KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #typescript #developer-tools #claude-code #ai-agent #codex #deepseek-harness #ai-agents #cli #react #mcp

https-github.com-mai-lang-chai-Middleware-Vulnerability-detection

★ 35 Open GitHub ↗

No description available.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Middleware-Vulnerability-detection

![](https://img.shields.io/badge/Products-count-ff69b4)
![](https://img.shields.io/badge/%E6%B3%9B%E5%BE%AE-3-363463)
![](https://img.shields.io/badge/Joomla-2-3a499a)
![](https://img.shields.io/badge/Harbor-1-607bca)
![](https://img.shields.io/badge/Kibana-1-607bca)
![](https://img.shields.io/badge/Jboss-1-607bca)
![](https://img.shields.io/badge/seeyon-3-3a499a)
![](https://img.shields.io/badge/ThinkCMF-1-607bca)
![](https://img.shields.io/badge/PHP+FPM-1-607bca)
![](https://img.shields.io/badge/phpStudy-2-3a499a)
![](https://img.shields.io/badge/FusionAuth-1-607bca)
![](https://img.shields.io/badge/ApacheKylin-1-607bca)
![](https://img.shields.io/badge/phpMyadmin-1-607bca)
![](https://img.shields.io/badge/Apache-7-363463)
![](https://img.shields.io/badge/MetaCRM-1-607bca)
![](https://img.shields.io/badge/Mongo-1-607bca)
![](https://img.shields.io/badge/flink-1-607bca)
![](https://img.shields.io/badge/Liferay-1-607bca)
![](https://img.shields.io/badge/蜂网互联企业级路由器-1-607bca)
![](https://img.shields.io/badge/Citrix-1-607bca)
![](https://img.shields.io/badge/Tomcat-2-3a499a)
![](https://img.shields.io/badge/Jira-1-607bca)
![](https://img.shields.io/badge/Intellian-1-607bca)
![](https://img.shields.io/badge/Exchange-3-3a499a)
![](https://img.shields.io/badge/Cacti-1-607bca)
![](https://img.shields.io/badge/Weblogic-2-3a499a)
![](https://img.shields.io/badge/ModSecurity-1-607bca)
![](https://img.shields.io/badge/zoho-1-607bca)
![](https://img.shields.io/badge/Spring-1-607bca)
![](https://img.shields.io/badge/通达OA-4-363463)
![](https://img.shields.io/badge/Vmware-4-3a499a)
![](https://img.shields.io/badge/宝塔-1-607bca)
![](https://img.shields.io/badge/SAP-1-607bca)
![](https://img.shields.io/badge/Nexus-2-3a499a)
![](https://img.shields.io/badge/Open%20AudIT-1-607bca)
![](https://img.shields.io/badge/SaltStack-1-607bca)
![](https://img.shields.io/badge/Fastjson-8-e96a23)
![](https://img.shields.io/badge/Shiro-6-3a499a)
![](https://img.shields.io/badge/F5BIGIP-2-3a499a)
![](https://img.shields.io/badge/Sangfor-1-607bca)
![](https://img.shields.io/badge/e_Bridge-1-607bca)
![](https://img.shields.io/badge/联软准入UniNAC-1-607bca)
![](https://img.shields.io/badge/xxl_job-1-607bca)
![](https://img.shields.io/badge/Xstream-1-607bca)
![](https://img.shields.io/badge/XenMobile-1-607bca)
![](https://img.shields.io/badge/骑士CMS-1-607bca)
![](https://img.shields.io/badge/Struts2-1-607bca)
![](https://img.shields.io/badge/Zyxel-2-607bca)
![](https://img.shields.io/badge/JumpServer-1-607bca)
![](https://img.shields.io/badge/Nacos-1-607bca)
![](https://img.shields.io/badge/Sudo-1-607bca)
![](https://img.shields.io/badge/rConfig-1-607bca)
![](https://img.shields.io/badge/FastAdmin-1-607bca)
![](https://img.shields.io/badge/D_Link-1-607bca)
![](https://img.shields.io/badge/Node_js-1-607bca)
![](https://img.shields.io/badge/浪潮-1-607bca)
![](https://img.shields.io/badge/showdoc-1-607bca)
![](https://img.shields.io/badge/ThinkPHP-1-607bca)
![](https://img.shields.io/badge/Yapi-1-607bca)
![](https://img.shields.io/badge/锐捷-3-3a499a)

***

2020.4.18项目迎来两位伙伴一起维护  
[@caizhuang](https://github.com/caizhuang) 🍺🍺🍺  
[@3ND](https://github.com/inspiringz)🍺🍺🍺

---
![image](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/blob/master/pic/back.jpg)

## Apache
--[2019 Apache-flink 未授权访问任意](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/Apache-flink%20%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E4%BB%BB%E6%84%8Fjar%E5%8C%85%E4%B8%8A%E4%BC%A0%E5%8F%8D%E5%BC%B9shell)  
--[2019 CVE-2019-0193 Apache Solr via Velocity template RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/CVE-2019-0193%20Apache-Solr%20via%20Velocity%20template%20RCE)  
--[2020.3 CVE-2019-17564 Apache Dubbo反序列化漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/CVE-2019-17564%20Apache-Dubbo%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E)  
--[2020.7 CVE-2020-13925 Apache Kylin 远程命令执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/CVE-2020-13925%20Apache%20Kylin%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E)  
--[2020.10 CVE-2020-13957 Apache Solr 未授权上传](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/CVE-2020-13957%20Apache%20Solr%20%E6%9C%AA%E6%8E%88%E6%9D%83%E4%B8%8A%E4%BC%A0)  
--[2020.11 CVE-2020-13942 Apache Unomi 远程代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/CVE-2020-13942%20Apache%20Unomi%20%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)  
--[2021.3 Apache Zeppelin 未授权任意命令执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/Apache%20Zeppelin%20%E6%9C%AA%E6%8E%88%E6%9D%83%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C)  
--[2021.3 CVE-2021-26295 Apache OFBiz 反序列化漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Apache/CVE-2021-26295%20Apache%20OFBiz%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E)  
## Cacti
--[2020.2 CVE-2020-8813 Cacti v1.2.8 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Cacti/CVE-2020-8813%20Cacti%20v1.2.8%20RCE)  
## Citrix
--[2020.1 Citrix Application Delivery Controller和Citrix Gateway RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Citrix/CVE-2019-19781%20Citrix%20Application%20Delivery%20Controller%E5%92%8CCitrix%20Gateway%E7%9A%84RCE)  
## D-Link
--[2020.09 CVE-2020-25078 D-Link DCS系列监控 账号密码信息泄露](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/D-Link/CVE-2020-25078%20D-Link%20DCS%E7%B3%BB%E5%88%97%E7%9B%91%E6%8E%A7%20%E8%B4%A6%E5%8F%B7%E5%AF%86%E7%A0%81%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2)  
## Exchange
--[2020.3 CVE-2020-0688 Exchange RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Exchange/CVE-2020-0688%20Exchange%20Rce)  
--[2020.12 CVE-2020-17144 Exchange RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/blob/master/Exchange/CVE-2020-17144%20Exchange%20RCE)  
--[2021.3 CVE-2021-26855 Exchange RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/blob/master/Exchange/CVE-2021-26855%20Exchange%20RCE)  
## F5 BIG-IP 
--[2020.7 CVE-2020-5902 F5 BIG-IP TMUI 远程代码执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/F5%20BIG-IP/CVE-2020-5902%20F5%20BIG-IP%20TMUI%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E)  
--[2021.3 CVE-2021-22986 F5 BIG-IP-IQ 远程代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/F5%20BIG-IP/CVE-2021-22986%20F5%20BIG-IP-IQ%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)  
## FastAdmin
--[2021.3 FastAdmin 用户权限RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/FastAdmin/FastAdmin%20%E7%94%A8%E6%88%B7%E6%9D%83%E9%99%90RCE)  
## Fastjson
--[2020 Fastjson RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Fastjson/Fastjson%E5%90%84%E7%89%88%E6%9C%AC%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%E6%B1%87%E6%80%BB)  
## FusionAuth
--[2020.2 CVE-2020-7799 FusionAuth 1.10 RCE ](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/FusionAuth/CVE-2020-7799)  
## Harbor
--[2019 CVE-2019-16097 任意管理员注册漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Harbor/CVE-2019-16097%20%E4%BB%BB%E6%84%8F%E7%AE%A1%E7%90%86%E5%91%98%E6%B3%A8%E5%86%8C%E6%BC%8F%E6%B4%9E)  
## Intellian-Aptus-Web
--[2020.2 CVE-2020-7980 Intellian Aptus Web 1.24 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Intellian-Aptus-Web/CVE-2020-7980)
## Jira
--[2019 CVE-2019-8449 JIRA 信息泄漏](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Jira/CVE-2019-8449%20JIRA%20信息泄漏)
## Joomla
--[2019 Joomla-3.4.6-RCE.py](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Joomla/Joomla%203.4.6-RCE)  
--[2021.3 CVE-2021-23132 Joomla 普通管理员RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Joomla/CVE-2021-23132%20Joomla%20%E6%99%AE%E9%80%9A%E7%AE%A1%E7%90%86%E5%91%98RCE)
## Jellyfin
--[2021 CVE-2021-21402 Jellyfin 任意文件读取漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Jellyfin/CVE-2021-21402)
## JumpServer
--[2021 JumpServer RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/JumpServer)  
## Kibana
--[2019 CVE-2019-7609 Kibana Timelion visualizer命令执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Kibana/CVE-2019-7609)
## Liferay
--[2020.3 CVE-2020-7961 Liferay Portal JSON Web Service RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Liferay/CVE-2020-7961%20Liferay%20Portal%20JSON%20Web%20Service%20RCE)
## Meta CRM
--[2019 Meta CRM 任意文件上传](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Meta%20CRM/任意文件上传)
## ModSecurity
--[2020.1 CVE-2019-19886 ModSecurity DOS](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/ModSecurity/CVE-2019-19886%20ModSecurity%20DOS)  
## Mongo
--[2020.1 CVE-2019-10758 mongo-express RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Mongo/CVE-2019-10758%20mongo-express%20RCE)  
## Nacos
--[2020.3 CVE-2020-10199  Nexus Repository Manager 3 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Nacos/)  
## Nexus
--[2020.3 CVE-2020-10199  Nexus Repository Manager 3 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Nexus/CVE-2020-10199%20Nexus%20Repository%20Manager%203%20表达式解析漏洞%20RCE)  
--[2020.3 CVE-2020-10204 Nexus Repository Manager 3 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Nexus/CVE-2020-10199%20Nexus%20Repository%20Manager%203%20表达式解析漏洞%20RCE)  
## Node.js
--[2021.3 CVE-2021-21315 Node.js systeminformation模块RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Node.js/CVE-2021-21315%20Node.js%20systeminformation%E6%A8%A1%E5%9D%97RCE)  
## Open-AudIT
--[2020.4 CVE-2020-12078 Open-AudIT v3.3.1 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Open-AudIT/CVE-2020-12078%20Open-AudIT%20v3.3.1%20RCE)
## PHP-FPM
--[2019 CVE-2019-11043 nginx+php-fpm RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/PHP-FPM/CVE-2019-11043)  
## phpMyadmin
--[2020.1 CVE-2020-0554 phpMyadmin 后台SQL注入](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/phpMyadmin/CVE-2020-0554)  
## phpStudy
--[2019 phpStudy RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/phpStudy/phpStudy%20RCE)  
--[2020.9 phpstudy nginx 解析漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/phpStudy/phpstudy%20nginx%20%E8%A7%A3%E6%9E%90%E6%BC%8F%E6%B4%9E)  
## rConfig
--[2021.3 rConfig 任意文件上传](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Rconfig/rConfig%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0)  
## SaltStack
--[2020.5 CVE-2020-11651、CVE-2020-11652 SaltStack远程命令执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/SaltStack/CVE-2020-11651%E3%80%81CVE-2020-11652%20SaltStack%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E)
## Sangfor
--[2020.8 Sangfor EDR远程命令执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Sangfor/EDR)  
## SAP
--[2020.7 CVE-2020-6287 SAP NetWeaver AS JAVA 任意管理员添加](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/SAP/CVE-2020-6287%20SAP%20NetWeaver%20AS%20JAVA%20%E4%BB%BB%E6%84%8F%E7%AE%A1%E7%90%86%E5%91%98%E6%B7%BB%E5%8A%A0)
## Shrio
--[2016 & 2019 CVE-2016-4437 Shiro550 & Shiro721 RememberMe Padding Oracle](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Shiro/CVE-2016-4437%20Shiro550%20%26%20Shiro721%20RememberMe%20Padding%20Oracle)  
--[2020.8 CVE-2020-1957 & CVE-2020-11989 & CVE-2020-13933 & CVE-2020-17523权限绕过](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Shiro/CVE-2020-1957%20%26%20CVE-2020-11989%20%26%20CVE-2020-13933%20%26%20CVE-2020-17523%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87)  
## ShowDoc
--[2021.4 ShowDoc 远程代码执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/ShowDoc/ShowDoc%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E)  
## Spring Cloud 
--[2020.3 CVE-2020-5405 Spring Cloud Config 目录穿越](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Spring%20Cloud/CVE-2020-5405%20Spring%20Cloud%20Config%20目录穿越)  
--[2020.6 CVE-2020-5410 Spring Cloud Config 目录穿越](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Spring%20Cloud/CVE-2020-5410%20Spring%20Cloud%20Config%20%E7%9B%AE%E5%BD%95%E7%A9%BF%E8%B6%8A)  
## SQL Server
--[2020.3 CVE-2020-0618 SQL Server Reporting Services中的RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/blob/master/SQL%20Server/CVE-2020-0618/README.MD)  
## Struts2
--[2020.12 CVE-2020-17530 Struts2 S2-061远程代码执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Struts2/CVE-2020-17530%20Struts2%20S2-061%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E)  
## Sudo
--[2021.1 CVE-2021-3156 Sudo溢出漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Sudo/CVE-2021-3156%20Sudo%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E) 
## ThinkCMF
--[2019 ThinkCMF框架任意文件包含](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/ThinkCMF/ThinkCMF框架任意文件包含)

## ThinkPHP
--[2021 ThinkPHP3.2.x RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/ThinkPHP/ThinkPHP3.2.x%20RCE)

## Tomcat
--[2020.2 CVE-2020-1938 Apache Tomcat 文件包含](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Tomcat/CVE-2020-1938)  
--[2020.5 CVE-2020-9484 Apache Tomcat Session 反序列化 RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Tomcat/CVE-2020-9484%20Session%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20RCE)

## Vmware
--[2020.4 CVE-2020-3952 信息泄露导致的vCenter 6.7 添加用户](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Vmware/CVE-2020-3952%20%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E5%AF%BC%E8%87%B4%E7%9A%84vCenter%206.7%20%E6%B7%BB%E5%8A%A0%E7%94%A8%E6%88%B7)  
--[2020.9 VMware vCenter任意文件读取](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Vmware/VMware%20vCenter%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96)  
--[2021.2 CVE-2021-21972 VMware vCenter Server 未授权文件上传](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Vmware/CVE-2021-21972%20VMware%20vCenter%20Server%20%E6%9C%AA%E6%8E%88%E6%9D%83%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E)  
--[2021.6 CVE-2021-21985 VMware vCenter Server远程代码执行漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Vmware/cve-2021-21985%20VMware%20vCenter%20Server%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E)

## Weblogic
--[2020.3 CVE-2020-2551 Weblogic RCE with IIOP](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Weblogic/CVE-2020-2551%20Weblogic%20RCE%20with%20IIOP/weblogicScanner)  
--[2020.3 CVE-2020-2555 Oracle Coherence&WebLogic RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Weblogic/CVE-2020-2555%20Oracle%20Coherence%26WebLogic%20RCE)  
--[2020.7 CVE_2015_4852-CVE_2020_2555 历史漏洞GUI检测利用](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Weblogic/CVE_2015_4852-CVE_2020_2555%20%E5%8E%86%E5%8F%B2%E6%BC%8F%E6%B4%9EGUI%E6%A3%80%E6%B5%8B%E5%88%A9%E7%94%A8)  
--[2020.10 CVE-2020-14882 & CVE-2020-14883 Weblogic Console RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Weblogic/CVE-2020-14882%20Weblogic%20Console%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81)

## XenMobile
--[2020.11 CVE-2020-8209 XenMobile 任意文件读取](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/XenMobile/CVE-2020-8209%20XenMobile%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96)  
## xxl-job
--[2020.11 xxl-job API接口未授权访问RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/xxl-job/xxl-job%20API%E6%8E%A5%E5%8F%A3%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AERCE)  
## XStream
--[2021.5 CVE-2021-29505 XStream反序列化命令执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/XStream/CVE-2021-29505%20XStream%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C)

## Yapi
--[2021.7 Yapi远程命令执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Yapi/Yapi%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C)
## Zoho
--[2020.3 CVE-2020-10189 Zoho ManageEngine Desktop Central RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Zoho/CVE-2020-10189%20Zoho%20ManageEngine%20Desktop%20Central%20RCE)
## Zyxel
--[2021.1 Zyxel 多款设备硬编码凭据漏洞（CVE-2020-29583）](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Zyxel)

--[2021（CVE-2021-3297）Zyxel NBG2105 身份验证绕过](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/Zyxel/%EF%BC%88CVE-2021-3297%EF%BC%89Zyxel%20NBG2105%20%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81%E7%BB%95%E8%BF%87)

## 宝塔
--[2020.8 宝塔数据库未授权访问](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E5%AE%9D%E5%A1%94/%E5%AE%9D%E5%A1%94%E6%95%B0%E6%8D%AE%E5%BA%93%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE)  
## 泛微 e-cology OA
--[2019 CNVD-2019-34241 SQL注入](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/泛微e-cology%20OA/CNVD-2019-34241%20SQL注入)  
--[2019 数据库配置信息泄露](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/泛微e-cology%20OA/数据库配置信息泄露)  
--[2019 泛微e-cology OA Beanshell组件远程代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/泛微e-cology%20OA/泛微e-cology%20OA%20Beanshell组件远程代码执行)  
## 泛微 e-Bridge
--[2020.9 泛微云桥 e-Bridge任意文件读取](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E6%B3%9B%E5%BE%AE%E4%BA%91%E6%A1%A5%20e-Bridge/%E6%B3%9B%E5%BE%AE%E4%BA%91%E6%A1%A5%20e-Bridge%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96)
## 蜂网互联企业级路由器
--[2019 CVE-2019-16313 蜂网互联企业级路由器hash泄露](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/蜂网互联企业级路由器/CVE-2019-16313)  
## 浪潮
--[2019 CVE-2020-21224 浪潮 ClusterEngineV4.0 远程代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E6%B5%AA%E6%BD%AE/CVE-2020-21224%20%E6%B5%AA%E6%BD%AE%20ClusterEngineV4.0%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)  
## 联软准入UniNAC
--[联软准入UniNAC 任意文件上传](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E8%81%94%E8%BD%AF%E5%87%86%E5%85%A5%20UniNAC/%E8%81%94%E8%BD%AF%E5%87%86%E5%85%A5UniNAC%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0)
## 骑士CMS
--[骑士CMS assign_resume_tpl 远程代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%AA%91%E5%A3%ABCMS/%E9%AA%91%E5%A3%ABCMS%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)  
## 锐捷
--[2021 CNVD-2021-17369锐捷无线smartweb管理系统管理员密码泄露](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%94%90%E6%8D%B7/CNVD-2021-17369%20%E9%94%90%E6%8D%B7%E6%97%A0%E7%BA%BFsmartweb%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E7%AE%A1%E7%90%86%E5%91%98%E5%AF%86%E7%A0%81%E6%B3%84%E9%9C%B2)  
--[2021.4 EWEB网管系统任意代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%94%90%E6%8D%B7/%E9%94%90%E6%8D%B7%E7%BD%91%E7%BB%9C%20EWEB%E7%BD%91%E7%AE%A1%E7%B3%BB%E7%BB%9F%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C)  
--[2021.2 锐捷SSL VPN 越权访问漏洞](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%94%90%E6%8D%B7/%E9%94%90%E6%8D%B7SSL%20VPN%20%E8%B6%8A%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E)  
## 通达OA
--[2020.3 通达OA任意文件上传配合文件包含导致的RCE](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/通达OA/通达OA任意文件上传配合文件包含导致的RCE)  
--[2020.4 通达 OA 任意用户登录 ](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%80%9A%E8%BE%BEOA/%E9%80%9A%E8%BE%BE%20OA%20%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E7%99%BB%E5%BD%95)  
--[2020.4 通达OA任意用户登录配合RCE getshell ](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%80%9A%E8%BE%BEOA/%E9%80%9A%E8%BE%BEOA%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E7%99%BB%E5%BD%95%E9%85%8D%E5%90%88RCE%20getshell)  
--[2020.8 通达OA 变量覆盖导致RCE ](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/%E9%80%9A%E8%BE%BEOA/%E9%80%9A%E8%BE%BEOA%20%E5%8F%98%E9%87%8F%E8%A6%86%E7%9B%96%E5%AF%BC%E8%87%B4%E7%9A%84RCE)  
## 用友致远
--[2019 致远OA htmlofficeservlet任意文件写入](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/seeyon/致远OA%20RCE)  
--[2021.1 致远OA ajax.do前台未授权任意文件上传](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/seeyon/ajax.do%E5%89%8D%E5%8F%B0%E6%9C%AA%E6%8E%88%E6%9D%83%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0)  
--[2021.6 CNVD-2021-30167 用友NC BeanShell远程代码执行](https://github.com/mai-lang-chai/Middleware-Vulnerability-detection/tree/master/seeyon/CNVD-2021-30167%20%E7%94%A8%E5%8F%8BNC%20BeanShell%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C)

***

# 免责声明：

*本项目中的POC或EXP均为互联网公开信息，非0day。  
由于传播、利用此项目内所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，项目作者不为此承担任何责任。POC或EXP仅仅只供对已授权的目标或学习使用测试。对非法入侵计算机系统，涉及网络安全法等违法行为本人不承担责任，均由使用者自行承担。*

https-github.com-mai-lang-chai-Middleware-Vulnerability-detection

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README