sunlogin_rce

前言 没啥好说的,直接放工具和有漏洞的版本吧,大家本地玩玩很不错，切勿用于非法测试。 测试向日葵客户端漏洞版本:11.0.0.33162 漏洞客户端在源码中提供. 端口扫描用的是:https://github.com/jboursiquot/portscan 漏洞版本根据反馈获得 11.1.1 10.3.0.27372 11.0.0.33162 命令说明 -h 指定目标 -t 选择扫描或者命令执行 默认scan -p 设置扫描端口范围 默认4w到65535 -c 需要执行的命令 相关截图 扫描 rce 时间 20220216 From https://github.com/TRYblog...

sunflower_exp

CVE-2022-10270 影响版本： 向日葵个人版 Windows --thread 扫描时的线程数 默认线程数为100 --help 帮助 sunflowerpocexp.py 漏洞验证及扫描工具 端口探测： eg：python sunflowerpocexp.py --scan --ip --port --thread 参数需使用者指定 python sunflowerpocexp.py --scan 均使用默认参数 --scan 扫描参数 --ip 需要扫描的ip地址 默认扫描ip地址为：127.0.0.1 --port 需要扫描的端口列表 默认扫描端口为：...

Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

Drones and the US Air Force

Fascinating analysis of the use of drones on a modern battlefield--that is, Ukraine--and the inability of the US Air Force to react to this change. The F-35A certainly remains an important platform for high-intensity conventional warfare. But the Air Force is planning to buy 1,763 of the aircraft...

sunflowerneonatology.com Improper Access Control vulnerability OBB-3813677

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

Path traversal

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2022-48323: Improper Limitation of a Pathname to a Restricted Directory

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2022-48323

Sunlogin Sunflower Simplified (also known as Sunflower Simple and Personal) version 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can exploit this by sending a crafted HTTP request, such as using the /check?cmd=ping../ endpoint followed by a system pat...

Sunlogin Sunflower Simplified 路径遍历漏洞

Sunlogin Sunflower is a remote control software from the Chinese company Sunlogin. A security vulnerability exists in Sunlogin Sunflower Simplified version 1.0.1.43315, which stems from the presence of path traversal, and allows remote and unauthenticated attackers to execute arbitrary programs o...

PT-2023-15701

Name of the Vulnerable Software and Affected Versions Sunlogin Sunflower Simplified aka Sunflower Simple and Personal version 1.0.1.43315 Description Sunlogin Sunflower Simplified aka Sunflower Simple and Personal version 1.0.1.43315 is susceptible to a path traversal issue. A remote,...

CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

VulnCheck KEV: CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

Exploit for CVE-2022-10270

PoC exploit for CVE-2022-10270, a vulnerability in an unspecifie...

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...

sunflowerltd.co.uk Cross Site Scripting vulnerability OBB-1474401

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in Streaming Media System Platform of Beijing Century Sunflower Digital Media Technology Co.

Sunflower streaming media service system is a complete set of IP network-based audio and video application platform, she integrated the Century Sunflower video broadcasting system, video-on-demand system, video broadcasting system, as well as data distribution, business management and other...