ÿÖÜÉý¼¶²¼¸æ-2022-07-28

°ä²¼¹¦·ò 2022-07-28
ÐÂÔöÊÂÎñ

 

ÊÂÎñÃû³Æ£º

TCP_ÌáȨ¹¥»÷_docker_Ô¶³Ì·ÇÊÚȨ½Ó¼û

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

dockerswarmÊÇdockerϵÄÉ¢²¼»¯ÀûÓõı¾µØ¼¯Èº£¬ÔÚÊ¢¿ª2375¼àÌý¼¯ÈºÈÝÆ÷ʱ£¬Èô½«¸Ã¶Ë¿Ú¶³öÔÚ¹«ÍøÉÏÔò»áµ¼ÖÂδÊÚȨ½Ó¼û£¬¹¥»÷Õß¿ÉÀûÓø÷ì϶¹¥»÷·þÎñÆ÷ÒÔ»ñȡȨÏÞ¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_×¢Èë¹¥»÷_ìøÂ·v16.5_sql×¢Èë[CNVD-2022-42853]

°²È«ÀàÐÍ£º

×¢Èë¹¥»÷

ÊÂÎñÃèÊö£º

ìøÂ·PMS£¨ZenTaoProjectManagementSystem£©ÊÇÒ»¿îÖÐÓ×ÐÍÆóÒµÏîÄ¿ÖÎÀí¹¤¾ß£¬¼¯²úÆ·ÖÎÀí¡¢ÏîÄ¿ÖÎÀí¡¢²âÊÔÖÎÀíÓÚÒ»Éí£¬Í¬Ê±Ô̺¬ÊÂÎñÖÎÀí¡¢×éÖ¯ÖÎÀíµÈÖî¶àÖ°ÄÜ¡£ÔÚìøÂ·16.5µÄ°æ±¾ÖдæÔÚsql×¢Èë·ì϶£¬¸Ã·ì϶²úÉúÔ­ÒòÊÇδ¶ÔÊäÈëµÄaccount²ÎÊýÄÚÈÝ×÷¹ýÂËУÑ飬µ¼Ö¹¥»÷Õ߯´½Ó¶ñÒâSQLÓï¾ä£¬Í¨¹ýSQLÓï¾ä£¬ÊµÏÖÎÞÕ˺ŵǼ£¬ÉõÖÁ´Û¸ÄÊý¾Ý¿â¡¢Äõ½Ö÷ÕÅÉ豸ȨÏÞ¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_Îļþ²Ù×÷¹¥»÷_·ºÎ¢V9_uploaderOperate."font-size:13px;font-family:'Arial','sans-serif'">ÎļþÉÏ´«

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

¼ì²âµ½Ô´ipÔÚÀûÓ÷ºÎ¢V9µÄuploaderOperate."font-size:13px;font-family:'Arial','sans-serif'">õè¾¶µÄÎļþÉÏ´«·ì϶ÉÏ´«¿ÉÒÉÎļþ¡£·ºÎ¢OAÊǹúÄÚ¹«Ë¾°ä²¼µÄÒ»¿îÒÆ¶¯°ìƽÕý̨¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_Îļþ²Ù×÷¹¥»÷_·ºÎ¢OA-V9-UploadFile."font-size:13px;font-family:'Arial','sans-serif'">ÎļþÉÏ´«

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

·ºÎ¢ÊÇÓÉ·ºÎ¢ÍøÂ翪·¢µÄOAϵͳ¡£ÆäÖÐUploadFile."font-size:13px;font-family:'Arial','sans-serif'">´æÔÚ·ì϶£¬¹¥»÷Õß¿ÉÀûÓø÷ì϶ÉÏ´«webshell£¬»ñȡָ±êϵͳȨÏÞ¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

DNS_ľÂíºóÃÅ_BlueDwarf_ÏνÓ

°²È«ÀàÐÍ£º

ľÂíºóÃÅ

ÊÂÎñÃèÊö£º

¼ì²âµ½ºóÃÅÊÔͼÏνÓÔ¶³Ì·þÎñÆ÷¡£Ô´IPµØµãµÄÖ÷»ú¿ÉÄܱ»Ö²ÈëÁ˺óÃÅBlueDwarf¡£BlueDwarfÊÇÒ»¸öÖ°Äܼ«¶È׳´óµÄºóÃÅ£¬ÀûÓÃDNSºÍ̸ÓëC&C·þÎñÆ÷ͨѶ¡£ÔËÐкó£¬Äܹ»ÆëÈ«½ÚÔì±»Ö²Èë»úе¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_Îļþ²Ù×÷¹¥»÷_·ºÎ¢OA-V9-eimupload."font-size:13px;font-family:'Arial','sans-serif'">ÎļþÉÏ´«

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

·ºÎ¢ÊÇÓÉ·ºÎ¢ÍøÂ翪·¢µÄOAϵͳ¡£ÆäÖÐeimupload."font-size:13px;font-family:'Arial','sans-serif'">´æÔÚ·ì϶£¬¹¥»÷Õß¿ÉÀûÓø÷ì϶ÉÏ´«webshell£¬»ñȡָ±êϵͳȨÏÞ¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_Îļþ²Ù×÷¹¥»÷_·ºÎ¢OA-V9-eimdocupload."font-size:13px;font-family:'Arial','sans-serif'">ÎļþÉÏ´«

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

·ºÎ¢ÊÇÓÉ·ºÎ¢ÍøÂ翪·¢µÄOAϵͳ¡£ÆäÖÐeimdocupload."font-size:13px;font-family:'Arial','sans-serif'">´æÔÚ·ì϶£¬¹¥»÷Õß¿ÉÀûÓø÷ì϶ÉÏ´«webshell£¬»ñȡָ±êϵͳȨÏÞ¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_Îļþ²Ù×÷¹¥»÷_·ºÎ¢OA-V9-eimuploadformobile."font-size:13px;font-family:'Arial','sans-serif'">ÎļþÉÏ´«

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

·ºÎ¢ÊÇÓÉ·ºÎ¢ÍøÂ翪·¢µÄOAϵͳ¡£ÆäÖÐeimuploadformobile."font-size:13px;font-family:'Arial','sans-serif'">´æÔÚ·ì϶£¬¹¥»÷Õß¿ÉÀûÓø÷ì϶ÉÏ´«webshell£¬»ñȡָ±êϵͳȨÏÞ¡£

¸üй¦·ò£º

20220728

 

Åú¸ÄÊÂÎñ

 

ÊÂÎñÃû³Æ£º

HTTP_ÌáȨ¹¥»÷_Linux¿ÉÒɺÅÁîÖ´Ðй¥»÷

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

ºÅÁî×¢Èë¹¥»÷£¬ÊÇÖ¸ÕâÑùÒ»ÖÖ¹¥»÷¼¿Á©£¬ºÚ¿Íͨ¹ý°ÑϵͳºÅÁî²ÎÓëµ½webÒªÇóÒ³ÃæÍ·²¿ÐÅÏ¢ÖУ¬Ò»¸ö¶ñÒâºÚ¿ÍÒÔÀûÓÃÕâÖÖ¹¥»÷²½ÖèÀ´·¸·¨»ñÈ¡Êý¾Ý»òÕßÍøÂ硢ϵͳ×ÊÔ´¡£null

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_Îļþ²Ù×÷¹¥»÷_¿ÉÒÉ¿ÉÖ´ÐÐÎļþÉÏ´«

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

¼ì²âµ½Ô´ipÖ÷»ú´æÔÚÉÏ´«¿ÉÒÉwebshellµ½Ö÷ÕÅipÖ÷»úµÄÐÐΪ

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

TCP_¿ÉÒÉÐÐΪ_Java_Shellcode±¾µØ¹ý³Ì×¢Èë

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

¼ì²âµ½Ô´IPÖ÷»úÔÚÀûÓÃWindowsVirtualMachineÀàÖеÄenqueue²½Öè¶ÔÖ÷ÕÅÖ÷»ú½øÐÐJava±¾µØ¹ý³Ì×¢Èë¹¥»÷µÄÐÐΪ¡£¹¥»÷ÕßÄܹ»·¢Ë;«ÐÄ»ú¹ØµÄpayload£¬Ê¹ÓöñÒâÀà½øÇ°¹ý³Ì×¢ÈëÖ´ÐÐËÁÒâ´úÂë»òºÅÁî¡£Ô¶³ÌÖ´ÐÐËÁÒâ´úÂ룬»ñȡϵͳ½ÚÔìȨ¡£

¸üй¦·ò£º

20220728

 

ÊÂÎñÃû³Æ£º

HTTP_ÌáȨ¹¥»÷_ÓÃÓÑNC_ServiceDispatcherServlet_·´ÐòÁл¯ÀûÓÃ

°²È«ÀàÐÍ£º

°²È«·ì϶

ÊÂÎñÃèÊö£º

¼ì²âµ½Ô´ipÔÚÀûÓÃÓÃÓÑNCµÄaccept."font-size:13px;font-family:'Arial','sans-serif'">õè¾¶µÄÎļþÉÏ´«·ì϶ÉÏ´«¿ÉÒÉÎļþ¡£ÓÃÓÑNCÒÔ¡°È«Çò»¯¼¯ÍŹܿء¢ÐÐÒµ»¯½â¾ö¹æ»®¡¢È«³Ì»¯µç×ÓÉÌÎñ¡¢Æ½Ì¨»¯ÀûÓü¯³É¡±µÄÖÎÀíÒµÎñÀíÏë¶øÉè¼Æ£¬ÊÇÖйú´óÆóÒµ¼¯ÍÅÖÎÀíÐÅÏ¢»¯ÀûÓÃϵͳ¡£

¸üй¦·ò£º

20220728

  

ÊÂÎñÃû³Æ£º

HTTP_Acunetix11_AWVS11_Content_Web·ì϶ɨÃè2

°²È«ÀàÐÍ£º

°²È«É¨Ãè

ÊÂÎñÃèÊö£º

¼ì²âµ½Ô´IPÖ÷»úÔÚÀûÓÃAcunetix11(AWVS11)·ì϶ɨÃ蹤¾ß¶ÔÖ÷ÕÅÖ÷»ú½øÐÐWebÀûÓ÷ì϶ɨÃèµÄÐÐΪ£¬³¢ÊÔɨÃè·¢ÏÖWebÀûÓÃϵͳ·ì϶£¬Îª½øÒ»²½ÈëÇÖÖ÷ÕÅIPÖ÷»ú×ö³ï±¸¡£Acunetix11(AWVS11)ÊÇÒ»¿îÉÌÓõÄÕë¶ÔWebÀûÓõݲȫ·ì϶ɨÃèÈí¼þ¡£³¢ÊÔͨ¹ýWeb·ì϶ɨÃ裬·¢ÏÖWebÀûÓÃϵͳ·ì϶¡£

¸üй¦·ò£º

20220728