CVE-2022-26134_check

CVE-2022-26134check 이 스크립트는 원격으로 Confluence 서버가 CVE-2022-26134 취약점에 취약한지 확인하는 데 사용됩니다. 이 취약점은 원격 코드 실행 결함으로, 패치되지 않은 서버에서 공격자가 임의 코드를 실행할 수 있게 합니다. 이 취약점은 6월에 여러 봇넷이 패치되지 않은 설치 환경에 암호화폐 채굴 멀웨어를 배포하기 위해 악용되었습니다. 사용 방법: 시스템에 Python 3이 설치되어 있는지 확인하세요. 스크립트를 다운로드하여 로컬 머신에 저장하세요. 명령 프롬프트 또는 터미널 창을 열고...

CVE-2023-7304

Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmcsync.php' interface. An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the...

CVE-2025-34130

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the /z/zbin/nethtml.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to...

CVE-2025-34130

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the /z/zbin/nethtml.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to...

PT-2021-5456 · Tp Link · Tp-Link Tl-Wr840N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEU V5 171211 Description: The PING function is vulnerable to remote code execution via a crafted payload in an IP address input field. This issue is related to incorrect code...