Low Severity
CVE-2024-53704
Published: Jul 16, 2025
# Vulnerability collection
Collected and organized vulnerability EXP/POC, most of them sourced from the internet. Over 1,400 POC/EXP have been gathered so far; use CTRL+F to search.
# 2025.02.21 newly added
- [MasterSAM downloadService interface arbitrary file read](./MasterSAM/downloadService-file-read.md)
- [Jinher OA C6 system IncentivePlanFulfillAppprove.aspx SQL injection](./Jinher-OA/IncentivePlanFulfillAppprove-sqli.md)
- [Elber Wayber analog/digital audio password reset vulnerability](./wayber/Elber-Wayber-password-reset.md)
- [SonicOS SSLVPN authentication bypass (CVE-2024-53704)](./SonicWall/SonicOS-SSLVPN-auth-bypass-CVE-2024-53704.md)
- [Parking-lot admin system GetVideo SQL injection](./Parking-System/GetVideo-sqli.md)
- [Jinpan mobile library system upload arbitrary file upload](./Jinpan/upload-arbitrary-file-upload.md)
- [Jinpan mobile library system download.jsp arbitrary file read](./Jinpan/download-jsp-file-read.md)
- [Huace monitoring and early-warning system FileDownLoad.ashx arbitrary file read](./Huace/FileDownLoad-file-read.md)
- [NUUO camera handle_config.php remote code execution](./NUUO/handle_config-rce.md)
- [NUUO camera handle_site_config remote code execution](./NUUO/handle_site_config-rce.md)
- [NUUO camera debugging_center_utils remote code execution](./NUUO/debugging_center_utils-rce.md)
- [JEEWMS cgFormBuildController.do SQL injection](./JEEWMS/cgFormBuildController-sqli.md)
- [JEEWMS dynamicDataSourceController.do JDBC deserialization](./JEEWMS/dynamicDataSourceController-jdbc-deser.md)
- [JEEWMS commonController.do arbitrary file upload](./JEEWMS/commonController-file-upload.md)
- [JEEWMS cgReportController.do SQL injection](./JEEWMS/cgReportController-sqli.md)
- [JEEWMS graphReportController.do SQL injection](./JEEWMS/graphReportController-sqli.md)
- [Electronic document security management system V6.0 backup interface arbitrary file download](./EDSMS/backup-file-download.md)
- [Hotel smart-marketing IPTV system userlogin.php SQL injection](./IPTV-System/userlogin-sqli.md)
## 2025.02.06 newly added
- [WordPress plugin WP-Guru arbitrary file read (CVE-2024-12849)](./WordPress/WP-Guru-file-read-CVE-2024-12849.md)
- [WordPress plugin radio SSRF (CVE-2024-54385)](./WordPress/radio-SSRF-CVE-2024-54385.md)
- [WordPress plugin Icegram Express unauthenticated SQL injection (CVE-2024-4295)](./Wo...