From 5262c5a205d6780c033a4c2d81d5ea40a2e67354 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E4=B8=9C=E6=96=B9=E6=9C=89=E9=B1=BC=E5=90=8D=E4=B8=BA?= =?UTF-8?q?=E5=92=B8?= Date: Sat, 28 Jun 2025 21:29:53 +0800 Subject: [PATCH] Update README.md --- README.md | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/README.md b/README.md index 00fca63..8b41c72 100644 --- a/README.md +++ b/README.md @@ -574,6 +574,34 @@ - [百卓Smart管理平台 licence.php 文件上传漏洞](https://mrxn.net/jswz/baizhuosmart-licence-rce.html) - [百卓Smart管理平台 uploadfile.php 文件上传漏洞](https://mrxn.net/jswz/baizhuosmart-uploadfile-rce.html) - [百卓Smart管理平台 useratte/layer_swich_conf.php 任意文件删除漏洞](https://mrxn.net/jswz/baizhuosmart-useratte-layer_swich_conf-filedel.html) +- [锐捷-EWEB flwo.control.php 命令注入漏洞](https://mrxn.net/jswz/ruijieweb-flow_control_pi-flwo_control_setFlowGroup-type-rce.html) +- [Unibox路由器 /billing/logout.php 命令执行漏洞](https://mrxn.net/jswz/unibox-billing-logout-mac_address-rce.html) +- [时空智友企业流程化管控系统 indexService.notice sql注入漏洞](https://mrxn.net/jswz/yonyou-ksoa-formservice-indexService-notice-id-sqli.html) +- [锐捷-EWEB check.php 文件读取漏洞](https://mrxn.net/jswz/ruijieweb-check-fileread.html) +- [JeeWMS cgAutoListController.do SQL注入漏洞](https://mrxn.net/jswz/JeeWMS-cgAutoListController-sort-order-sqli.html) +- [JeeWMS druid 未授权访问漏洞](https://mrxn.net/jswz/JeeWMS-druid-unauth-accept.html) +- [用友NC cpRadarImage/download sql注入漏洞](https://mrxn.net/jswz/yonyou-nc-cpRadarImage-download-pk_psndoc-sqli.html) +- [NetMizer日志管理系统 troubleip.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-search-troubleip-appname-rce.html) +- [NetMizer日志管理系统 weixin.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-search-weixin-nodeid-rce.html) +- [NetMizer日志管理系统 weibo.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-search-weibo-nodeid-rce.html) +- [NetMizer日志管理系统 search.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-search-search-appname-rce.html) +- [NetMizer日志管理系统 qq.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-search-qq-start-rce.html) +- [NetMizer日志管理系统 mail.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-search-mail-nodeid-rce.html) +- [NetMizer日志管理系统 dologin.php SQL注入漏洞](https://mrxn.net/jswz/netmizer-data-login-dologin-username-sqli.html) +- [NetMizer日志管理系统 connect.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-manage-connect-start-ifname-rce.html) +- [NetMizer日志管理系统 hostdelay.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-data-chart-hostdelay-username-rce.html) +- [NetMizer日志管理系统 getlogin.php SQL注入漏洞](https://mrxn.net/jswz/netmizer-data-login-getlogin-usersessionid-sqli.html) +- [NetMizer日志管理系统 dirlist.php 目录遍历漏洞（CNVD-2017-37549）](https://mrxn.net/jswz/netmizer-data-manage-dirlist-node-directory-traversal.html) +- [NetMizer日志管理系统 position.php 命令执行漏洞](https://mrxn.net/jswz/netmizer-data-search-position-nodeid-rce.html) +- [用友NC IServiceEntryPoint XXE漏洞](https://mrxn.net/jswz/yonyou-nc-IServiceEntryPoint-getResult-xxe.html) +- [用友NC listUserSharingEvents SQL注入漏洞](https://mrxn.net/jswz/yonyou-nc-oacoSchedulerEvents-agent-sqli.html) +- [用友NC viewPsnCard/download sql注入漏洞](https://mrxn.net/jswz/yonyou-nc-viewPsnCard-download-pk_rpt_def-sqli.html) +- [JeeWMS iconController.do 任意文件上传漏洞](https://mrxn.net/jswz/JeeWMS-iconController-upload-rce.html) +- [JeeWMS commonController.do 任意文件上传漏洞（CVE-2024-57761）](https://mrxn.net/jswz/JeeWMS-commonController-upload-rce.html) +- [Synway SMG网关管理软件 9-13pcap.php 命令注入漏洞](https://mrxn.net/jswz/synway-9-13pcap-rce.html) +- [Synway SMG网关管理软件 9-2radius.php 命令注入漏洞](https://mrxn.net/jswz/synway-9-2radius-rce.html) +- [三汇SMG 网关管理软件 down.php 任意文件读取漏洞](https://mrxn.net/jswz/synway-down-fileread.html) +- [汉塔科技上网行为管理系统 cappkt.php 命令注入漏洞](https://mrxn.net/jswz/antasys-dgn_tools-cappkt-rce.html)