afrog-pocs

POC，全称 Proof of Concept，指一段漏洞证明的说明或攻击样例

❤️POC 欢迎投递

cnvd

• 2020
  • CNVD-2020-62422
• 2021
  • CNVD-2021-09650
  • ruijie-uac-cnvd-2021-14536

cve

• 2010
  • jboss-cve-2010-1871
• 2014
  • elasticsearch-cve-2014-3120
• 2015
  • elasticsearch-cve-2015-1427
  • elasticsearch-cve-2015-3337-lfi
  • elasticsearch-cve-2015-5531
  • CVE-2015-7450 (已删除)
• 2016
  • CVE-2016-3088
  • zabbix-cve-2016-10134-sqli
• 2017
  • hikvision-cve-2017-7921
  • CVE-2017-12149
  • couchdb-cve-2017-12635
  • weblogic-cve-2017-10271
• 2018
  • CVE-2018-7490
  • CVE-2018-8033
  • CVE-2018-1000600
  • CVE-2018-1000861
  • CVE-2018-11759
  • dedecms-cve-2018-6910
• 2019
  • citrix-cve-2019-19781-path-traversal
  • solr-cve-2019-0193
  • dlink-cve-2019-17506
  • dlink-cve-2019-16920-rce
  • CVE-2019-10758
  • jira-cve-2019-8442
  • jira-cve-2019-8449
  • jira-cve-2019-11581
  • jira-ssrf-cve-2019-8451
  • weblogic-cve-2019-2725
  • weblogic-cve-2019-2729
• 2020
  • CVE-2020-26413
  • dlink-cve-2020-9376-dump-credentials
  • dlink-cve-2020-25078-account-disclosure
  • apache-kylin-unauth-cve-2020-13937
  • jira-cve-2020-14179
  • jira-cve-2020-14181
  • kong-cve-2020-11710-unauth
  • solarwinds-cve-2020-10148
  • weblogic-cve-2020-14750
  • CVE-2020-28185
• 2021
  • CVE-2021-41773
  • CVE-2021-22214
  • CVE-2021-22205
  • CVE-2021-33044（未验证）
  • CVE-2021-36749
  • CVE-2021-44228（未验证）
  • CVE-2021-36260
  • CVE-2021-40438
  • CVE-2021-29490
  • CVE-2020-28188
  • CVE-2021-27905 -2022
  • CVE-2022-24990
  • Spring-Cloud-Gateway-Code-Injection-CVE-2022-22947
  • CVE-2022-23131
  • CVE-2022-24112(未验证)
  • CVE-2022-23134
  • CVE-2022-23178(未验证)
  • CVE-2022-24124
  • CVE-2022-24260(未验证)
  • CVE-2022-25369(未验证)
  • CVE-2022-25568

exposures 信息泄露

• alibaba-canal-info-leak
• phpinfo
• ruijie-eg-info-leak
• avtech-dvr-exposure
• directory-display

fingerprinting 指纹识别

• swagger-api
• dahua（未验证）
• dlink-web
• wayos
• atlassian-jira
• shiro
• thinkphp
• gitlab
• jenkins-api-panel
• jenkins-login
• emessage-panel
• openerp-database
• utt-panel
• terramaster-login
• CVE-2020-15568
• CVE-2020-28187
• zabbix-server-login
• apache-dubbo-detect
• jupyter-notebook-tech
• kubernetes-dashboard
• kubernetes-resource-report
• kubernetes-metrics
• kubernetes-enterprise-manager
• kubernetes-mirantis
• kubernetes-version
• azure-kubernetes-service
• weblogic-login
• activemq-panel
• avtech-avn801-camera-panel
• directadmin-login-panel
• public-tomcat-manager
• apache-apisix-panel
• upupw-tz
• huawei-hg532e-panel
• grafana-detect

login 登录

• default-pwd 默认密码
  • grafana-default-password
  • minio-default-password
  • datang-ac-default-password-cnvd-2021-04128
  • dlink-default-password
  • wayos-default-password
  • openerp-default-password
  • utt-default-password
  • gitlab-weak-login
  • activemq-default-password
  • alibaba-canal-default-password
  • zabbix-default-password
  • hikvision-intercom-service-default-password
  • apache-ambari-default-password
  • rabbitmq-default-password
  • weblogic-weak-login

unauthorized 未授权访问

• springboot-actuator-unauth
• druid-monitor-unauth
• elasticsearch-unauth
• zabbix-authentication-bypass
• alibaba-nacos-v1-auth-bypass
• jboss-unauth
• apache-nifi-api-unauthorized-access
• apache-storm-unauth
• apache-storm-unauthorized-access
• jenkins-unauthorized-access
• zabbix-dashboards-access
• jira-unauthenticated-resolutions
• jira-unauthenticated-screens
• jira-unauthenticated-user-picker
• jira-unauthenticated-dashboards
• jira-unauthenticated-installed-gadgets
• jira-unauthenticated-projectcategories
• jira-unauthenticated-adminprojects
• jira-unauthenticated-projects
• jira-service-desk-signup
• couchdb-unauth
• docker-api-unauthorized
• docker-registry-api-unauth
• hadoop-yarn-unauth
• jupyter-notebook-unauthorized-access
• kubernetes-unauth
• spark-api-unauth
• spark-webui-unauth
• unauthorized-hp-officepro-printer
• jeecg-boot-unauth

vulnerability 漏洞

• landray-oa-custom-jsp-fileread
• yonyou-nc-bsh-servlet-bshservlet-rce
• springboot-h2-db-rce
• huijietong-cloud-fileread
• ruijie-eg-cli-rce
• ruijie-eg-file-read
• dlink-850l-info-leak
• dlink-dsl-2888a-rce
• sangfor-ba-rce
• sangfor-edr-cssp-rce
• sangfor-edr-tool-rce
• sangfor-edr-arbitrary-admin-login
• hikvision-info-leak
• seeyon-a6-employee-info-leak
• seeyon-ajax-unauthorized-access
• seeyon-oa-cookie-leak
• seeyon-session-leak
• seeyon-wooyun-2015-0108235-sqli
• seeyon-wooyun-2015-148227
• apache-flink-upload-rce
• dahua-dss-file-read
• ruijie-smartweb-password-disclosure
• thinkphp-2-rce
• thinkphp-501-rce
• thinkphp-509-information-disclosure
• thinkphp-5022-rce
• thinkphp-v6-file-write
• thinkphp-5023-rce
• couchdb-adminparty
• solr-velocity-template-rce
• solr-fileread
• solr-admin-query
• weblogic-ssrf
• e-cology-getsqldata-sql-inject
• e-cology-arbitrary-file-upload
• e-cology-filedownload-directory-traversal
• e-cology-javabeanshell-rce
• e-cology-springframework-directory-traversal
• e-cology-syncuserinfo-sqli
• e-cology-v8-sqli
• e-cology-validate-sqli
• e-cology-workflowcentertreedata-sqli
• e-office-mysql-config-leak
• e-bridge-saveyzjfile-file-read
• dedecms-url-redirection
• targa-camera-lfi
• egroupware-rce
• grafana-file-read
• unifi-network-log4j-rce