search

R4gd0ll / I-Wanna-Get-All

OA漏洞利用工具
1.09k stars 85 forks source link

新增poc #18

Open sinner-user opened 4 months ago

sinner-user commented 4 months ago

这个poc能加入么https://github.com/zan8in/pxplan/blob/fd87ef720bf9e7550512ef22bf1f84c3895e8b1c/xray_pocs/ecology_clusterupgrade_upload.go

coolyue1 commented 4 months ago

大佬，能加一个 用友NC-Cloud接口blobRefClassSearch存在FastJson反序列化漏洞 https://github.com/wy876/POC/blob/main/%E7%94%A8%E5%8F%8BNC-Cloud%E6%8E%A5%E5%8F%A3blobRefClassSea%E5%AD%98%E5%9C%A8%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E.md