sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc 针对 CVE-2020-7388 的概念验证利用代码，实现 Sage X3 的 AdxDSrv 服务上以 SYSTEM 权限进行的未认证远程代码执行 概述 Sage X3 在 "AdxDSrv.exe" 进程（AdxAdmin 组件的一部分）上暴露了一个管理服务，默认监听 TCP 1818 端口（可更改）。该服务用于通过 Sage X3 控制台对 Sage ERP 解决方案进行远程管理。服务中的一个漏洞允许恶意攻击者向该暴露的服务发送精心构造的请求，以 "NT AUTHORITY/SYSTEM" 用户身份在服务器上执行命令。...

CVE-2023-31868

Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting XSS. Some parts of the Web application are dynamically built using user's inputs. Yet, those inputs are not verified nor filtered by the application, so they mathed the expected format. Therefore, when HTML/JavaScript code is...

CVE-2016-10822

cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images SEC-88...

EUVD-2010-5158

Malware in sbrugna...

EUVD-2020-28516

Malware in sbrugna...

EUVD-2020-28515

Malware in sbrugna...

EUVD-2004-0679

Malware in sbrugna...

EUVD-2005-4310

Malware in sbrugna...

EUVD-2014-8601

Malware in sbrugna...

EUVD-2016-1848

Malware in sbrugna...

EUVD-2016-1816

Malware in sbrugna...

EUVD-2006-1949

Malware in sbrugna...

EUVD-2011-5154

Malware in sbrugna...

EUVD-2014-8602

Malware in sbrugna...

EUVD-2025-6681

Malicious code in bioql PyPI...

EUVD-2023-36157

Malicious code in bioql PyPI...

EUVD-2023-36158

Malicious code in bioql PyPI...

EUVD-2025-6682

Malicious code in bioql PyPI...

CVE-2023-31867

Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection...

CVE-2016-10854

cPanel before 11.54.0.4 allows self XSS in the X3 Entropy Banner interface SEC-87...