CVE-2021-3019

CVE-2021-3019 CVE-2021-3019 lanproxy目录遍历任意文件读取漏洞 使用方法 下载 git clone https://github.com/FanqXu/CVE-2021-3019.git cd CVE-2021-3019 帮助 默认不带参数运行显示帮助信息 单个URL 对单个URL进行漏洞检测，如果存在漏洞则默认读取配置文件并输出 python3 POC.py -u http://127.0.0.1:9100 读取其他文件 使用-r参数读取系统其他文件，需要知道文件的绝对路径 python3 POC.py -u http://127.0.0.1:9100...

ldapsdk

UnboundID LDAP SDK for Java 点击此处下载LDAP SDK的最新版本 UnboundID LDAP SDK for Java 是一个快速、强大、用户友好且完全免费开源的Java库，用于与LDAP目录服务器通信。它在性能、易用性和功能方面优于其他基于Java的LDAP API。由 Ping Identity Corporation 开发，并作为Ping Identity客户端和服务器软件的关键组件，持续得到维护和增强。 UnboundID LDAP SDK for Java 可依据 Apache 2.0...

CVE-2025-27591-PoC

CVE-2025-27591 概念验证 CVE-2025-27591 是一个权限提升漏洞，影响了低于 0.9.0 版本的 Below 服务。问题源于在 /var/log/below 目录下创建了一个全局可写目录。攻击者可以通过操作该目录中的符号链接来利用此漏洞，并有可能获取 root 权限，这对本地非特权用户构成重大安全威胁。 此概念验证代码仅用于教育和研究目的。 在编写本文时，社区中尚无该漏洞的公开 PoC。因此，我决定负责任地分享此实现，以填补这一空白，为安全研究生态系统做出贡献，并提高人们对不安全文件系统关键性质的认识。 漏洞成因 概念验证 在攻击者机器上： 1- git clon...

CVE-2020-12116

CVE-2020-12116 用于利用CVE-2020-12116的概念验证代码：对ManageEngine OpManager进行未认证的任意文件读取。 摘要 OpManager的最新版本包含一个目录遍历漏洞，允许无限制地访问OpManager应用程序中的每个文件。这包括私有SSH密钥、受密码保护的Java密钥库，以及包含密钥库密码、私有证书和后端数据库密码的配置文件。如果配置了LDAP，则可以从"conf/OpManager/ldap.conf"获取域凭据。 漏洞分析 向ManageEngine OpManager应用程序的根目录发送一个未认证的GET请求，默认端口为8060。 GE...

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

事件分析：Check Point 安全网关 CVE-2024-24919 利用尝试 📌 执行摘要 2024年6月6日下午03:12，安全监控系统针对一次针对 Check Point 安全网关（CP-Spark-Gateway-01，IP：172.16.20.146）的高危漏洞利用尝试触发了警报。外部攻击者（源 IP 为 203.160.68.12）试图利用 CVE-2024-24919 （任意文件读取漏洞），通过向 /clients/MyCRL 端点发送精心构造的 HTTP POST...

CVE-2020-17519

使用方法&免责声明 该脚本为Apache Flink 目录遍历漏洞批量检测 CVE-2020-17519。 使用方法：Python CVE-2020-17519.py urls.txt urls.txt 中每个url为一行，漏洞地址输出在vul.txt中 影响版本： Apache Flink 1.11.0、1.11.1、1.11.2 工具仅用于安全人员安全测试，任何未授权检测造成的直接或者间接的后果及损失，均由使用者本人负责...

Astra Linux – Vulnerability in Python-Django

In Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1, directory traversal is allowed if the filenames are passed to it directly...

Astra Linux – Vulnerability in Git

Git is an open-source, scalable, distributed version control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are vulnerable to exposure of sensitive information by malicious actors. When performing a local clone where the source and target of the clone...

Astra Linux – Vulnerability in squashfs-tools

The squashfsopendir function in unsquash-2.c within Squashfs-Tools 4.5 enables Directory Traversal, another vulnerability distinct from CVE-2021-40153. A squashfs filesystem that includes a symbolic link, along with files under the same filename, can cause unsquashfs to first create the symbolic...

Astra Linux – Vulnerability in Linux 5.10, Linux

The mm/mremap.c file in the Linux kernel before version 5.13.3 contains a use-after-free issue due to a stale Translation Look-And-Reduce TLB table, as the rmap lock is not held during a PUD move...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: Cleanup of subdirectories under the accesspattern directory during directory setup fails. When the setup of the DAMOS-scheme DAMON sysfs directory fails after setting up the accesspattern/ directory, the...

Astra Linux – Vulnerability in Zabbix

The request to LDAP is sent before checking the user permissions...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: Nlink overflow in jfsrename If nlink is maximal for a directory -1, and within that directory you perform a rename on a child directory without moving it from the parent directory, then the nlink value of the first directory...

Astra Linux – Vulnerability in h2database

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes the class name of the driver and the URL of the database as parameters. An attacker may pass in a JNDI driver name and a URL that points to an LDAP or RMI server, allowing for remote code execution. This vulnerability can be...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: exfat: A memory leak has been fixed in exfatloadbitmap. If the first directory entry in the root directory is not a bitmap directory entry, the variable ‘bh’ will not be released and reassigned, which will cause a memory leak...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB’s UnRAR version prior to 6.12 on Linux and UNIX allowed directory traversal, enabling writing to files during an extraction operation also known as unpacking. This was demonstrated by creating a file named /.ssh/authorizedkeys. NOTE: WinRAR and Android RAR are not affected by this issue...

Astra Linux – Vulnerability in Git

Git is a version control system. Before versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories containing submodules could be exploited through a bug in Git. This bug allowed a script to be written into the .git/ directory instead of the submodule’s worktree. This enabl...

Astra Linux – Vulnerability in Apache Log4j1.2

The JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration, or when the configuration references an LDAP service to which the attacker has access. The attacker can provide a...

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ was used. The FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created during file uploads. It was also not applied to intermediate-level static...

Astra Linux – Vulnerability in php-pear

In ArchiveTar version 1.4.11, the Tar.php script allows write operations involving directory traversal, due to insufficient checking of symbolic links. This issue is related to CVE-2020-28948...