尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | QVD-2024-26473 && CVE-2021-29442 | https://github.com/VictorShem/QVD-2024-26473 | POC详情 |
| 2 | Nacos Derby命令执行漏洞利用脚本 | https://github.com/XiaomingX/cve-2021-29442-Nacos-Derby-rce-exp | POC详情 |
| 3 | Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql). | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29442.yaml | POC详情 |
| 4 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%91%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E/Nacos%20%E6%9C%AA%E6%8E%88%E6%9D%83%E6%8E%A5%E5%8F%A3%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2021-29442.md | POC详情 |
| 5 | https://github.com/vulhub/vulhub/blob/master/nacos/CVE-2021-29442/README.md | POC详情 | |
| 6 | Nacos Derby命令执行漏洞利用脚本 | https://github.com/nanaao/cve-2021-29442-Nacos-Derby-rce-exp | POC详情 |
未找到公开 POC。
登录以生成 AI POC暂无评论