618 matches found
OA-tongda-RCE
OA-tongda-RCE | Office Anywhere Web-based Intelligent Office System Backend Getshell No Authentication Required 1. Arbitrary file upload vulnerability /ispirit/im/upload.php 2. Local file inclusion vulnerability /ispirit/interface/gateway.php Command Execution Bypass: exec"cmd /c ".$command;...
TongDa-RCE
TongDa-RCE Tongda file inclusion + file upload leads to RCE Usage Remote RCE: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...
CVE-2023-4166
CVE-2023-4166 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u single URL target file python3 CVE-2023-4165.py -f url.txt Then just verify the address...
CVE-2023-4165
CVE-2023-4165 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u 单个url目标文件 python3 CVE-2023-4165.py -f url.txt Then verify the address...
Tongda OA v11.6 report_bi.func.php - SQL injection Detection
Tongda OA v11.6 reportbi.func.php has a SQL injection vulnerability, and attackers can obtain database information through the vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Tongda OA v11.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
Office Anywhere TongDa - Path Traversal Detection
Office Anywhere OA is susceptible to path traversal vulnerabilities which can be leveraged to perform remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Office Anywhere OA is susceptible to path traversal vulnerabilities which can be leveraged to perform remote.""" from kittysplo...
Tongda OA v2014 Get Contactlistt - Sensitive Information Disclosure Detection
There is an information leakage vulnerability in the getcontactlist.php file of Tongda OA v2014. Attackers can obtain sensitive information through the vulnerability and conduct further attacks. !/usr/bin/env python3 -- coding: utf-8 -- """There is an information leakage vulnerability in the...
Malicious code in wdt-erpmcp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec852c69947e2a2575ae37ce4a442a67dc01f7328c0c603b94c87aa84803623f wdt-erpmcp advertises itself as a generic MCP wrapper over the caller's Wangdian Tongda WDT ERP, and three of its four tools correctly read WDTAPPKEY...
MAL-2026-4775 Malicious code in wdt-erpmcp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec852c69947e2a2575ae37ce4a442a67dc01f7328c0c603b94c87aa84803623f wdt-erpmcp advertises itself as a generic MCP wrapper over the caller's Wangdian Tongda WDT ERP, and three of its four tools correctly read WDTAPPKEY...
EUVD-2019-19122
Malware in sbrugna...
EUVD-2023-58340
Malicious code in bioql PyPI...
EUVD-2023-59214
Malicious code in bioql PyPI...
EUVD-2024-33212
Malicious code in bioql PyPI...
EUVD-2023-57365
Malicious code in bioql PyPI...
EUVD-2024-44470
Malicious code in bioql PyPI...
EUVD-2024-17012
Malicious code in bioql PyPI...
EUVD-2023-58065
Malicious code in bioql PyPI...
EUVD-2024-16717
Malicious code in bioql PyPI...