2021hvv漏洞汇总

Related tags

Security related resources2021hvv_vul
Overview

清单
披露时间 涉及商家/产品 漏洞描述
2021/04/08 启明星辰天清汉马USG防火墙存在逻辑缺陷漏洞（历史漏洞） CNVD-2021-17391 启明星辰 天清汉马USG防火墙 逻辑缺陷漏洞 CNVD-2021-12793
2021/04/08 禅道项目管理软件11.6 禅道 11.6 sql注入漏洞
2021/04/08 金山WPS（历史漏洞CVE-2020-25291） 通过点击触发WPS内置浏览器RCE 金山WPS存在远程堆损坏漏洞
2021/04/08 金山V8/V9终端安全系统 金山 V8 -V9 终端安全系统漏洞合集
2021/04/08 金山V8终端安全系统 金山 V8 终端安全系统 pdf_maker.php 命令执行漏洞
2021/04/08 天擎 天擎越权访问
2021/04/08 致远OA 致远OA ajax.do 任意文件上传漏洞
2021/04/08 致远OA 致远OA 前台getshell 复现 致远OA任意文件上传
2021/04/08 齐治堡垒机 存在命令执行漏洞，POC疑似已流出
2021/04/08 深信服EDR（历史漏洞） 深信服EDR远程命令执行 CNVD-2020-46552
2021/04/08 深信服VPN（历史漏洞） 深信服 SSL VPN 客户端远程文件下载
2021/04/08 jackson 存在反序列化漏洞，POC疑似已流出
2021/04/08 tomcat 存在反序列化命令执行漏洞，POC疑似已流出
2021/04/08 泛微OA9 泛微OA9前台任意文件上传
2021/04/08 泛微OA8 泛微OA8前台SQL注入
2021/04/08 CoreMail Coremail文件上传漏洞POC - 钓鱼
2021/04/08 用友NC6.5 用友NC反序列化 用友 NC 反序列化RCE漏洞
2021/04/08 dubbo 存在反序列化命令执行漏洞，POC疑似已流出
2021/04/08 Weblogic 某weblogic的T3反序列化0day分析 Weblogic T3 反序列化远程代码执行漏洞
2021/04/08 天擎 360天擎-前台sql注入
2021/04/08 和信创天云桌面全版本 和信创天云桌面命令执行 和信创天云桌面系统 远程命令执行 RCE漏洞
2021/04/08 红帆OA 存在任意文件写入漏洞，POC疑似已流出
2021/04/08 Exchange Microsoft Exchange Server远程执行代码漏洞
2021/04/08 Shiro 存在Nday漏洞，POC疑似已流出
2021/04/08 金蝶云K3Cloud全版本 存在命令执行漏洞，，POC疑似已流出
2021/04/08 用友U8Cloud版本 存在命令执行，POC疑似已流出
2021/04/08 H3C计算机管理平台2016年版本 H3C SecPath运维审计系统任意用户登录漏洞 18号获取详细信息
2021/04/08 帆软V9 帆软 V9getshell FineReport V9 帆软 V9 任意文件覆盖文件上传
2021/04/08 天眼 存在0day漏洞，POC疑似已流出
2021/04/08 默安蜜罐管理平台 默安蜜罐管理平台未授权问
2021/04/08 Jellyfin<10.7.1版本（历史漏洞） Jellyfin未授权任意文件读取 - CVE-2021-21402
2021/04/08 用友ERP-NC 存在目录遍历漏洞
2021/04/08 快排CMS 快排CMS 任意文件上传漏洞
2021/04/08 快排CMS 快排CMS 信息泄露漏洞
2021/04/08 快排CMS 快排CMS 后台XSS漏洞
2021/04/09 Apache Solr apache Solr 存在任意文件读取
2021/04/09 亿邮电子邮件系统 亿邮电子邮件系统 远程命令执行漏洞
2021/04/09 天融信DLP 天融信dlp-未授权+越权
221/04/09 奇安信VPN 奇安信VPN前台存在RCE
2021/04/09 DzzOffice≤2.02 DzzOffice最新版RCE(随机数问题)
2021/04/09 蓝凌OA 蓝凌oa任意文件写入
2021/04/09 蓝凌OA 蓝凌OA EKP 后台SQL注入漏洞 CNVD-2021-01363蓝凌OA EKP 后台SQL注入漏洞 CNVD-2021-01363
2021/04/09 致远OA 致远OA远程代码执行漏洞
2021/04/09 浪潮云ClusterEngineV4.0 浪潮 ClusterEngineV4.0 任意命令执行
2021/04/09 OneBlog≤V2.2.1 OneBolg远程命令执行OneBlog 小于v2.2.1 远程命令执行漏洞
2021/04/10 浪潮云ClusterEngineV4.0 浪潮ClusterEngineV4.0 sysShell 任意命令执行漏洞
2021/04/10 浪潮云ClusterEngineV4.0 浪潮ClusterEngineV4.0 任意用户登录漏洞
2021/04/10 齐治堡垒机 齐治堡垒机任意用户登录漏洞
2021/04/10 山终端安全系统 V8/V9 金山终端安全系统 V8/V9存在文件上传漏洞
2021/04/10 奇安信NS-NGFW 网康防火墙 奇安信 网康下一代防火墙 RCE
2021/04/10 云尚在线客服系统 存在任意文件上传
2021/04/10 泛微OA8 e-mobile 泛微OA  e-mobile4.0-6.6 SQL注入漏洞
2021/04/10 泛微OA8 e-mobile 泛微e-mobile 0day
2021/04/11 FOFA指纹 title="流媒体管理服务器" HIKVISION 流媒体管理服务器 后台任意文件读取漏洞 CNVD-2021-14544
2021/04/11 Fastjson 0day 疑似0day，视频确认存在
2021/04/11 Apache Solr Apache Solr 任意文件下载/SSRF POC
2021/04/12 Google Chrome≤89.0.4389.114 Chrome 远程代码执行0Day漏洞
2021/04/12 Nagios Network Analyzer Nagios Network Analyzer SQL 注入漏洞- CVE-2021-28925
2021/04/12 蓝凌OA 蓝凌OA密码重置漏洞
2021/04/12 瑞捷 锐捷RG-UAC统一上网行为管理审计系统存在账号密码信息泄露 锐捷 RG-UAC 统一上网行为管理审计系统 账户硬编码漏洞
2021/04/13 IBOS数据库模块 IBOS 数据库模块 任意文件上传漏洞
2021/04/13 PHP zerodium PHP zerodium后门漏洞
2021/04/13 迅雷 迅雷11存在二进制漏洞 - CNVD-2021-18274
2021/04/13 Apache Solr Apache Solr服务器端请求伪造漏洞 - CVE-2021-27905
2021/04/13 Apache Solr Apache Solr数据集读写漏洞 - CVE-2021-29943
2021/04/13 Apache Solr Apache Solr敏感信息泄漏漏洞 - CVE-2021-29262
2021/04/14 Apache OFBiz反序列化漏洞 Apache OFBiz RMI反序列化漏洞 CVE-2021-26295
2021/04/14 EMP平台 EMP平台任意文件上传漏洞
2021/04/14 JD-FreeFuck后台命令执行 JD-FreeFuck 后台命令执行漏洞
2021/04/14 Microsoft Exchange Microsoft Exchange Server远程执行代码漏洞
2021/04/14 天融信（历史漏洞） 天融信接入网关系统存在弱口令 - CNVD-2021-08407
2021/04/14 奇安信天擎终端安全管理系统 存在任意文件上传
2021/04/14 Google Chrome V8引擎 Google ChromeV8引擎远程代码执行0day漏洞
2021/04/15 通达OA 通达OA存在命令执行漏洞 - CNVD-2021-21890
2021/04/15 Joomla Joomla XSS漏洞
2021/04/15 TongWeb tongweb文件上传漏洞
2021/04/16 Weblogic Weblogic T3 反序列化远程代码执行漏洞
2021/04/16 微信 青藤捕获在野微信0day漏洞（chrome 0day利用）利用微信内置浏览器Chrome漏洞实现远控
2021/04/16 浪潮ERP 浪潮ERP系统远程代码执行漏洞
2021/04/17 深信服 深信服安全感知平台存在存储型跨站脚本漏洞
2021/04/17 泛微 泛微某系统疑似存在文件上传漏洞
2021/04/17 TP-COUPON TP-COUPON存在SQL注入漏洞 - CNVD-2021-21889
2021/04/18 小鱼易连视频会议系统 小鱼易连视频会议系统存在0day
2021/04/18 H3C SecPath运维审计系统 H3C SecPath运维审计系统任意用户登录漏洞
2021/04/18 Coremail Coremail 邮箱系统路径穿越漏洞
2021/04/20 微信 微信最新版本3.2.11.151 Google内核poc利用上线cs方式

Just 互联网的搬运工，来自某公众号，如有侵权及时和我联系

Owner
Keep learning,Stay foolish,Continue thinking.
GitHub Repository
Infection Monkey - An automated pentest tool

Infection Monkey Data center Security Testing Tool Welcome to the Infection Monkey! The Infection Monkey is an open source security tool for testing a

Guardicore Ltd. 6k Jan 09, 2023
Find existing email addresses by nickname using API/SMTP checking methods without user notification. Please, don't hesitate to improve cat's job! 🐱🔎 📬

mailcat The only cat who can find existing email addresses by nickname. Usage First install requirements: pip3 install -r requirements.txt Then just

282 Dec 30, 2022
KeyKatcher is a keylogger that records keystrokes made on a computer and sends to the E-Mail.

What is a keylogger? A keylogger is a software application or piece of hardware that monitors and records keystrokes made on a computer keyboard. The

Himank_Jain 7 Sep 19, 2022
GitGuardian Shield: protect your secrets with GitGuardian

Detect secret in source code, scan your repo for leaks. Find secrets with GitGuardian and prevent leaked credentials. GitGuardian is an automated secrets detection & remediation service.

GitGuardian 1.2k Dec 27, 2022
Herramienta para descargar eventos de Sucuri WAF hacia disco.

Descarga los eventos de Sucuri Script para descargar los eventos del Sucuri Web Application Firewall (WAF) en el disco como archivos CSV. Requerimient

CSIRT-RD 2 Nov 29, 2021
SSLyze is a fast and powerful SSL/TLS scanning tool and Python library.

SSLyze SSLyze is a fast and powerful SSL/TLS scanning tool and Python library. SSLyze can analyze the SSL/TLS configuration of a server by connecting

Alban Diquet 2.8k Jan 03, 2023
Vuln Scanner With Python

VulnScanner Features Web Application Firewall (WAF) detection. Cross Site Scripting (XSS) tests. SQL injection time based test. SQL injection error ba

< / N u l l S 0 U L > 1 Dec 25, 2021
Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures

Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion to your preferred editor once it is configured.

Stamus Networks 39 Nov 28, 2022
MozDef: Mozilla Enterprise Defense Platform

MozDef: Documentation: https://mozdef.readthedocs.org/en/latest/ Give MozDef a Try in AWS: The following button will launch the Mozilla Enterprise Def

Mozilla 2.2k Jan 08, 2023
Security offerings for AWS Control Tower

Caylent Security Catalyst Reference Architecture Examples This repository contains solutions for Caylent's Security Catalyst. The Security Catalyst is

Steven Connolly 1 Oct 22, 2021
Installation of hacking tools

Tools-Spartan This is a program that makes it easy for you to download and install tools used in Kali Linux, there are tons of tools available.

1 Nov 10, 2021
A bare-bones POC container runner in python

pybox A proof-of-concept bare-bones container written in 50 lines of python code. Provides namespace isolation and resource limit control Usage Insta

Anirudh Haritas Murali 5 Jun 03, 2021
A Fast Broken Link Hijacker Tool written in Python

Broken Link Hijacker BrokenLinkHijacker(BLH) is a Fast Broken Link Hijacker Tool written in Python.

Mayank Pandey 70 Nov 30, 2022
Generates password lists/dictionaries based on keywords written in python3.

dicbyru Introduction Generates password lists/dictionaries based on keywords. It uses the keywords and adds capital letters, numbers and special chara

ru55o 2 Oct 31, 2022
Tensorflow 1.13.X implementation for our NN paper: Wei Xia, Sen Wang, Ming Yang, Quanxue Gao, Jungong Han, Xinbo Gao: Multi-view graph embedding clustering network: Joint self-supervision and block diagonal representation. Neural Networks 145: 1-9 (2022)

Multi-view graph embedding clustering network: Joint self-supervision and block diagonal representation Simple implementation of our paper MVGC. The d

WeiXia 13 Oct 26, 2022
Using python 3 and Flask an MVC system where the AES 128 CBC and Trivium algorithms

This project was developed using python 3 and Flask, it is an MVC system where the AES 128 CBC and Trivium algorithms can be tested through a communication between the computer and a device such as a

Brandon Israel Camacho Reyes 1 Dec 26, 2021
An open-source post-exploitation framework for students, researchers and developers.

Questions? Join the Discord support server Disclaimer: This project should be used for authorized testing or educational purposes only. BYOB is an ope

dvm 8.1k Dec 31, 2022
A token logger for discord + steals Brave/Chrome passwords and usernames

Backdoor Machine - ❗ For educational purposes only ❗ A program made in python for stealing passwords and usernames from Google Chrome/Brave and tokenl

36 Jul 18, 2021
CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection Usage usage: cve-2021-26084_confluence_rce.py [-h] --url URL [--cmd CMD] [--shell] CVE-2021-2

r0cky 92 Jul 20, 2022
These are Simple python scripts to test/scan your network

Disclaimer This tool is for Educational purpose only. We do not promote or encourage any illegal activities. Summary These are Simple python scripts t

Varun Jagtap 5 Oct 08, 2022