CVE-2022-41272

CVE-2022-41272 在此仓库中，我们将简要介绍CVE-2022-41272漏洞的信息。 该漏洞存在于运行在5NN04端口上的SAP P4服务中。其中NN是实例编号，范围从00到99。 存在一些远程调用函数，攻击者无需任何身份验证即可调用。 在下图中，你可以看到SAP发布的补丁。 PoC已准备就绪并部署到RedRays安全平台。 PS. 你可以给仓库加星并开始关注，当我们公开PoC时，你将收到通知。 原始推文链接...

DataX-Web 代码问题漏洞

DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's personal developers. A security vulnerability exists in DataX-Web v1.0.0 and v2.0.0 to v2.1.2, which stems from the fact that its RPC interface does not perform privilege checking by default, allowing an...

Sierra Wireless ALEOS Code Execution Vulnerability

Sierra Wireless ALEOS AAF is Sierra Wireless Canada's framework for creating applications in Sierra Wireless AirLink gateways. ALEOS versions 4.4.9, 4.9.5, and prior to 4.14.0 have a security vulnerability that originates from an unauthenticated RPC server allowing remote code execution. No...