漏洞描述
Aria2 webui是ARIA2下载工具的web管理端，存在未授权访问。攻击者可利用此漏洞新增下载文件到定时任务目录反弹shell，实现控制主机
Aria2 webui管理端存在未授权访问
PoC代码
暂无相关漏洞推荐
- POC openwebui-default-login: Open WebUI - Default Login
- POC CVE-2023-39141: Aria2 WebUI - Path traversal
- POC spark-webui-unauth: Spark WebUI Unauthenticated
- POC nginxwebui-admin-bypass: NginxWebUI admin认证绕过（全版本通杀）
- POC nginxwebui-rce: Nginx Web UI RCE
- POC google-adk-webui-exposed: Google ADK Development UI Exposure
- POC wiren-board-webui: Wiren Board WebUI Panel - Detect
- POC spark-webui-unauth: Unauthenticated Spark WebUI
- POC tasmota-config-webui: Tasmota Configuration Exposure
- POC nginx-webui-rce: nginxWebUI ≤ 3.5.0 - Remote Command Execution
- POC nginxwebui-runcmd-rce: nginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution
- POC webui-rce: WebUI 1.5b6 - Remote Code Execution
- 安恒明御网关 /webui 命令执行漏洞