServices WebUploadServices 未授权任意文件写命令执行漏洞 [skip ci] 2026-10-13 16:49:55 +00:00
github-actions[bot] e30b9465d6 docs: 更新 2 篇文章 - 用友U8+ U8SL GetPassword 匿名口令重置设计缺陷漏洞 | 用友U8+ U8AuditWebSite U8ForWhereServices 未授权任意文件写命令执行漏洞 [skip ci] 2026-10-13 06:19:15 +00:00
github-actions[bot] b3efadde58 docs: 更新 4 篇文章 - 用友U8+ PFWeb U8BM WebParamServiceBroker 未授权任意程序集反射调用代码执行漏洞 | 用友U8+ OCAPI Update 未授权任意文件写命令执行漏洞 | 用友U8+ EIS SyncService 未授权任意文件上传命令执行漏洞 | 用友U8+ EIS ConfigService 未授权敏感配置信息泄露漏洞 [skip ci] 2026-10-12 10:31:13 +00:00
github-actions[bot] 84bc40ea45 docs: 更新 1 篇文章 - 用友U8+ DSaaS分析云 未授权文件读取后门令牌伪造与连接串注入漏洞 [skip ci] 2026-10-11 12:27:55 +00:00
github-actions[bot] 7903fc75bd docs: 更新 2 篇文章 - 用友U8+ U8KCSN Service 未授权数据库连接串注入及SQL注入漏洞 | 用友U8+ U8AuditWebSite WorkFlowTaskService 未授权连接串注入SQL注入命令执行漏洞 [skip ci] 2026-10-11 05:06:45 +00:00
github-actions[bot] 57c4c3bbd0 docs: 更新 2 篇文章 - 用友U8+ U8AuditWebSite MAService 未授权SSRF连接串注入命令执行漏洞 | 用友U8+ u8webapi 未授权任意SQL执行及SA口令泄露漏洞 [skip ci] 2026-10-10 09:37:54 +00:00
github-actions[bot] 2c1d2edae2 docs: 更新 1 篇文章 - 用友U8+ U8BM FBWeb 未授权数据库连接串注入漏洞 [skip ci] 2026-10-10 00:38:45 +00:00
github-actions[bot] 42bfe33a33 docs: 更新 3 篇文章 - 用友U8+ U8remote GNRemote 未授权导出调用账户接管与SQLite注入漏洞 | 用友U8+ U8AuditWebSite EmailService SQL注入及BinaryFormatter反序列化RCE漏洞 | 用友U8+ U8Application U8CCLoginService等未授权凭据读写与信息泄露漏洞 [skip ci] 2026-10-09 10:18:50 +00:00
github-actions[bot] 3cb0052ed3 docs: 更新 1 篇文章 - 用友U8+ U8Application U8LoginServices 硬编码后门账号及未授权SA口令泄露漏洞 [skip ci] 2026-10-09 01:05:47 +00:00
github-actions[bot] 771ed5b4e2 docs: 更新 2 篇文章 - 用友U8+ U8AuditWebSite U8Interface 未授权云同步信息泄露及会话管理缺陷漏洞 | 用友U8+ EIS U8DuDuService.asmx 任意SQL执行致命令执行漏洞 [skip ci] 2026-10-08 18:42:08 +00:00
github-actions[bot] 88e9e1690e docs: 更新 1 篇文章 - 用友U8+ EIS服务 APIProxyHandler(proxy) 未授权SSRF漏洞 [skip ci] 2026-10-03 04:44:19 +00:00
CopilotandMr-xn cd9cc4ee83 Update README with latest docs (#94) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-29 11:20:43 -04:00
东方有鱼名为咸 6d493105eb Add files via upload 2026-09-29 23:14:06 +08:00
github-actions[bot] 13a0c3f551 docs: 更新 1 篇文章 - PowerJob最新版v5.1.2 friend-process接口未授权远程代码执行漏洞（CVE-2026-75429） [skip ci] 2026-09-24 16:53:10 +00:00
CopilotandMr-xn a8e67708b0 Add ysonet to README (#93) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-24 07:37:25 -04:00
github-actions[bot] fada519527 docs: 更新 1 篇文章 - CRMEB系统最新版v6.0.0 JWT默认密钥认证绕过RCE漏洞 [skip ci] 2026-09-23 04:12:16 +00:00
github-actions[bot] 7525c2595f docs: 更新 15 篇文章 - CRMEB系统最新版v6.0.0 RoutineCI_preview方法命令注入漏洞 | CRMEB系统最新版v6.0.0save_basics接口任意文件读取漏洞 | CRMEB系统最新版v6.0.0theme_import接口zip解压RCE漏洞 | ChanCMS-v3.3.0存在SQL注入漏洞 | ChanCMS-v3.3.0存在远程代码执行漏洞 ... 等共15篇 [skip ci] 2026-09-22 04:18:17 +00:00
CopilotandMr-xn a82d3f71fa docs: add CVE-2026-42980 README entry (#92) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-20 01:46:11 -04:00
CopilotandMr-xn 77a27d00ab Reclassify CVE-2026-43783 as macOS LPE in README (#91) 
* docs: add CVE-2026-43783 reference to README

Co-authored-by: Mr-xn <[email protected]>

* docs: move CVE-2026-43783 to macOS privilege escalation section

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-20 01:17:37 -04:00