spider-flow 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adminlove520/pocWiki/blob/main/SpiderFlow%E7%88%AC%E8%99%AB%E5%B9%B3%E5%8F%B0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-0195).md
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/SpiderFlow-save-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://www.cnblogs.com/hetianlab/p/17973367
• https://blog.csdn.net/qq_45240382/article/details/140525453
• https://cn-sec.com/archives/1366553.html
• https://www.ddpoc.com/DVB-2021-3175.html
• https://github.com/gh-ost00/CVE-2024-0195-SpiderFlow
• https://www.sentinelone.com/vulnerability-database/cve-2024-0195/
• https://cn-sec.com/archives/2386467.html
• https://github.com/zan8in/afrog/issues/61
• https://vuldb.com/?id.249510
• https://nvd.nist.gov/vuln/detail/CVE-2024-0195

Related Vulnerabilities

• PoCCVE-2015-2196: WordPress Spider Calendar <=1.4.9 - SQL Injection
• PoCCVE-2018-10383: Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting
• PoCCVE-2022-0212: WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting
• PoCCVE-2024-0195: SpiderFlow Crawler Platform - Remote Code Execution
• PoCCVE-2024-6746: EasySpider 0.6.2 - Arbitrary File Read
• PoCpyspider-unauthorized-access: Pyspider Unauthorized Access
• PoCspiderflow-save-rce: SpiderFlow save 远程命令执行漏洞
• PoCspidercontrol-scada-server-info: SpiderControl SCADA Web Server - Sensitive Information Exposure
• Pyspider_WebUI未授权远程代码执行漏洞 - Step 2
• Pyspider_WebUI未授权远程代码执行漏洞 - Step 1
• SpiderFlow爬虫平台远程代码执行漏洞
• Spider-Flow爬虫平台信息泄露