2020-09-07 18:08:47 +09:00
|
|
|
[
|
2020-10-19 00:08:51 +09:00
|
|
|
{
|
|
|
|
|
"id": 305112358,
|
|
|
|
|
"name": "CVE-2019-11447",
|
|
|
|
|
"full_name": "mt-code\/CVE-2019-11447",
|
|
|
|
|
"owner": {
|
|
|
|
|
"login": "mt-code",
|
|
|
|
|
"id": 28394867,
|
2021-01-22 00:10:20 +09:00
|
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28394867?v=4",
|
2020-10-19 00:08:51 +09:00
|
|
|
"html_url": "https:\/\/github.com\/mt-code"
|
|
|
|
|
},
|
|
|
|
|
"html_url": "https:\/\/github.com\/mt-code\/CVE-2019-11447",
|
|
|
|
|
"description": "Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE.",
|
|
|
|
|
"fork": false,
|
|
|
|
|
"created_at": "2020-10-18T13:49:55Z",
|
2020-10-21 00:09:25 +09:00
|
|
|
"updated_at": "2020-10-20T10:33:42Z",
|
|
|
|
|
"pushed_at": "2020-10-20T10:33:39Z",
|
2020-10-19 00:08:51 +09:00
|
|
|
"stargazers_count": 0,
|
|
|
|
|
"watchers_count": 0,
|
|
|
|
|
"forks_count": 0,
|
2021-09-14 06:12:57 +09:00
|
|
|
"allow_forking": true,
|
2021-10-07 06:13:51 +09:00
|
|
|
"is_template": false,
|
2022-06-29 03:20:29 +09:00
|
|
|
"web_commit_signoff_required": false,
|
2021-10-07 06:13:51 +09:00
|
|
|
"topics": [],
|
2021-10-02 06:13:10 +09:00
|
|
|
"visibility": "public",
|
2020-10-19 00:08:51 +09:00
|
|
|
"forks": 0,
|
|
|
|
|
"watchers": 0,
|
|
|
|
|
"score": 0
|
2020-10-30 18:09:11 +09:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"id": 308567472,
|
|
|
|
|
"name": "CVE-2019-11447-EXP",
|
|
|
|
|
"full_name": "khuntor\/CVE-2019-11447-EXP",
|
|
|
|
|
"owner": {
|
|
|
|
|
"login": "khuntor",
|
|
|
|
|
"id": 25006917,
|
2021-01-22 00:10:20 +09:00
|
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25006917?v=4",
|
2020-10-30 18:09:11 +09:00
|
|
|
"html_url": "https:\/\/github.com\/khuntor"
|
|
|
|
|
},
|
|
|
|
|
"html_url": "https:\/\/github.com\/khuntor\/CVE-2019-11447-EXP",
|
|
|
|
|
"description": "CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability",
|
|
|
|
|
"fork": false,
|
|
|
|
|
"created_at": "2020-10-30T08:21:46Z",
|
2020-10-31 00:09:05 +09:00
|
|
|
"updated_at": "2020-10-30T09:11:06Z",
|
2020-10-30 18:09:11 +09:00
|
|
|
"pushed_at": "2020-10-30T09:03:29Z",
|
2020-10-31 00:09:05 +09:00
|
|
|
"stargazers_count": 1,
|
|
|
|
|
"watchers_count": 1,
|
2020-10-30 18:09:11 +09:00
|
|
|
"forks_count": 0,
|
2021-09-14 06:12:57 +09:00
|
|
|
"allow_forking": true,
|
2021-10-07 06:13:51 +09:00
|
|
|
"is_template": false,
|
2022-06-29 03:20:29 +09:00
|
|
|
"web_commit_signoff_required": false,
|
2021-10-07 06:13:51 +09:00
|
|
|
"topics": [],
|
2021-10-02 06:13:10 +09:00
|
|
|
"visibility": "public",
|
2020-10-30 18:09:11 +09:00
|
|
|
"forks": 0,
|
2020-10-31 00:09:05 +09:00
|
|
|
"watchers": 1,
|
2020-10-30 18:09:11 +09:00
|
|
|
"score": 0
|
2021-03-18 00:09:30 +09:00
|
|
|
},
|
2022-06-10 03:16:02 +09:00
|
|
|
{
|
|
|
|
|
"id": 344394215,
|
|
|
|
|
"name": "CVE-2019-11447-POC",
|
|
|
|
|
"full_name": "dinesh876\/CVE-2019-11447-POC",
|
|
|
|
|
"owner": {
|
|
|
|
|
"login": "dinesh876",
|
|
|
|
|
"id": 32631002,
|
|
|
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32631002?v=4",
|
|
|
|
|
"html_url": "https:\/\/github.com\/dinesh876"
|
|
|
|
|
},
|
|
|
|
|
"html_url": "https:\/\/github.com\/dinesh876\/CVE-2019-11447-POC",
|
|
|
|
|
"description": "CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept",
|
|
|
|
|
"fork": false,
|
|
|
|
|
"created_at": "2021-03-04T07:56:43Z",
|
|
|
|
|
"updated_at": "2022-06-09T14:29:16Z",
|
|
|
|
|
"pushed_at": "2021-01-15T02:51:25Z",
|
|
|
|
|
"stargazers_count": 0,
|
|
|
|
|
"watchers_count": 0,
|
|
|
|
|
"forks_count": 0,
|
|
|
|
|
"allow_forking": true,
|
|
|
|
|
"is_template": false,
|
2022-06-29 03:20:29 +09:00
|
|
|
"web_commit_signoff_required": false,
|
2022-06-10 03:16:02 +09:00
|
|
|
"topics": [],
|
|
|
|
|
"visibility": "public",
|
|
|
|
|
"forks": 0,
|
|
|
|
|
"watchers": 0,
|
|
|
|
|
"score": 0
|
|
|
|
|
},
|
2021-03-18 00:09:30 +09:00
|
|
|
{
|
|
|
|
|
"id": 348695028,
|
|
|
|
|
"name": "CVE-2019-11447_CuteNews-AvatarUploadRCE",
|
|
|
|
|
"full_name": "ColdFusionX\/CVE-2019-11447_CuteNews-AvatarUploadRCE",
|
|
|
|
|
"owner": {
|
|
|
|
|
"login": "ColdFusionX",
|
|
|
|
|
"id": 8522240,
|
|
|
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8522240?v=4",
|
|
|
|
|
"html_url": "https:\/\/github.com\/ColdFusionX"
|
|
|
|
|
},
|
|
|
|
|
"html_url": "https:\/\/github.com\/ColdFusionX\/CVE-2019-11447_CuteNews-AvatarUploadRCE",
|
2021-03-18 06:11:20 +09:00
|
|
|
"description": "Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE (Authenticated)",
|
2021-03-18 00:09:30 +09:00
|
|
|
"fork": false,
|
|
|
|
|
"created_at": "2021-03-17T12:07:12Z",
|
2022-06-19 09:18:08 +09:00
|
|
|
"updated_at": "2022-06-18T23:42:11Z",
|
2021-03-18 00:09:30 +09:00
|
|
|
"pushed_at": "2021-03-17T13:46:37Z",
|
2022-06-19 09:18:08 +09:00
|
|
|
"stargazers_count": 2,
|
|
|
|
|
"watchers_count": 2,
|
|
|
|
|
"forks_count": 2,
|
2021-09-14 06:12:57 +09:00
|
|
|
"allow_forking": true,
|
2021-10-07 06:13:51 +09:00
|
|
|
"is_template": false,
|
2022-06-29 03:20:29 +09:00
|
|
|
"web_commit_signoff_required": false,
|
2021-10-07 06:13:51 +09:00
|
|
|
"topics": [
|
|
|
|
|
"avatar",
|
|
|
|
|
"avatar-upload-rce",
|
|
|
|
|
"bypass",
|
|
|
|
|
"cutenews",
|
|
|
|
|
"php",
|
|
|
|
|
"php-reverse",
|
|
|
|
|
"rce",
|
|
|
|
|
"register",
|
|
|
|
|
"remote-code-execution"
|
|
|
|
|
],
|
2021-10-02 06:13:10 +09:00
|
|
|
"visibility": "public",
|
2022-06-19 09:18:08 +09:00
|
|
|
"forks": 2,
|
|
|
|
|
"watchers": 2,
|
2021-03-18 00:09:30 +09:00
|
|
|
"score": 0
|
2021-03-19 00:09:27 +09:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"id": 349011894,
|
|
|
|
|
"name": "cve-2019-11447",
|
|
|
|
|
"full_name": "thewhiteh4t\/cve-2019-11447",
|
|
|
|
|
"owner": {
|
|
|
|
|
"login": "thewhiteh4t",
|
|
|
|
|
"id": 36354846,
|
|
|
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36354846?v=4",
|
|
|
|
|
"html_url": "https:\/\/github.com\/thewhiteh4t"
|
|
|
|
|
},
|
|
|
|
|
"html_url": "https:\/\/github.com\/thewhiteh4t\/cve-2019-11447",
|
|
|
|
|
"description": "CutePHP Cute News 2.1.2 RCE PoC",
|
|
|
|
|
"fork": false,
|
|
|
|
|
"created_at": "2021-03-18T09:24:29Z",
|
2022-06-01 21:20:01 +09:00
|
|
|
"updated_at": "2022-06-01T11:24:03Z",
|
2021-03-19 00:09:27 +09:00
|
|
|
"pushed_at": "2021-03-18T09:45:04Z",
|
2022-06-01 21:20:01 +09:00
|
|
|
"stargazers_count": 5,
|
|
|
|
|
"watchers_count": 5,
|
2022-02-25 21:14:31 +09:00
|
|
|
"forks_count": 3,
|
2021-09-14 06:12:57 +09:00
|
|
|
"allow_forking": true,
|
2021-10-07 06:13:51 +09:00
|
|
|
"is_template": false,
|
2022-06-29 03:20:29 +09:00
|
|
|
"web_commit_signoff_required": false,
|
2021-10-07 06:13:51 +09:00
|
|
|
"topics": [
|
|
|
|
|
"cutenews",
|
|
|
|
|
"cutephp",
|
|
|
|
|
"cve-2019-11447",
|
|
|
|
|
"exploit",
|
|
|
|
|
"python",
|
|
|
|
|
"rce"
|
|
|
|
|
],
|
2021-10-02 06:13:10 +09:00
|
|
|
"visibility": "public",
|
2022-02-25 21:14:31 +09:00
|
|
|
"forks": 3,
|
2022-06-01 21:20:01 +09:00
|
|
|
"watchers": 5,
|
2021-03-19 00:09:27 +09:00
|
|
|
"score": 0
|
2022-04-14 15:17:49 +09:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"id": 481430471,
|
|
|
|
|
"name": "CVE-2019-11447",
|
|
|
|
|
"full_name": "0xkasra\/CVE-2019-11447",
|
|
|
|
|
"owner": {
|
|
|
|
|
"login": "0xkasra",
|
|
|
|
|
"id": 51972282,
|
|
|
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51972282?v=4",
|
|
|
|
|
"html_url": "https:\/\/github.com\/0xkasra"
|
|
|
|
|
},
|
|
|
|
|
"html_url": "https:\/\/github.com\/0xkasra\/CVE-2019-11447",
|
|
|
|
|
"description": null,
|
|
|
|
|
"fork": false,
|
|
|
|
|
"created_at": "2022-04-14T01:45:04Z",
|
|
|
|
|
"updated_at": "2022-04-14T01:56:44Z",
|
|
|
|
|
"pushed_at": "2022-04-14T02:52:39Z",
|
|
|
|
|
"stargazers_count": 0,
|
|
|
|
|
"watchers_count": 0,
|
|
|
|
|
"forks_count": 0,
|
|
|
|
|
"allow_forking": true,
|
|
|
|
|
"is_template": false,
|
2022-06-29 03:20:29 +09:00
|
|
|
"web_commit_signoff_required": false,
|
2022-04-14 15:17:49 +09:00
|
|
|
"topics": [],
|
|
|
|
|
"visibility": "public",
|
|
|
|
|
"forks": 0,
|
|
|
|
|
"watchers": 0,
|
|
|
|
|
"score": 0
|
2020-09-07 18:08:47 +09:00
|
|
|
}
|
|
|
|
|
]
|
