├── README.md
├── image
    ├── 1.png
    ├── 2.png
    ├── 3.png
    ├── 4.png
    ├── 5.png
    ├── 6.png
    ├── 7.png
    ├── 8.png
    ├── 9.png
    ├── fofa.png
    ├── ip_txt.png
    ├── key.png
    ├── logo.png
    ├── url-check.png
    ├── url_txt.png
    ├── urls.png
    ├── version1.png
    ├── version2.png
    ├── 微信.jpg
    └── 微信图片_20210926222313.png
└── vuln-list.txt


/README.md:
--------------------------------------------------------------------------------
  1 | <!-- markdownlint-disable first-line-heading -->
  2 | <p align="center">
  3 |   <img src="https://github.com/d3ckx1/Fvuln/blob/main/image/logo.png" alt="Fvuln" height="150" />
  4 |   <h1 align="center" > F-vuln </h1>
  5 | <p align="center">
  6 |   
  7 | <h4 align="center" > F-vuln（全称：Find-Vulnerability）是为了自己工作方便专门编写的一款自动化工具，主要适用于日常安全服务、渗透测试人员和RedTeam红队人员，它集合的功能包括：存活IP探测、开放端口探测、web服务探测、web漏洞扫描、smb爆破、ssh爆破、ftp爆破、mssql爆破等其他数据库爆破工作以及大量web漏洞检测模块。它可以根据目标开放的服务进行特定操作，不做无用功。适用于内网环境、互联网，对发现的安全问题，自动生成保存有用的内容在txt表里，以方便安全人员对授权项目完成测试工作。</h4>
  8 | 
  9 |  
 10 |   
 11 | <p align="center">
 12 |     <a href="https://www.github.com/d3ckx1" target="_blank"><img src="https://img.shields.io/badge/作者-d3ckx1-2277cc.svg?style=flat-square&logo=GitHub"></a>
 13 |   <a href="https://github.com/d3ckx1/Fvuln"><img alt="Fvuln" src="https://img.shields.io/github/forks/d3ckx1/Fvuln.svg"></a>
 14 |     <a href="https://github.com/d3ckx1/Fvuln"><img alt="Fvuln" src="https://img.shields.io/github/issues/d3ckx1/Fvuln.svg"></a>
 15 |     <a href="https://github.com/d3ckx1/Fvuln"><img alt="Fvuln" src="https://img.shields.io/github/stars/d3ckx1/Fvuln.svg"></a>
 16 |     <a href="https://github.com/d3ckx1/Fvuln"><img alt="Fvuln" src="https://img.shields.io/badge/Fvuln-green"></a>
 17 | </p>
 18 | 
 19 | # v1.4.9 更新
 20 | 1、修复漏洞误报；
 21 | 2、新增单独或批量漏洞扫描功能，-s 参数；
 22 | 3、新增33个POC；
 23 | 4、去掉一些banner。
 24 | 
 25 | # v1.4.8 更新
 26 | 1、新增25个漏洞检测；（现共460个漏洞模块）
 27 | 2、新增在服务爆破功能提示处，不操作8秒后自动进行爆破功能；
 28 | 3、新增加入200个常用密码字典；
 29 | 4、端口探测、SMB爆破提升速度；
 30 | 5、修复漏洞误报。（感谢反馈）
 31 | 
 32 | # v1.4.7 更新
 33 | 
 34 | 1、新增55个漏洞检测；（现共436个漏洞模块）
 35 | 2、新增centos程序版本；
 36 | 3、修复多个漏洞误报。（感谢@Jaky老师的反馈）
 37 | 
 38 | 
 39 | 
 40 | 
 41 | # 已经支持检测的漏洞表
 42 | https://github.com/d3ckx1/Fvuln/blob/main/vuln-list.txt
 43 | 
 44 | # 注：未经允许不可用于非法扫描攻击，请遵守国家法律法规
 45 | 
 46 | 
 47 | 
 48 | # 建议运行环境
 49 | Windows环境安装Terminal命令行，（这样运行显示更漂亮美观）
 50 | 如下图这些都可以
 51 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20210926222313.png)
 52 | 
 53 | Linux环境使用默认命令行终端即可。
 54 | 
 55 | # 使用命令_v1.4 版:
 56 | 
 57 | Fvuln.exe -s tomcat -u http://192.168.0.100/
 58 | 
 59 | 查看程序版本：Fvuln.exe -v （如果你能直连github，即可获取程序最新版本号）
 60 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/version2.png)
 61 | 
 62 | （如果你不能直连github，即这样，你懂的）
 63 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/version1.png)
 64 | 
 65 | 
 66 | 
 67 | fofa批量搜索检测：Fvuln.exe -fofa "泛微云桥"
 68 | 
 69 |  
 70 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/fofa.png)
 71 | 
 72 |  注：再同目录下创建“key.txt”文件，文件内第一行写入邮箱地址；第二行写入你的key
 73 | 
 74 | 
 75 | 
 76 | 
 77 | 批量URL检测：Fvuln.exe -us urls.txt
 78 | 
 79 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/urls.png)
 80 | 
 81 | 注：url.txt 里面放的是URL网站，如下图，
 82 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/url_txt.png)
 83 | 或者直接不要http，我写了识别没有http，会自己添加  "http://" 与 “/”
 84 | 
 85 | 单URL检测：Fvuln.exe -u http://192.168.1.1
 86 | 
 87 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/url-check.png)
 88 | 
 89 | 查看帮助: Fvuln.exe -h 
 90 | 
 91 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/1.png)
 92 | 
 93 | 查看现在能检测的漏洞模块：Fvuln.exe -l  or Fvuln.exe --list
 94 | 
 95 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/2.png)
 96 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/3.png)
 97 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/4.png)
 98 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/5.png)
 99 | 
100 | 执行： Fvuln.exe -t 192.168.0.100  or Fvuln.exe 192.168.0.1/24
101 | 
102 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/6.png)
103 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/7.png)
104 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/8.png)
105 | 
106 | 执行完成，查看报表：
107 | 
108 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/9.png)
109 | 
110 | 批量执行：Fvuln.exe -f ip.txt
111 | 
112 | 如果觉得我存活探测慢或者工作中又其他需求需要对特定IP进行扫描工作，可以把IP地址，写进txt里，使用这个功能正常进行全部工作。
113 | 
114 | 如图；
115 | ![Image text](https://github.com/d3ckx1/Fvuln/blob/main/image/ip_txt.png)
116 | 
117 | 
118 | # 缺点
119 | 
120 | 1、爆破ssh工作时命令行上会出现大量报错，但不影响爆破工作、报表里不会保存这些报错。
121 | 
122 | # 支持的系统
123 | windowexe版本\Linux版本请在 Releases 中下载
124 | https://github.com/d3ckx1/Fvuln/releases
125 | 
126 | :)
127 | 
128 | 
129 | # 欢迎大家使用，并向我提出宝贵意见，以及欢迎大家给我提供poc/exp.
130 | 
131 | 
132 | 
133 | ## 🏁 Star曲线
134 | ![star](https://starchart.cc/d3ckx1/Fvuln.svg)
135 | 
136 | 


--------------------------------------------------------------------------------
/image/1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/1.png


--------------------------------------------------------------------------------
/image/2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/2.png


--------------------------------------------------------------------------------
/image/3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/3.png


--------------------------------------------------------------------------------
/image/4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/4.png


--------------------------------------------------------------------------------
/image/5.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/5.png


--------------------------------------------------------------------------------
/image/6.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/6.png


--------------------------------------------------------------------------------
/image/7.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/7.png


--------------------------------------------------------------------------------
/image/8.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/8.png


--------------------------------------------------------------------------------
/image/9.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/9.png


--------------------------------------------------------------------------------
/image/fofa.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/fofa.png


--------------------------------------------------------------------------------
/image/ip_txt.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/ip_txt.png


--------------------------------------------------------------------------------
/image/key.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/key.png


--------------------------------------------------------------------------------
/image/logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/logo.png


--------------------------------------------------------------------------------
/image/url-check.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/url-check.png


--------------------------------------------------------------------------------
/image/url_txt.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/url_txt.png


--------------------------------------------------------------------------------
/image/urls.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/urls.png


--------------------------------------------------------------------------------
/image/version1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/version1.png


--------------------------------------------------------------------------------
/image/version2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/version2.png


--------------------------------------------------------------------------------
/image/微信.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/微信.jpg


--------------------------------------------------------------------------------
/image/微信图片_20210926222313.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/d3ckx1/Fvuln/ad73b8388c14994102d919ba69ddb9de7343bb54/image/微信图片_20210926222313.png


--------------------------------------------------------------------------------
/vuln-list.txt:
--------------------------------------------------------------------------------
  1 |  +-----+---------------------------------+---------------------------------------------------------------------------------+
  2 |  | num |      漏洞模块名                   |                               漏洞简介                                            |
  3 |  +-----+---------------------------------+---------------------------------------------------------------------------------+
  4 |  |  1  | ActiveMQ_weakpwd                |  Check ActiveMQ弱口令                                    
  5 |  |  2  | ActiveMQ_upload                 |  Check ActiveMQ任意文件上传漏洞(CVE-2016-3088)                                    
  6 |  |  3  | cve_2020_13942                  |  Check the Apache Unomi RCE (CVE-2020-13942)                                     
  7 |  |  4  | cas_4_1_rce                     |  Check the Apereo CAS 4.1.5 RCE vuln                                             
  8 |  |  5  | cve_2018_8715                   |  Check the AppWeb Authentication Bypass CVE-2018-8715                            
  9 |  |  6  | aria2_rce                       |  Check the aria2 RCE vuln                                                        
 10 |  |  7  | baota_pma                       |  Check the 宝塔（BaoTa）面板未授权访问phpMyAdmin数据库漏洞                          
 11 |  |  8  | cve_2020_3452                   |  Check the cisco readfile vuln(cve-2020-3452)                                    
 12 |  |  9  | cve_2020_8209                   |  Check the Citrix XenMobile 目录遍历漏洞（CVE-2020-8209）                          
 13 |  | 10  | ClusterEngine_TSCE_RCE          |  Check the 浪潮 ClusterEngineV4.0 任意命令执行漏洞                                
 14 |  | 11  | AfterLogicWebMail_LFI           |  Check the AfterLogicWebMail 任意命令执行漏洞
 15 |  | 12  | coldfusion_file_read            |  Check the Adobe ColdFusion file read vuln (CVE-2010-2861)     
 16 |  | 13  | confluence_ssti                 |  Check the Confluence SSTI CVE-2019-3396 (fileread and RCE)     
 17 |  | 14  | coremail_cnvd201916798          |  Check the coremail vuln (cnvd-2019-16798)                     
 18 |  | 15  | couchdb_user_bypass             |  Check the Couchdb user bypass vuln CVE-2017-12635           
 19 |  | 16  | django_debug_xss                |  Check the Django debug page XSS CVE-2017-12794            
 20 |  | 17  | django_sql_cve20209402          |  Check the Django GIS SQL vuln CVE-2020-9402                
 21 |  | 18  | dlink_cve201917506              |  Check the Dlink vuln (cve-2019-17506)                       
 22 |  | 19  | dlink_dcs_userpass              |  Check the Dlink DCS系列监控账号密码信息泄露漏洞(cve-2020-25078)
 23 |  | 20  | docker_api_rce                  |  Check the docker API unauthorized rce vuln      
 24 |  | 21  | docker_registry_api_unauth      |  Check the docker registry api unauth vuln       
 25 |  | 22  | docker_unauth                   |  Check the Docker unauthorized access       
 26 |  | 23  | draytek_rce_cve20208515         |  Check the draytek 企业级路由器RCE漏洞（CVE-2020-8515）               
 27 |  | 24  | Druid_rce_cve202125646          |  Check the Apache Druid 远程代码执行漏洞（CVE-2021-25646）    
 28 |  | 25  | drupal_cve20196340              |  Check the drupal core restful rce vuln (cve-2019-6340)    
 29 |  | 26  | Drupalgeddon_sql                |  Check the Drupal < 7.32 “Drupalgeddon” SQL注入漏洞（CVE-2014-3704）            
 30 |  | 27  | drupal_cve20187600              |  Check the Drupal Drupalgeddon 2 远程代码执行漏洞（CVE-2018-7600）             
 31 |  | 28  | drupal_cve20176920              |  Check the Drupal Core 8 PECL YAML 反序列化任意代码执行漏洞（CVE-2017-6920）             
 32 |  | 29  | ecology_oa_bsh_rce              |  Check the 泛微e-cology OA系统 Bsh RCE vuln                       
 33 |  | 30  | ecshop_x2_sql                   |  Check the Ecshop 2.x SQL/RCE vuln                   
 34 |  | 31  | ecshop_x3_sql                   |  Check the Ecshop 3.x SQL/RCE vuln    
 35 |  | 32  | EgGate_rce                      |  Check the 锐捷网络 EWEB网管系统RCE vuln (GETSHELL)                 
 36 |  | 33  | Elasticsearch_cve20143120       |  Check the Elasticsearch RCE CVE-2014-3120           
 37 |  | 34  | Elasticsearch_cve20151427       |  Check the Elasticsearch RCE CVE-2015-1427           
 38 |  | 35  | Elasticsearch_cve20153337       |  Check the Elasticsearch arbitrary file read vuln CVE-2015-3337         
 39 |  | 36  | Elasticsearch_cve20155531       |  Check the Elasticsearch arbitrary file read vuln CVE-2015-5531                    
 40 |  | 37  | exchange_ssrf_cve202126855      |  Check the exchange ssrf vuln (cve-2021-26855)        
 41 |  | 38  | Eyou_rce                        |  Check the 亿邮系统RCE漏洞           
 42 |  | 39  | big_f5_rce                      |  Check the BIG_IP F5 RCE Vuln (CVE-2020-5902)            
 43 |  | 40  | cve_2021_22986                  |  Check the BIG_IP F5 SSRF RCE Vuln (CVE-2021-22986)                     
 44 |  | 41  | finereport_LFI                  |  Check the 帆软报表_平台数据迁移插件_未授权任意文件读取                  
 45 |  | 42  | finereport_v9_rce               |  Check the FineReport(帆软) V9 getshell vuln         
 46 |  | 43  | flask_ssti                      |  Check the Flask SSTI Vuln             
 47 |  | 44  | apache_flink_directory_traversal|  Check the apache flink directory traversal vulnerability (CVE-2020-17519)        
 48 |  | 45  | apache_flink_upload_cve202017518|  Check the apache flink upload RCE vulnerability (CVE-2020-17518)    
 49 |  | 46  | fortios_cve201813379            |  Check the Fortinet FortiOS路径遍历漏洞 （CVE-2018-13379）           
 50 |  | 47  | glassfish_file_read             |  Check the Glassfish arbitrary file read vuln     
 51 |  | 48  | crack_glassfish                 |  Check the Glassfish weak password  
 52 |  | 49  | crack_grafana                   |  Check the Grafana weak password           
 53 |  | 50  | hadoop_unauthorized             |  Check the hadoop YARN ResourceManager vuln          
 54 |  | 51  | hikvision_LFI                   |  Check the HIKVISION 流媒体管理服务器后台任意读取                                    
 55 |  | 52  | huawei_ibmc_weakpwd             |  Check the Huawei IBMC 服务器智能管理系统默认密码                                    
 56 |  | 53  | iis_webdav_put                  |  Check the IIS WebDav PUT arbitrary file upload                                    
 57 |  | 54  | influxdb_unauth                 |  Check the influxdb unauthorized access         
 58 |  | 55  | jellyfin_cve202121402           |  Check the Jellyfin任意文件读取漏洞 (CVE-2021-21402)                                 
 59 |  | 56  | jenkins_unauth2rce              |  Check the Jenkins pre-auth RCE chained by CVE-2018-1000861 or CVE-2019-10030000   
 60 |  | 57  | jenkins_user_enumeration        |  Check the Jenkins username enumeration                                            
 61 |  | 58  | joomla_cve20158562              |  Check the Joomla 3.4.5 反序列化漏洞（CVE-2015-8562）                                
 62 |  | 59  | joomla_cve20178917              |  Check the Joomla 3.7.0 (CVE-2017-8917) SQL注入漏洞    
 63 |  | 60  | jupyter_notebook_unauth         |  Check the jupyter notebook unauth and RCE vuln   
 64 |  | 61  | kibana_file_read                |  Check the Kibana file read vuln (CVE-2018-17246)       
 65 |  | 62  | kibana_rce_cve20197609          |  Check the Kibana RCE vuln (CVE-2019-7609)   
 66 |  | 63  | Landray_OA_LFI                  |  Check the 蓝凌OA 任意文件读取漏洞(Landray_OA_LFI)   
 67 |  | 64  | lanproxy_cve20213019            |  Check the lanproxy 目录遍历漏洞 (CVE-2021-3019)   
 68 |  | 65  | UniNAC_upload                   |  Check the 联软准入系统 UniNAC upload vuln      
 69 |  | 66  | nacos_unauth_adduser            |  Check the Alibaba Nacos Unauth and adduser vuln        
 70 |  | 67  | nexus_cve20197238               |  Check the Nexus Repository Manager RCE vuln(cve-2019-7238)    
 71 |  | 68  | nexus_cve202010204              |  Check the Nexus Repository Manager RCE vuln(cve-2020-10204)         
 72 |  | 69  | nexus_cve202011444              |  Check the Nexus 3 Unauthorized Vuln (cve-2020-11444）              
 73 |  | 70  | nexus_weakpwd                   |  Check the Nexus Repository Manager weak password    
 74 |  | 71  | nodejs_cve202121315             |  Check the NodeJS Command Injection vuln cve-2021-21315     
 75 |  | 72  | nodejs_path_cve201714849        |  Check the NodeJS Path-validation vuln (cve-2017-14849)     
 76 |  | 73  | ofbiz_xxe                       |  Check the Apache OFBiz XML External Entity Injection (cve-2018-8033)         
 77 |  | 74  | ofbiz_rce                       |  Check the Apache ofbiz xml deserialization rce vuln(cve-2020-9496)     
 78 |  | 75  | ofbiz_rce_CVE202126295          |  Check the Apache OFBiz RMI deserializes arbitrary code execution (CVE-2021-26295)       
 79 |  | 76  | php_8_1_backdoor                |  Check the PHP 8.1.0-dev 开发版本后门         
 80 |  | 77  | phpmyadmin_setup_rce            |  Check the phpMyAdmin Scripts/setup.php Deserialization Vulnerability     
 81 |  | 78  | phpstudy_backdoor               |  Check the PhpStudy BackDoor For php 5.2.17 and 5.4.45       
 82 |  | 79  | QAX_wangkan_firewall_RCE        |  Check the 奇安信下一代网康防火墙任意命令执行漏洞         
 83 |  | 80  | QAX_360tianqing                 |  Check the 奇安信360天擎越权访问漏洞     
 84 |  | 81  | QAX_360tianqing_sql             |  Check the 奇安信360天擎SQL注入漏洞      
 85 |  | 82  | qizhi_bypass_user               |  Check the 齐治堡垒机某版本任意用户登录漏洞      
 86 |  | 83  | qizhi_rce                       |  Check the 齐治堡垒机前台远程命令执行漏洞（CNVD-2019-20835）         
 87 |  | 84  | rails_cve20195418               |  Check the Ruby On Rails 路径穿越/文件读取漏洞2(CVE-2019-5418)    
 88 |  | 85  | rails_cve20183760               |  Check the Ruby On Rails 路径穿越/文件读取漏洞（CVE-2018-3760）      
 89 |  | 86  | ruijie_RG_UAC_deserialization   |  Check the RuiJie RG-UAC 上网管理审计系统信息泄漏漏洞    
 90 |  | 87  | ruijie_CNVD202114536            |  Check the CNVD-2021-14536 锐捷 RG-UAC 统一上网行为管理审计系统信息泄露漏洞      
 91 |  | 88  | SaltStack_cve202125282          |  Check the SaltStack PUT shell (CVE-2021-25282) vuln         
 92 |  | 89  | sangfor_ad_script_exec_command  |  Check the 深信服 AD4.5 版本下命令执行漏洞     
 93 |  | 90  | sangfor_edr_rce                 |  Check the sangfor EDR RCE Vuln (CNVD-2020-46552)      
 94 |  | 91  | sangfor_edr_user_bypass         |  Check the 深信服 EDR user bypass Vuln     
 95 |  | 92  | seeyou_oa_a8_rce                |  Check the 致远OA-V8 RCE任意文件写入漏洞    
 96 |  | 93  | seeyou_oa_file_upload           |  Check the 致远OA-ajax.do文件上传漏洞      
 97 |  | 94  | seeyou_oa_getemaildata          |  Check the 致远OA getemaildata任意文件读取漏洞         
 98 |  | 95  | seeyou_oa_read                  |  Check the 致远OA NCFindWeb任意文件读取漏洞     
 99 |  | 96  | shiro_CVE20164437               |  Check the Shiro 1.2.4反序列化漏洞（CVE-2016-4437）      
100 |  | 97  | solr_fileread                   |  Check the apache Solr 任意文件读取漏洞     
101 |  | 98  | solr_cve20190193                |  Check the apache Solr DataImport Handler RCE (CVE-2019-0193)    
102 |  | 99  | spring_cve20181273              |  Check the Spring Data Commons RCE vuln（cve-2018-1273）     
103 |  | 100 | spring_cve20193799              |  Check the Spring Cloud Config目录遍历漏洞（CVE-2019-3799）  
104 |  | 101 | spring_cve20205410              |  Check the Spring Cloud Config目录遍历漏洞（CVE-2020-5410）      
105 |  | 102 | thinkadmin_file_read            |  Check the ThinkAdmin v6 未授权列目录、任意文件读取漏洞         
106 |  | 103 | thinkphp_cve201820062           |  Check the ThinkPHP5 5.0.23 远程代码执行漏洞(CVE-2018-20062)     
107 |  | 104 | thinkphp_rce                    |  Check the ThinkPHP任意命令执行漏洞1      
108 |  | 105 | thinkphp_rce2                   |  Check the ThinkPHP任意命令执行漏洞2     
109 |  | 106 | thinkphp_sql                    |  Check the ThinkPHP Sql注入漏洞   
110 |  | 107 | tomcat_manager_html_weakpwd     |  Check the Tomcat manager html logon    
111 |  | 108 | tomcat_put_shell                |  Check the Tomcat PUT RCE CVE-2017-12615        
112 |  | 109 | tongda_11_6_rce                 |  Check the 通达OA tongda v11.6 RCE vuln    
113 |  | 110 | tongda_fake_user                |  Check the 通达OA tongda Fake User vuln     
114 |  | 111 | tongda_unauth_access            |  Check the 通达OA tongda meeting unauthorized access vuln     
115 |  | 112 | topsec_dlp_user_bypass          |  Check the 天融信 Topsec DLP user bypass Vuln        
116 |  | 113 | topsec_topapp_lb_nopasswd       |  Check the 天融信负载均衡TopApp-LB系统无需密码直接登陆漏洞    
117 |  | 114 | topsec_topapp_lb_sql            |  Check the 天融信负载均衡TopApp-LB系统SQL注入漏洞     |
118 |  | 115 | vbulletin_CVE201916759          |  Check the vBulletin 5.x 未授权远程代码执行漏洞（CVE-2019-16759）     
119 |  | 116 | vmware_vcenter_rce              |  Check the VMware vCenter RCE vuln (cve-2021-21972)   
120 |  | 117 | vmware_vcenter_file_read        |  Check the VMware vCenter任意文件读取漏洞    
121 |  | 118 | coremail_vpn_file_read          |  Check the Coremail VPN file read vuln CNVD-2019-16798       
122 |  | 119 | fortigate_vpn_fileread          |  Check the Fortigate SSL VPN file read vuln (CVE-2018-13379)    
123 |  | 120 | PAN_vpn_rce                     |  Check the Pulse Secure SSL VPN任意文件读取漏洞 (CVE-2019-11510)    
124 |  | 120 | pulse_secure_vpn_fileread       |  Check the 通达OA tongda Fake User vuln     
125 |  | 121 | sonicwall_sslvpn_8_rce          |  Check the SonicWall SSL-VPN < 8.0.0.4 jarrewrite.sh RCE vuln   
126 |  | 122 | weaver_oa_sql                   |  Check the 泛微OA V8 SQL注入 vuln      
127 |  | 123 | weaver_oa_update                |  Check the 泛微OA V8 前台任意文件上传 vuln   
128 |  | 124 | weaver_read_file                |  Check the 泛微OA云桥未授权任意文件读取漏洞    
129 |  | 125 | ecshop_cnvd202058823_sql        |  Check the ECShop 4.1.0 前台免登录SQL注入漏洞    
130 |  | 126 | webmin_rce_cve201915107         |  Check the Webmin 远程命令执行漏洞 (CVE-2019-15107)  
131 |  | 127 | xenmobile_file_read_cve20208209 |  Check the Xenmobile file read vuln (CVE-2020-8209)    
132 |  | 128 | xxl_job_rce                     |  Check the xxl-job API接口未授权访问RCE漏洞     
133 |  | 129 | yongyou_grp_u8_sql              |  Check the 用友 GRP-U8 命令执行漏洞    
134 |  | 130 | zabbix_weakpwd                  |  Check the Zabbix weak password    
135 |  | 131 | zhongxin_userpass               |  Check the 中新金盾信息安全管理系统存在默认密码    
136 |  | 132 | zimbra_xxe2rce_CVE20199670      |  Check the Zimbra XXE to RCE CVE-2019-9670   
137 |  | 133 | crack_smb                       |  Cracking SMB password (爆破)     
138 |  | 134 | crack_ssh                       |  Cracking SSH password (爆破)    
139 |  | 135 | crack_ftp                       |  Cracking FTP password (爆破)    
140 |  | 136 | crack_mssql                     |  Cracking MSSQL password (爆破)     
141 |  | 137 | crack_mysql                     |  Cracking MYSQL password (爆破)  
142 |  | 138 | crack_oracle                    |  Cracking Oracle password (爆破)    
143 |  | 139 | crack_PostgreSQL                |  Cracking PostgreSQL password (爆破)      
144 |  | 140 | crack_MongoDB                   |  Check the MongoDB未授权访问漏洞                                 
145 |  | 141 | crack_Redis                     |  Cracking Redis password (爆破)                                 
146 |  | 142 | crack_memcached                 |  Check the Memcached未授权访问漏洞                               
147 |  | 143 | crack_Elasticsearch             |  Check the Elasticsearch未授权访问漏洞
148 |  | 144 | showdoc_default                 |  Check the showdoc default password vuln
149 |  | 145 | httpd_cve202141773              |  Check the apache httpd RCE CVE-2021-41773 漏洞（LFI）
150 |  | 146 | httpd_cve202141773_RCE          |  Check the apache httpd RCE CVE-2021-41773 漏洞（RCE）
151 |  | 147 | Extmail_sql                     |  Check the ExtMail SQL注入漏洞,可获取任意用户密码
152 |  | 148 | ThinkCMF_RCE                    |  Check the ThinkCMF任意命令执行漏洞
153 |  | 149 | alibaba_canal_leak              |  Check the Alibaba Canal 信息泄露漏洞
154 |  | 150 | confluence_CVE202126084         |  Check the Atlassian Confluence OGNL表达式注入代码执行漏洞（CVE-2021-26084）
155 |  | 151 | gitlab_cnvd202114193            |  Check the GitLab Graphql邮箱信息泄露漏洞 CNVD-2021-14193
156 |  | 152 | finereport_v8_fileread          |  Check the 帆软报表FineReport 8.0 任意文件读取漏洞(CNVD-2018-04757)
157 |  | 153 | flir_ax8_fileread               |  Check the FLIR-AX8 任意文件下载漏洞
158 |  | 154 | maccms_rce                      |  Check the 苹果CMS RCE漏洞
159 |  | 155 | phpunit_rce_CVE20179841         |  Check the phpunit 远程代码执行漏洞（CVE-2017-9841)
160 |  | 156 | shopxo_fileread                 |  Check the ShopXO Download File Read漏洞
161 |  | 157 | shopxo_weakpass                 |  Check the ShopXO 默认密码漏洞
162 |  | 158 | VoIPmonitor_rce_CVE202130461    |  Check the VoIPmonitor RCE漏洞(CVE-2021-30461)
163 |  | 159 | dlink_cve20209376               |  Check the Dlink vuln (cve-2020-9376)
164 |  | 160 | sangfor_edr_rce1                |  Check the 深信服 EDR RCE Vuln (2020HW)
165 |  | 161 | Druid_cve202136749              |  Check the Apache Druid任意文件读取漏洞(CVE-2021-36749)
166 |  | 162 | zyxel_nas_CVE20209054           |  Check the zyxel nas CVE-2020-9054 RCE
167 |  | 163 | metinfo_LFI                     |  Check the MetInfo CMS任意文件读取漏洞
168 |  | 164 | yongyou_u8_sql                  |  Check the Yongyou U8 SQL 漏洞
169 |  | 165 | hexinchuang_upload              |  Check the 和信创天云桌面文件上传漏洞
170 |  | 166 | DellKACE_SysMgmtApp_RCE         |  Check the Dell Kace K1000 RCE漏洞
171 |  | 167 | Barco_CVE20193929_RCE           |  Check the Barco/AWIND OEM RCE CVE-2019-3929
172 |  | 168 | vmware_NSX_RCE                  |  Check the VMware NSX SD-WAN Edge < 3.1.2 RCE漏洞
173 |  | 169 | skyworth_CVE201912862           |  Check the 天翼创维awifi路由器存在多处未授权访问漏洞
174 |  | 170 | fenwang_CVE201916313            |  Check the 蜂网互联企业级路由器v4.31密码泄露漏洞 CVE-2019-16313
175 |  | 171 | gitlab_CVE202122205             |  Check the GitLab 远程命令执行漏洞(CVE-2021-22205)
176 |  | 172 | Kylin_API_CVE202013937          |  Check the Kylin的未授权配置泄露漏洞(CVE-2020-13937)
177 |  | 173 | yongyou_nc_BeanShell            |  Check the 用友NC BeanShell RCE漏洞 CNVD-2021-30167
178 |  | 174 | yongyou_ERP_directory_traversal |  Check the 用友ERP-NC目录遍历漏洞
179 |  | 175 | cve20181999002                  |  Check the Jenkins任意文件读取漏洞(CVE-2018-1999002)
180 |  | 176 | vmware_vrealize_api_ssrf        |  Check the VMware vRealize API SSRF vuln (cve-2021-21975)
181 |  | 177 | resin_LFI                       |  Check the Resin 远程文件读取漏洞
182 |  | 178 | harbor_CVE201916097             |  Check the Harbor任意管理员注册漏洞(CVE-2019-16097)
183 |  | 179 | tika_CVE20181335                |  Check the Apache Tika命令注入漏洞(CVE-2018-1335)
184 |  | 180 | magento_v2_sql                  |  Check the Magento 2.2 SQL注入漏洞
185 |  | 181 | HP_iLo_CVE201712542             |  Check the iLo独立登录控制台登录绕过漏洞 CVE-2017-12542
186 |  | 182 | dlink_DSL2750u_FileDisc         |  Check the D-Link 2750u/2730u 任意文件读取
187 |  | 183 | TOTOLINK_RCE                    |  Check the TOTOLINK路由器后门和远程代码执行漏洞
188 |  | 184 | langhai_down                    |  Check the 蓝海卓越计费管理系统任意文件下载漏洞
189 |  | 185 | SiteServer_down_getshell        |  Check the SiteServer CMS远程模板下载导致Getshell漏洞
190 |  | 186 | CatfishCMS_CNVD201906255        |  Check the CatfishCMS远程命令执行漏洞（CNVD-2019-06255）
191 |  | 187 | ZenTao_11_RCE                   |  Check the 禅道11.6RCE漏洞
192 |  | 188 | airflow_unauth                  |  Check the Airflow 未授权访问漏洞
193 |  | 189 | alibaba_canal_default_password  |  Check the alibaba Canal 默认密码漏洞
194 |  | 190 | amtt_hiboss_rce                 |  Check the 安美数字酒店宽带运营系统RCE漏洞
195 |  | 191 | Jira_Unauth_User                |  Check the Jira Unauthenticated User Picker漏洞
196 |  | 192 | qisicms_sql_1                   |  Check the 74cms SQL漏洞1
197 |  | 193 | qisicms_sql_2                   |  Check the 74cms SQL漏洞2
198 |  | 194 | qisicms_sql_3                   |  Check the 74cms SQL漏洞3
199 |  | 195 | apache_nifi_api_rce             |  Check the Apache Nifi API RCE漏洞
200 |  | 196 | ambari_default_password         |  Check the Ambari 默认账户密码漏洞
201 |  | 197 | httpd_cve202140438_ssrf         |  Check the apache httpd cve-2021-40438 SSRF 漏洞
202 |  | 198 | apache_nifi_api_unauth          |  Check the Apache Nifi API 未授权访问漏洞
203 |  | 199 | storm_unauthorized              |  Check the Apache storm unauthorized access 漏洞
204 |  | 200 | aspcms_backend_leak             |  Check the aspcms backend leak 漏洞
205 |  | 201 | Cacti_weathermap_file_write     |  Check the Cacti weathermap插件任意文件写入漏洞
206 |  | 202 | Cacti_Unauth_RCE                |  Check the Cacti v1.2.8 Unauthenticated RCE漏洞（CVE-2020-8813）
207 |  | 203 | chinaunicom_default_password    |  Check the chinaunicom modem 默认密码漏洞
208 |  | 204 | cve_2019_19781                  |  Check the Citrix ADC RCE漏洞（CVE-2019-19781）
209 |  | 204 | cve_2020_8191                   |  Check the Citrix XSS漏洞（cve-2020-8191）
210 |  | 205 | cve_2020_8193                   |  Check the Citrix ADC漏洞（cve-2020-8193）
211 |  | 206 | grafana_LFI                     |  Check the Grafana 任意文件读取漏洞 (2021 0day)
212 |  | 207 | confluence_cve20158399          |  Check the Atlassian Confluence敏感信息泄露漏洞（cve-2015-8399）
213 |  | 208 | confluence_cve202126085         |  Check the Atlassian Confluence文件读取漏洞（CVE-2021-26085）
214 |  | 209 | consul_rexec_rce                |  Check the Hashicorp Consul rexec RCE vuln
215 |  | 210 | consul_service_rce              |  Check the Hashicorp Consul service RCE vuln
216 |  | 211 | couchcms_cve20187662            |  Check the couchcms cve-2018-7662 vuln
217 |  | 212 | couchdb_unauth                  |  Check the Couchdb unauth vuln
218 |  | 213 | craftcms_cve20209757            |  Check the craftcms seomatic cve-2020-9757 rce vuln
219 |  | 214 | dahua_bypass_cve202133044       |  Check the Dahua authentication bypass vuln cve-2021-33044
220 |  | 215 | datang_cnvd202104128            |  Check the 大唐电信AC集中管理平台弱口令漏洞cnvd-2021-04128
221 |  | 216 | xunchi_cnvd202023735            |  Check the xunchi file read vuln cnvd-2020-23735
222 |  | 217 | dedecms_cve20186910             |  Check the dedecms 5.7 vuln cve-2018-6910
223 |  | 218 | dedecms_carbuyaction_fileinclude|  Check the dedecms v5.6 carbuyaction fileinclude vuln
224 |  | 219 | dedecms_cve20187700_rce         |  Check the dedecms cve-2018-7700 rce vuln
225 |  | 220 | dedecms_url_redirection         |  Check the dedecms URL下载重定向漏洞
226 |  | 221 | guestbook_sqli                  |  Check the dedecms 5.7 guestbook.php SQL vuln
227 |  | 222 | dedecms_membergroup_sqli        |  Check the dedecms membergroup sqli vuln
228 |  | 223 | duomicms_sqli                   |  Check the duomicms<3.0 sqli vuln
229 |  | 224 | DVR_CVE20189995                 |  Check the DVR CVE-2018-9995 vuln
230 |  | 225 | dlink_850l_info_leak            |  Check the D-Link 850L 远程敏感信息读取vuln
231 |  | 226 | dlink_dsl_2888a_rce             |  Check the D-Link DSL 2888a RCE Vuln（CVE-2020-24581）
232 |  | 227 | dotnetcms_sqli                  |  Check the 风讯(foosun)CMS .net版本 SQL注入漏洞
233 |  | 228 | Druid_monitor_unauth            |  Check the Druid monitor unauth 漏洞
234 |  | 229 | dubbo_admin_default             |  Check the Dubbo Admin管理控制台默认密码漏洞
235 |  | 230 | Ezkeco_cnvd202057264_readfile   |  Check the e-zkeco read file vuln (cnvd-2020-57264)
236 |  | 231 | ecology_arbitrary_file_upload   |  Check the 泛微OA v9 前台文件上传漏洞
237 |  | 232 | ecology_oa_filedownload         |  Check the 泛微OA 前台文件下载漏洞
238 |  | 233 | ecology_spring_directory        |  Check the 泛微OA springframework directory traversal漏洞
239 |  | 234 | ecology_syncuserinfo_sqli       |  Check the 泛微OA syncuserinfo SQL注入漏洞
240 |  | 235 | ecology_v8_sqli                 |  Check the 泛微OA V8 前台SQL注入漏洞
241 |  | 236 | ecology_validate_sqli           |  Check the 泛微OA validate.jsp SQL注入漏洞
242 |  | 237 | ecology_workflowcentertreedata  |  Check the 泛微OA workflowcentertreedata SQL注入漏洞
243 |  | 238 | EEA_cnvd202110543               |  Check the EEA 企业邮件归档管理系统信息泄露漏洞 cnvd-2021-10543
244 |  | 239 | ecshop_collection_list_sqli     |  Check the Ecshop collection list sqli vuln
245 |  | 240 | etouch_v2_sql                   |  Check the Ectouch v2 SQL注入漏洞
246 |  | 241 | exchange_xss_cve202141349       |  Check the exchange xss vuln (cve-2021-41349)
247 |  | 242 | fangweicms_sqli                 |  Check the fangweicms v4.3 sql注入漏洞
248 |  | 243 | feifeicms_LFI                   |  Check the feifeicms后台任意文件读取漏洞
249 |  | 244 | Finecms_sqli                    |  Check the FineCMS 5.0.10 SQL注入漏洞
250 |  | 245 | finereport_directory            |  Check the 帆软报表_finereport directory traversal漏洞
251 |  | 246 | flexpaper_cve201811686          |  Check the flexpaper cve-2018-11686 漏洞
252 |  | 247 | frp_unauth                      |  Check the frp 未授权访问与默认密码漏洞
253 |  | 248 | gateone_cve202035736            |  Check the GateOne 任意文件读取漏洞（cve-2020-35736）
254 |  | 249 | gilacms_sqli                    |  Check the gilacms 1-11-8 admin SQL注入漏洞(cve-2020-5515)
255 |  | 250 | gitlab_ssrf_cve202122214        |  Check the GitLab ssrf cve-2021-22214 漏洞
256 |  | 251 | gitlist_rce_cve20181000533      |  Check the gitlist 0.6.0 远程命令执行漏洞（CVE-2018-1000533）
257 |  | 252 | gocd_cve202143287               |  Check the GoCD任意文件读取漏洞 (CVE-2021-43287)
258 |  | 253 | go_pprof_leak                   |  Check the Go pprof 泄漏漏洞
259 |  | 254 | h2database_web_unauthor         |  Check the H2 Database WEB Console 未授权访问漏洞
260 |  | 255 | h3c_imc_rce                     |  Check the H3C IMC dynamiccontent.properties.xhtm 远程命令执行
261 |  | 256 | h3c_secparh_userlogin           |  Check the H3C SecParh堡垒机 get_detail_view.php任意用戶登录漏洞
262 |  | 257 | h5s_cnvd202067113_unauth        |  Check the H5S CONSOLE 未授权访问漏洞(CNVD-2020-67113)
263 |  | 258 | hanming_video_fileread          |  Check the 银澎云计算 好视通视频会议系统任意文件下载漏洞
264 |  | 259 | hikvision_info_leak             |  Check the HIKVISION /config/user.xml 信息泄漏
265 |  | 260 | hikvision_default_password      |  Check the HIKVISION 群组对讲服务配置平台存在弱口令漏洞
266 |  | 261 | hjtcloud_file_leak              |  Check the 中创视迅 会捷通云视讯 list 目录文件泄露漏洞
267 |  | 262 | hjtcloud_arbitrary_fileread     |  Check the 中创视迅 会捷通云视讯 fileDownload 任意文件读取漏洞
268 |  | 263 | huawei_gateway_hg659_fileread   |  Check the 华为hg659家庭网关存在任意文件读取漏洞
269 |  | 264 | hikvision_cve202136260          |  Check the HIKVISION 海康威视产品命令注入漏洞(CVE-2021-36260)
270 |  | 265 | IIS_put_getshell                |  Check the IIS PUT Getshell vuln
271 |  | 266 | inspur_tscev4_cve202021224      |  Check the inspur tscev4 rce vuln (cve-2020-21224)
272 |  | 267 | jboss_unauth                    |  Check the Jboss 未授权访问漏洞
273 |  | 268 | jboss_cve20101871               |  Check the Jboss RCE漏洞 (cve-2010-1871)
274 |  | 269 | jeewms_showordownbyurl_fileread |  Check the jeewms showordownbyurl 文件读取漏洞
275 |  | 270 | jellyfin_cve202129490           |  Check the Jellyfin RemoteImageController.cs SSRF漏洞 CVE-2021-29490
276 |  | 271 | jetty_cve202128164              |  Check the Jetty WEB-INF 敏感信息泄露漏洞（CVE-2021-28164）
277 |  | 272 | jinher_oa_default_pass          |  Check the 金和OA C6 管理员默认口令
278 |  | 273 | Jira_cve20198442                |  Check the Jira 未授权敏感信息泄露漏洞（CVE-2019-8442）
279 |  | 274 | Jira_cve20198449                |  Check the Jira 未授权敏感信息泄露漏洞（CVE-2019-8449）
280 |  | 275 | Jira_cve202014179               |  Check the Jira 信息泄露漏洞（cve-2020-14179）
281 |  | 276 | Jira_cve202014181               |  Check the Jira /ViewUserHover.jspa 信息泄露漏洞（cve-2020-14181）
282 |  | 277 | Jira_cve201911581               |  Check the Jira 模板注入漏洞（cve-2019-115811）
283 |  | 278 | Jira_ssrf_cve20198451           |  Check the Jira 未授权SSRF漏洞（cve-2019-8451）
284 |  | 279 | joomla_component_sql            |  Check the Joomla component vreview SQL注入漏洞
285 |  | 280 | joomla_346_rce                  |  Check the Joomla! 3.4.6 'configuration.php' RCE漏洞
286 |  | 281 | joomla_cve20157297_sql          |  Check the Joomla SQL注入漏洞（cve-2015-7297）
287 |  | 282 | spring_cve202222947             |  Check the Spring Cloud Gateway RCE漏洞（CVE-2022-22947）
288 |  | 283 | joomla_cve20187314_sql          |  Check the Joomla CVE-2018-7314 SQL注入漏洞
289 |  | 284 | joomla_cve20186605_sql          |  Check the Joomla CVE-2018-6605 SQL注入漏洞
290 |  | 285 | jumpserver_unauth               |  Check the JumpServer未授权RCE漏洞
291 |  | 286 | kafka_manager_unauth            |  Check the kafka manager unauth vuln
292 |  | 287 | spring_function_SpEL_RCE        |  Check the spring cloud function SpEL RCE漏洞
293 |  | 288 | Oracle_CVE202135587             |  Check the Oracle Access Manager反序列化漏洞(CVE-2021-35587)
294 |  | 289 | kibana_unauth                   |  Check the Kibana 未授权访问漏洞
295 |  | 290 | kingdee_directory_traversal     |  Check the 金蝶OA server_file 目录遍历漏洞
296 |  | 291 | kingsoft_v8_default_passwd      |  Check the kingsoft(金山) v8 默认密码漏洞
297 |  | 292 | kingsoft_v8_fileread            |  Check the kingsoft(金山) v8 文件读取漏洞
298 |  | 293 | kong_cve202011710_unauth        |  Check the API网关 Kong 未授权访问漏洞(CVE-2020-11710)
299 |  | 294 | kubernetes_unauth               |  Check the kubernetes 未授权访问漏洞
300 |  | 295 | kyan_password_leakage           |  Check the Kyan 网络监控设备账号密码泄露漏洞
301 |  | 296 | metinfo_sql1                    |  Check the Metinfo 5.3.17 X-Rewrite-url SQL注入漏洞
302 |  | 297 | yongyou_A6_directory_traversal  |  Check the 用友A6 createMysql.jsp 数据库敏感信息泄露漏洞
303 |  | 298 | spring_core_RCE                 |  Check the Spring Core RCE漏洞
304 |  | 299 | maccms_backdoor                 |  Check the 苹果CMS v10 后门漏洞
305 |  | 300 | laravel_cve20213129             |  Check the Laravel Ignition 2.5.1 代码执行漏洞（CVE-2021-3129）
306 |  | 301 | laravel_info_leak               |  Check the Laravel debug info-leak vuln
307 |  | 302 | laravel_improper_webdir         |  Check the Laravel improper webdir vuln
308 |  | 303 | metinfo_LFI_cnvd201813393       |  Check the MetInfo CMS任意文件读取漏洞(cnvd-2018-13393)
309 |  | 304 | metinfo_cve201917418            |  Check the MetInfo SQLi vuln (cve-2019-17418)
310 |  | 305 | metinfo_cve201916997            |  Check the MetInfo SQLi vuln (cve-2019-16997)
311 |  | 306 | metinfo_cve201916996            |  Check the MetInfo SQLi vuln (cve-2019-16996)
312 |  | 307 | minio_default_passwd            |  Check the Minio 默认密码漏洞
313 |  | 308 | mongo_cve201910758              |  Check the mongo-express RCE vuln (cve-2019-10758)
314 |  | 309 | mpsec_fileread                  |  Check the mpsec isg1000 file-read vuln
315 |  | 310 | msvod_sqli                      |  Check the msvod sqli vuln
316 |  | 311 | myucms_LFR                      |  Check the myucms load file read vuln
317 |  | 312 | nagio_cve201810735              |  Check the nagio commandline.php SQLi vuln (cve-2018-10735)
318 |  | 313 | nagio_cve201810736              |  Check the nagio info.php SQLi vuln (cve-2018-10736)
319 |  | 314 | nagio_cve201810737              |  Check the nagio logbook.php SQLi vuln (cve-2018-10737)
320 |  | 315 | nagio_cve201810738              |  Check the nagio menuaccess.php SQLi vuln (cve-2018-10738)
321 |  | 316 | natshell_fileread               |  Check the 蓝海卓越计费管理系统 download.php 任意文件读取 vuln
322 |  | 317 | QAX_wangkan_default_passwd      |  Check the 奇安信下一代网康互联网控制网关ns-icg存在弱口令漏洞
323 |  | 318 | netgear_cve20175521             |  Check the netgear 认证绕过漏洞 （cve-2017-5521）
324 |  | 319 | nexus_cve202010199              |  Check the Nexus 远程命令执行漏洞 (cve-2020-10199）
325 |  | 320 | nexusdb_cve202024571            |  Check the nexusdb path traversal vuln (cve-2020-24571)
326 |  | 321 | nhttpd_cve201916278             |  Check the Nostromo httpd RCE vuln (cve-2019-16278)
327 |  | 322 | NodeRED_cve20213223             |  Check the Node-RED ui_base file-read vuln (cve-2021-3223)
328 |  | 323 | noVNC_cve20213654               |  Check the noVNC url redirection vuln (cve-2021-3654)
329 |  | 324 | nps_default_passwd              |  Check the nps default password vuln
330 |  | 325 | QAX_wangkan_NS_fileread         |  Check the 网康 NS-ASG安全网关 任意文件读取漏洞
331 |  | 326 | nsfocus_uts_passwd_leak         |  Check the nsfocus uts password leak vuln
332 |  | 327 | nuuo_file_inclusion             |  Check the nuuo file inclusion vuln
333 |  | 328 | odoo_file_read                  |  Check the odoo file read vuln
334 |  | 329 | openfire_cve201918394           |  Check the openfire ssrf vuln (cve-2019-18394)
335 |  | 330 | panabit_default_password        |  Check the panabit gateway default password vuln
336 |  | 331 | panabit_ixcache_default_passwd  |  Check the panabit ixcache gateway default password vuln
337 |  | 332 | phpcms_cve201819127             |  Check the phpcms cve-2018-19127 vuln
338 |  | 333 | php_cve20121823                 |  Check the PHP cgi cve-2012-1823 vuln
339 |  | 334 | pentaho_cve202131602            |  Check the pentaho authentication bypass vuln (cve-2021-31602)
340 |  | 335 | pbootcms_database_download      |  Check the pbootcms database file download vuln
341 |  | 336 | phpmyadmin_cve201812613         |  Check the phpmyadmin file inclusion Vuln (cve-2018-12613)
342 |  | 337 | phpok_sqli                      |  Check the Phpok SQLi vuln
343 |  | 338 | opentsdb_cve202035476_rce       |  Check the OpenTSDB RCE vuln（CVE-2020-35476）
344 |  | 339 | pandorafms_cve201920224         |  Check the PandoraFMS v7.0NG authenticated RCE vuln (CVE-2019-20224)
345 |  | 340 | phpshe_sqli                     |  Check the phpshe SQLi vuln
346 |  | 341 | powercreator_fileupload         |  Check the PowerCreator CMS arbitrary file upload vuln
347 |  | 342 | prometheus_cve202129622         |  Check the prometheus url redirection vuln (cve-2021-29622)
348 |  | 343 | pulse_cve201911510              |  Check the Pulse Secure SSL VPN File Read (CVE-2019-11510)
349 |  | 344 | pyspider_unauthor               |  Check the Pyspider webui unauthorized-access vuln
350 |  | 345 | qibocms_sqli                    |  Check the qibocms SQLi vuln
351 |  | 346 | qilin_bastion_rce               |  Check the 中远麒麟iAudit运维审计系统未授权远程命令执行漏洞
352 |  | 347 | qnap_cve20197192                |  Check the qnap vuln (cve-2019-7192)
353 |  | 348 | rabbitmq_default_passwd         |  Check the rabbitmq default password vuln
354 |  | 349 | razor_cve20188770               |  Check the Cobub Razor 0.8.0 Physical path Leakage Vuln
355 |  | 350 | rconfig_cve201916663            |  Check the rConfig v3.9.2 unauth RCE vuln (CVE-2019-16663)
356 |  | 351 | resin_cnnvd200705315            |  Check the Resin 多个远程信息泄露漏洞(CNNVD-200705-315)
357 |  | 352 | resin_fileread                  |  Check the Resin viewfile LFI vuln
358 |  | 353 | rockmongo_default_passwd        |  Check the rockmongo default password vuln
359 |  | 354 | ruijie_EG_cli_rce               |  Check the RuiJie EG cli.php RCE vuln
360 |  | 355 | ruijie_EG_branch_passw_rce      |  Check the RuiJie EG branch_passw.php RCE vuln
361 |  | 356 | ruijie_EG_download_fileread     |  Check the RuiJie EG download.php file read vuln
362 |  | 357 | ruijie_EG_info_leak             |  Check the RuiJie EG info leak vuln
363 |  | 358 | ruijie_EG_phpinfo_view          |  Check the RuiJie EG phpinfo.view.php info vuln
364 |  | 359 | ruijie_yunketang_Directory      |  Check the RuiJie yunketang Directory traversal vuln
365 |  | 360 | ruijie_eweb_rce                 |  Check the RuiJie EWEB RCE vuln (cnvd-2021-09650)
366 |  | 361 | ruijie_nbr1300g_cli_passwdleak  |  Check the RuiJie nbr1300g cli password leak vuln
367 |  | 362 | ruoyi_management_fileread       |  Check the 若依(RuoYi) management fileread vuln
368 |  | 363 | SaltStack_cve202125281          |  Check the SaltStack 命令注入漏洞 (CVE-2021-25281)
369 |  | 364 | samsung_wea453e_default         |  Check the samsung router wlan-ap wea453e default passwd vuln
370 |  | 365 | samsung_wea453e_rce             |  Check the samsung router wea453e rce vuln
371 |  | 366 | samsung_wea453e_wlanap_rce      |  Check the samsung router WLAN AP WEA453e RCE vuln
372 |  | 367 | sangfor_ba_rce                  |  Check the 深信服 行为感知系统 c.php 远程命令执行漏洞
373 |  | 368 | satellian_cve20207980           |  Check the satellian RCE vuln (cve-2020-7980)
374 |  | 369 | seacms_v6_rce                   |  Check the Seacms 6.54&6.55 RCE vuln
375 |  | 370 | seacms_before_v992_rce          |  Check the Seacms <= 9.92 RCE Getshell vuln
376 |  | 371 | seacms_sqli                     |  Check the Seacms V8.7 SQLi vuln
377 |  | 372 | seacms_v654_rce                 |  Check the Seacms v6.54 RCE vuln
378 |  | 373 | seacms_v654_command             |  Check the Seacms v654 command exec vuln
379 |  | 374 | secnet_ac_default               |  Check the secnet ac default password vuln
380 |  | 375 | seeyou_a6_infoleak              |  Check the 致远OA A6 info leak vuln
381 |  | 376 | seeyou_cnvd202062422            |  Check the 致远OA readfile vuln (cnvd-2020-62422)
382 |  | 377 | seeyou_cookieleak               |  Check the 致远OA cookie leak vuln
383 |  | 378 | seeyou_sessionleak              |  Check the 致远OA session leak vuln
384 |  | 379 | seeyou_sqli                     |  Check the 致远OA wooyun 2015-0108235 sqli vuln
385 |  | 380 | shiziyu_apicontroller_sqli      |  Check the shiziyu cms apicontroller SQLi vuln
386 |  | 381 | cve_2022_1388                   |  Check the BIG_IP F5 iControl REST RCE Vuln (CVE-2022-1388)
387 |  | 382 | showdoc_uploadfile              |  Check the showdoc uploadfile vuln
388 |  | 383 | skywalking_CVE20209483          |  Check the skywalking sqli vuln (cve-2020-9483)
389 |  | 384 | solarwinds_cve202010148         |  Check the SolarWinds Orion API RCE vuln (cve-2020-10148)
390 |  | 385 | solr_cve201712629               |  Check the apache Solr cve-2017-12629 XXE vuln
391 |  | 386 | solr_velocity_rce               |  Check the apache Solr Velocity Custom Template (CVE-2019-17558)
392 |  | 387 | sonarqube_cve202027986          |  Check the sonarqube unauth vuln (cve-2020-27986)
393 |  | 388 | spark_api_unauth                |  Check the spark api unauth vuln
394 |  | 389 | spark_webui_unauth              |  Check the spark webui unauth vuln
395 |  | 390 | spon_intercom_fileread          |  Check the spon-ip intercom file read vuln
396 |  | 391 | spon_intercom_pingrce           |  Check the spon-ip intercom ping rce vuln
397 |  | 392 | spring_cve20205405              |  Check the spring cloud config server vuln（CVE-2020-5405）
398 |  | 393 | spring_cve20164977              |  Check the Spring Security OAuth2 RCE Vuln(CVE-2016-4977)
399 |  | 394 | springboot_env_unauth           |  Check the springboot env unauth Vuln
400 |  | 395 | supervisord_cve201711610        |  Check the Supervisord RCE vuln (CVE-2017-11610)
401 |  | 396 | tamronos_iptv_rce               |  Check the TamronOS IPTV RCE vuln
402 |  | 397 | telecom_gateway_default         |  Check the Telecom gateway default password vuln
403 |  | 398 | tensorboard_unauth              |  Check the TensorBoard unauth vuln
404 |  | 399 | terramaster_cve202015568        |  Check the TerraMaster OS exportUser.php RCE vuln(cve-2020-15568)
405 |  | 400 | terramaster_cve202028188        |  Check the TerraMaster TOS RCE vuln(cve-2020-28188)
406 |  | 401 | ThinkCMF_lfi                    |  Check the ThinkCMF 任意内容包含漏洞
407 |  | 402 | thinkphp_v6_filewrite           |  Check the ThinkPHP v6 file write vuln
408 |  | 403 | tomcat_cve201811759             |  Check the Tomcat CVE-2018-11759 vuln
409 |  | 404 | tongda_user_session             |  Check the 通达OA v11.7 在线用户登录漏洞
410 |  | 405 | tpshop_directory                |  Check the TPshop directory traversal vuln
411 |  | 406 | tpshop_sqli                     |  Check the TPshop <3.0 SQLi vuln
412 |  | 407 | tvt_nvms_cve201920085           |  Check the TVT NVMS 1000 file read vuln(cve-2019-20085)
413 |  | 408 | typecho_rce                     |  Check the typecho < 1.1(17.10.24) RCE vuln
414 |  | 409 | ueditor_fileupload              |  Check the UEditor .Net file upload vuln (cnvd-2017-20077)
415 |  | 410 | uwsgi_cve20187490               |  Check the uWSGI PHP Directory Traversal Vuln (CVE-2018-7490)
416 |  | 411 | vmware_vcenter_cve202121985     |  Check the VMware vCenter RCE vuln (cve-2021-21985)
417 |  | 412 | weblogic_ssrf                   |  Check the weblogic SSRF Vuln
418 |  | 413 | weblogic_cve202014750           |  Check the weblogic CVE-2020-14750 Vuln
419 |  | 414 | weblogic_cve201710271           |  Check the weblogic CVE-2017-10271 Vuln
420 |  | 415 | weiphp_sqli                     |  Check the weiphp<=5.0 SQLi Vuln
421 |  | 416 | weiphp_path_traversal           |  Check the weiphp path traversal Vuln (CNVD-2020-68596)
422 |  | 417 | wifisky_cnvd202139012           |  Check the wifisky default password vuln (cnvd-2021-39012)
423 |  | 418 | wordpress_cve201919985          |  Check the wordpress Email Subscribers File Down vuln (cve-2019-19985)
424 |  | 419 | wordpress_cve201914205          |  Check the wordpress ext adaptive images LFI vuln (CVE-2019-14205)
425 |  | 420 | wuzhicms_v410_sqli              |  Check the wuzhicms v4.1.0 sms_check.php SQLi vuln
426 |  | 421 | xdcms_sqli                      |  Check the XDCMS SQLi vuln
427 |  | 422 | xiuno_cvnd201901348             |  Check the Xiuno BBS reinstallation vuln(cvnd-2019-01348)
428 |  | 423 | yccms_v3_rce                    |  Check the YCCMS v3.3 RCE vuln
429 |  | 424 | yapi_rce                        |  Check the Yapi RCE vuln
430 |  | 425 | yongyou_nc6_file_upload         |  Check the 用友nc 6.5 文件上传漏洞
431 |  | 426 | youphptube_cve20195127          |  Check the youphptube encoder cve-2019-5127 vuln
432 |  | 427 | youphptube_cve20195128          |  Check the youphptube encoder cve-2019-5128 vuln
433 |  | 428 | youphptube_cve20195129          |  Check the youphptube encoder cve-2019-5129 vuln
434 |  | 429 | yungoucms_sqli                  |  Check the yungoucms sqli vuln
435 |  | 430 | confluence_cve202226134         |  Check the Atlassian Confluence RCE漏洞（CVE-2022-26134）
436 |  | 431 | zabbix_auth                     |  Check the zabbix authentication bypass vuln
437 |  | 432 | zabbix_cve201610134             |  Check the zabbix latest.php SQLi vuln(CVE-2016-10134)
438 |  | 433 | zcms_v3_sqli                    |  Check the ZCMS v3.0 SQLi vuln
439 |  | 434 | zeit_cve20205284                |  Check the ZEIT Next.js directory traversal vuln(cve-2020-5284)
440 |  | 435 | zeroshell_cve201912725          |  Check the ZeroShell 3.9.0 RCE vuln(CVE-2019-12725)
441 |  | 436 | zzcms_zsmanage_sqli             |  Check the ZZCMS201910 zsmanage SQLi vuln
442 |  | 437 | shiziyu_apigoodsController_sqli |  Check the shiziyu cms ApigoodsController.class.php SQLi vuln
443 |  | 438 | jinher_oa_file_read             |  Check the 金和OA C6 download.jsp 任意文件读取漏洞
444 |  | 439 | Alibaba_Accesskey_Leak          |  Check the Alibaba Canal Accesskey Information Leakage vuln
445 |  | 440 | ICEFlow_vpn_Information_Leak    |  Check the CEFlow VPN Information Leakage vuln
446 |  | 441 | bullwark_momentum_lfi           |  Check the Bullwark Momentum Series JAWS 1.0 LFI vuln
447 |  | 442 | cisco_cve20191653               |  Check the Cisco readfile vuln(cve-2020-3452)
448 |  | 443 | sap_cve201712637                |  Check the SAP NetWeaver path traversal vuln (cve-2017-12637)
449 |  | 444 | sap_cve20206287                 |  Check the SAP NetWeaver AS JAVA vuln (CVE-2020-6287)
450 |  | 445 | idrac_weak_passwd               |  Check the DELL idrac weak passwd vuln
451 |  | 446 | sharepoint_cve20201147          |  Check the sharepoint RCE vuln (cve-2020-1147)
452 |  | 447 | LionfishCMS_ApiController_SQL   |  Check the 狮子鱼CMS ApiController.class.php SQL注入漏洞
453 |  | 448 | LionfishCMS_Apigoods_SQL        |  Check the 狮子鱼CMS ApigoodsController.class.php SQL注入漏洞
454 |  | 449 | kingsoft_pdf_maker_RCE          |  Check the kingsoft 金山 V8 终端安全系统 pdf_maker.php 命令执行漏洞
455 |  | 450 | weblogic_RCE_CVE202014882       |  Check the Weblogic CVE-2020-14882 RCE Vuln
456 |  | 451 | IceWarp_WebClient_RCE           |  Check the IceWarp WebClient Basic RCE vuln
457 |  | 452 | Duoke_Default_passwd            |  Check the Duoke-Web-Server 存在默认密码 admin/admin
458 |  | 453 | zhongqingnabo_info              |  Check the zhongqingnabo 信息泄露漏洞
459 |  | 454 | cisco_Read_Only                 |  Check the Cisco Read-Only Path Traversal Vuln
460 |  | 455 | omigod_CVE202138647             |  Check the OMI RCE vuln (CVE_2021_38647)
461 |  | 456 | huayu_reporter_rce              |  Check the 华域Reporter assembly RCE vuln
462 |  | 457 | Aviatrix_CVE202140870           |  Check the Aviatrix Controller RCE vuln (CVE_2021_40870)
463 |  | 458 | Metabase_cve202141277           |  Check the Metabase 任意文件读取漏洞（CVE-2021-41277）
464 |  | 459 | ecology_cnvd202149104           |  Check the 泛微E-Office文件上传漏洞（CNVD-2021-49104）
465 |  | 460 | beescms_sqli                    |  Check the beescms XFF注入漏洞
466 |  +---------------------------------------+----------------------------------------------------------------+
467 | 


--------------------------------------------------------------------------------