256 matches found
ProxyLogon
ProxyLogon 原始 PoC：https://github.com/testanull 使用方法： python proxylogon.py 示例： python proxylogon.py primary [email protected] 如果成功，您将进入一个网页 Shell。使用 exit 或 quit（或按 Ctrl+C）退出网页 Shell。 默认情况下，它将创建一个文件 test.aspx。这是可以更改的。 支持： 该项目不受支持，但欢迎提交 PR : 特别感谢与资源： @Flangvik @Testanull...
ASPX_WebShell_COFFLoader
使用COFF加载器的ASPX Web Shell 基于TrustedSec的CSCOFFLoader 描述 此ASPX Web Shell支持通过半交互式Python客户端在目标服务器上执行Beacon Object Files BOFs 。 它利用了源自TrustedSec的CSCOFFLoader的COFF加载器实现。 此项目严格 用于安全研究和授权渗透测试。使用本项目即表示您同意遵守所有适用法律法规。 前置条件 使用前，您需要： 1. 从 https://github.com/trustedsec/CSCOFFLoader/tree/main/beaconobject 编译...
cve-2020-0688-webshell-upload-technique
Ejecución Remota de Código en Exchange cve-2020-0688 - RED TEAM MODO ACTIVADO requiere: python3+ UNIVERSAL Implementación en Python para cve-2020-0688, utilizando webshell ASPX para salida de comandos personalizada Esto es solo un POC para facilitar demostraciones de vulnerabilidades por razones ...
CVE-2022-34919
CVE-2022-34919 El Contensis Content Management System anterior a la versión 15.2.1.79 tiene una falla en su interfaz 'Classic' que permite a un usuario no autenticado cargar y aprobar archivos arbitrarios. Al cargar un archivo aspx, es posible ejecutar comandos en el contexto del servidor web. Es...
CVE-2019-13403
CVE-2019-13403 报告日期：2019年5月 修复日期：2019年5月 发现者：B3Bo1d 描述 Temenos CWX 版本 8.9 在模块 /CWX/Employee/EmployeeEdit2.aspx 中存在一个访问控制失效漏洞，导致用户信息被查看。 PoC 修改前 修改后 参考链接 https://vulners.com/cve/CVE-2019-13403...
CVE-2025-57460
CVE-2025-57460 Descripción: Vulnerabilidad de carga de archivos en machsol machpanel 8.0.32 permite a un atacante obtener una webshell. PoC: Navegue a https://controlpaneldomain/Client/SubmitTicket.aspx y cargue una webshell ASPx, luego envíe el ticket, finalmente abra el archivo para ejecutar la...
CVE-2025-52691
CVE-2025-52691 SmarterMail 未授权任意文件上传远程代码执行 概述 严重未授权任意文件上传，允许远程代码执行。 字段| 值 ---|--- 产品| SmarterMail 受影响版本| Build 9406 及更早 CVSS| 10.0（严重） 类型| 任意文件上传 攻击向量| HTTP（未授权） 影响| 远程代码执行 攻击流程 flowchart LR AAttacker -- B"Find Upload Endpoint" B -- C"/api/upload" C -- D"Upload ASPX Shell" D -- E"Path Traversal" ...
CVE-2026-11412
A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...
EUVD-2026-33974
Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel exposed on port 8989 that allows attackers to perform arbitrary file read and write operations by...
CVE-2025-70995
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
EUVD-2026-4776
An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' and 'Idevaluacion’ in ‘/evaluacionhcaevalua.aspx’, could allow an attacker ...
CVE-2020-12470
MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template...
CVE-2025-61548
SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18.34 fixed in 19.69. Unsanitized user input is incorporated directly into SQL queries without proper parameterizati...
edu Business Solutions Print Shop Pro WebDesk 安全漏洞
edu Business Solutions Print Shop Pro WebDesk is a print order management system from edu Business Solutions, USA. A security vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34, which originates from an incorrect operation of the parameter hfInventoryDistFormID in...
Exploit for CVE-2025-52691
CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File U...
EUVD-2012-6600
Malware in sbrugna...
EUVD-2019-19201
Malware in sbrugna...
EUVD-2019-2649
Malware in sbrugna...