TomcatScanPro

TomcatScanPro README Version: 简体中文 Introduction This project is a weak password detection tool for Tomcat services. It supports multiple exploitation methods for CVE-2017-12615 vulnerability and integrates CNVD-2020-10487 Tomcat AJP protocol local file inclusion vulnerability exploitation...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Python2 Multithreaded Scanning for Tomcat-Ajp Protocol File Read Vulnerability A tool for scanning SRC rewards The PoC originates from https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, I am not the author of the PoC!!!! Operation 1. Place the domain/IP to be scanned in ip.txt Do not...

CNVD-2020-10487-Bulk-verification

CNVD-2020-10487 CVE-2020-1938 Batch Verification Script Batch script, based on the POC file by @YDHCUI, supports batching and automatic screenshots for easy review. 1. Environment Preparation Use conda to install virtual environments search Baidu for miniconda installation. Since the POC uses...

CNVD-2020-68596

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d0328a-e74e-461d-a0a1-f90ac8b8bc2f...

CNVD-2020-46552

creationtimestamp| type| source ---|---|--- 2026-06-30 09:59:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05a4eb33-7961-4868-a569-180aeae34a0a...

EUVD-2021-26482

Malware in sbrugna...

Some-PoC-oR-ExP

This repository is an offensive tool for collecting or writing various vulnerability POCs and exploits. The primary vulnerability targeted by the provided code is CNVD-2020-10487, a Tomcat-Ajp LFI Local File Inclusion vulnerability. The tool is designed to exploit this vulnerability to gain...

Some-PoC-oR-ExP

This repository is an offensive tool for collecting or writing various vulnerability PoCs proofs of concept and exploits. The primary vulnerability targeted by the code is CNVD-2020-10487, a Tomcat-Ajp local file inclusion LFI vulnerability. The tool is designed to exploit this vulnerability to...

CVE-2021-3617

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration. This vulnerability is the same as CNVD-2020-68652...

CVE-2021-3617

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration. This vulnerability is the same as CNVD-2020-68652...

Design/Logic Flaw

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651...

Command injection

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration. This vulnerability is the same as CNVD-2020-68652...

CVE-2021-3616

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651...

CVE-2021-3617

CVE-2021-3617 affects Lenovo Smart Camera X3, X5 and C2E. The connected documents describe a command-injection vulnerability triggered by setting a specially crafted network configuration, with roots traced to CNVD-2020-68652. The available sources reiterate the affected devices and the general i...

CVE-2021-3134

Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...

Design/Logic Flaw

Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...

CVE-2021-3134

Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878...

CVE-2021-3134

CVE-2021-3134 affects Mubu 2.2.1. The vulnerability is a local privilege escalation: a local attacker can gain privileges to execute system commands. Root cause cited in connected records is an authorization issue stemming from failure to strictly limit user privileges (CNVD-2020-68878). The rela...

Joomla! cross-site request forgery vulnerability (CNVD-2020-75071)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site request forgery vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...

MediaWiki cross-site scripting vulnerability (CNVD-2020-74054)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. MediaWiki before 1.35.1 suffers from a cross-site scripting vulnerability tha...