sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc CVE-2020-7388 の概念実証エクスプロイトコードです。Sage X3 の AdxDSrv サービスに対する、SYSTEM 権限での未認証リモートコード実行 RCE を実証します。 Overview Sage X3 は、AdxAdmin コンポーネントの一部であるプロセス「AdxDSrv.exe」の下で、TCP/1818 ポート（デフォルト。変更可能）に管理サービスを公開しています。このサービスは、Sage X3 Console を介した Sage ERP...

CVE-2023-31868

Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting XSS. Some parts of the Web application are dynamically built using user's inputs. Yet, those inputs are not verified nor filtered by the application, so they mathed the expected format. Therefore, when HTML/JavaScript code is...

CVE-2016-10822

cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images SEC-88...

EUVD-2014-8601

Malware in sbrugna...

EUVD-2006-1949

Malware in sbrugna...

EUVD-2020-28515

Malware in sbrugna...

EUVD-2010-5158

Malware in sbrugna...

EUVD-2005-4310

Malware in sbrugna...

EUVD-2011-5154

Malware in sbrugna...

EUVD-2016-1848

Malware in sbrugna...

EUVD-2016-1816

Malware in sbrugna...

EUVD-2004-0679

Malware in sbrugna...

EUVD-2020-28516

Malware in sbrugna...

EUVD-2014-8602

Malware in sbrugna...

EUVD-2023-36158

Malicious code in bioql PyPI...

EUVD-2025-6682

Malicious code in bioql PyPI...

EUVD-2025-6681

Malicious code in bioql PyPI...

EUVD-2023-36157

Malicious code in bioql PyPI...

CVE-2023-31867

Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection...

CVE-2016-10854

cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...