Exploit_CVE-2021-24762

exploitcve-2021-24762 이 저장소는 CVE-2021-24762에 대한 익스플로잇을 보여줍니다. 기본 구성에서 관리자admin 비밀번호를 추출하는 블라인드 SQL 인젝션Blind SQLi 익스플로잇입니다. 랩 실습 중 PerfectSurvey 플러그인이 설치된 WordPress 기반 환경에서 SQL 취약점에 막혔습니다. 제가 찾은 유일한 PoC는 sqlmap 기반이었고, 제가 작업 중이던 랩에서는 제대로 작동하지 않았습니다추가적인 문제가 많았습니다. 예: 애플리케이션이 404를 반환하거나, 타임아웃이 너무 크게...

Gespage 7.4.8 - SQL Injection

CVE-2017-7997 Gespage SQL Injection vulnerability Description Gespage is a web solution providing a printer portal. Official Website: http://www.gespage.com/ The web application does not properly filter several parameters sent by users, allowing authenticated SQL code injection Stacked Queries -...

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow !/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni...

hpopen-overflow.txt

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...