CVE-2020-26258 && XStream SSRF
CVE-2020-28874
A smol bash script I threw together pretty quickly to scan for vulnerable versions of the Apache Tomcat RCE. I'll give it some love when I have the time.
CVE-2017-12615 任意文件写入exp,写入webshell
CVE-2020-36188 &&Jackson-databind RCE
Cross Site Scripting (XSS) in Digisol DG-HR3400 Router
Stored XSS via CSRF in Beetel 777VR1 Router
CISCO CVE-2020-3452 Scanner & Exploiter
CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights.
CVE-2020-26217 XStream RCE POC
OpenSSH 2.3 < 7.7 - Username Enumeration
A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server
Jackson-databind远程代码执行漏洞(CVE-2020-8840)分析复现环境代码
CVE-2020-23968