CVE-2024-29972

TG Join Us https://t.me/WanLiChangChengWanLiChang 加入我们定时查收各类漏洞 EXP POC CVE-2024-29972-EXP CVE-2024-29972 Zyxel Nas Backdoor Account 后门账户未授权开启 FOFA app="ZyXEL-NAS326" 注意事项 该EXP利用脚本 系CVE-2024-29972与29973的结合利用 你也可以称为组合拳 后门账户 NsaRescueAngel 拥有Root 权限...

vuln-chain-lab

文件上传绕过 + 存储型XSS概念验证实验环境 一个刻意设计存在漏洞的Web应用程序，演示文件上传绕过如何与存储型XSS结合，即使在CSP、CORS和CSRF防护措施到位的情况下，也能创建后门管理员账户。 完整博客文章：KurtiseBear博客 这是一个用于防御安全培训的教育性实验环境。请勿将其部署在任何可公开访问的位置。 此演示展示了什么 该应用程序具有实际的安全控制措施： 内容安全策略 ，将脚本来源限制为'self'（但允许'unsafe-inline'和'unsafe-eval'） 未发送CORS头 ，因此浏览器会阻止跨源请求 所有表单提交（消息、文件上传）均包含CSRF令牌...

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

DblTekGoIPPwn

DblTekGoIPPwn 脆弱なDblTek GoIPデバイスにおけるチャレンジレスポンスシステムを悪用するツール。指定されたチャレンジに対するレスポンスの生成、ホストへの脆弱性テスト、脆弱なホストでのコマンド実行、ホストからのSMS送信、および任意の脆弱なホストへのルートシェルの投入が可能です。 脆弱性について 2017年3月2日、Trustwaveはセキュリティ研究者がDblTek GoIP...

honeypot-dlink-CVE-2024-3273

honeypot-dlink-CVE-2024-3273 针对CVE-2024-3273的快速简易蜜罐。 此模板可用于在约10分钟内设置一个基本蜜罐。 快速总结： 查找（fofa、shodan、onyphe等）。 使用wgetclonehttp.sh克隆它。 手动调整以使蜜罐更真实（克隆不完美，因此某些文件返回404）。 向server.py添加匹配利用路径的规则（以及利用处理逻辑）。 保存并运行！ 文件通过设置--save-headers标志下载（等同于curl的--include），以模仿我们伪装成的服务器会发送的头部。 来源 ：...

CVE-2019-19033

CVE-2019-19033：Jalios JCMS 10 后门账户 / 认证绕过 I. 漏洞 Jalios JCMS 10 允许攻击者通过一个后门账户（可使用任意用户名和特定密码）以管理权限访问网站的任何部分以及 WebDAV 服务器。 II. CVE 参考 CVE-2019-19033 III. 供应商 Jalios https://www.jalios.com/jcms/j6/en/home IV. 时间线 2019年11月8日 - 发现漏洞 2019年11月9日 - 联系供应商 2019年11月14日 - 供应商修复漏洞 V. 描述...

CVE-2026-82535

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

EUVD-2026-76159

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

CVE-2026-82535 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

CVE-2026-82535 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

dlink

D-Link NAS 设备中的命令注入和后门账户 漏洞概述： 该漏洞影响多款 D-Link NAS 设备，包括 DNS-340L、DNS-320L、DNS-327L 和 DNS-325 等型号。漏洞位于 nassharing.cgi URI 中，主要由两个问题导致：一个由硬编码凭据促成的后门，以及一个通过 system 参数触发的命令注入漏洞。这种利用可能导致在受影响的 D-Link NAS 设备上执行任意命令，攻击者通过指定命令即可获取敏感信息、修改系统配置或造成拒绝服务，影响互联网上超过 92,000 台设备。 对应的 CWE CWE-77（命令注入）和...

D-Link Network Attached Storage - Backdoor Account

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

CVE-2026-52520

Emlog CMS = 2.6.14 contains a stored cross-site scripting XSS vulnerability in the article publishing module /admin/article.php. A remote authenticated attacker can inject arbitrary JavaScript code via the article content. When an administrator reviews or previews the submitted article in the...

D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

CVE-2025-71317 NetMan 204 Hard-coded Backdoor Credentials

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint for example /cgi-bin/login.cgi?username=eurek&password=eurek, which due to lax...

CVE-2026-42289

ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and permission updates entirely through $POST parameters with no CSRF token validation. An unauthenticated attacker can craft a malicious HTML page that, when visited by an...

CVE-2020-37135

AMSS++ 4.7 is affected by an authentication bypass that lets attackers access administrative accounts using hardcoded credentials (default admin/admin or admin/1234 depending on source), enabling unauthorized admin access. The vulnerability is documented across multiple feeds (CVE-2020-37135) wit...

CVE-2020-37135 AMSS++ 4.7 - Backdoor Admin Account

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system...

CVE-2023-53895

PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...

CVE-2023-53895

PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...