HG532d-RCE-Exploit

HG532d RCE 漏洞利用 概述 基于 CVE-2017-17215 漏洞的远程代码执行（RCE）漏洞利用程序。由 exploit-db.com 的原始 PoC 代码修改而来，可在华为 HG532d 家庭网关路由器上运行。 描述 此 RCE 漏洞利用基于 CVE-2017-17215，该漏洞利用华为 HG532 系列家用路由器上运行的 UPnP 进程中的漏洞。来自 exploit-db.com 的原始漏洞利用程序针对 HG532 家用路由器。 此漏洞利用通过对 HTTP POST 请求进行修改，绕过了路由器执行的输入清理，从而使原始漏洞利用程序能够在 HG532d 路由器上工作。 C...

EUVD-2015-5230

Malware in sbrugna...

EUVD-2021-1400

Malware in sbrugna...

Relative Path Traversal in afire serve_static

This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible...

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation escaping, stripping controls that developers may have put in place...