随波逐流信息安全网 www.1o1o.xyz

   [随波逐流]CTF Flags

软件版本:v1.0.0   数据版本: v20260526
序号 Website Type Title Value Writeup Competition Id
1 vulfocus WEB nagiosxi SQL注入 (CVE-2018-10737) NagiosXI <= 5.4.12 存在 SQL 注入漏洞(CVE-2018-10737),攻击者可通过 admin/logbook.php 的 txtSearch 参数执行任意 SQL 命令。受影响版本为 5.2.x 和 5.4.x(<5.4.13),修复方法为升级至 5.4.13 或以上版本。漏洞 PoC 示例为: POST /nagiosql/admin/logbook.php txtSearch=-1%' and (select 1 from(select count(*),concat((select (select (select concat(0x7e,version(),0x7e))) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)# 验证后的网址为:https://www.seebug.org/vuldb/ssvid-97267 https://www.seebug.org/vuldb/ssvid-97267 - 16622
2 xuenixiang.com - 在线编程IDE - https://www.xuenixiang.com/forum.php?... environment_VIP专属在线工具_Web 15385
3 BUUCTF Pwn cscctf_2019_qual_babystack 无 https://blog.csdn.net/weixin_38419913... - 8249
4 BUUCTF Reverse [2022DASCTF Apr X FATE 防疫挑战赛]FakePica NocTuRne https://www.cnblogs.com/wgf4242/p/161... 2022DASCTF Apr X FATE 防疫挑战赛 5807
5 CTFHUB Pwn HackNote 无 https://blog.csdn.net/qq_43189757/art... 湖湘杯 10271
6 ctfshow MISC 杂项签到 ctfshow{a62b0b55682d81f7f652b26147c49040} https://www.cnblogs.com/sakura--tears... - 2948
7 ctfshow PWN入门.格式化字符串 pwn95 无 https://blog.csdn.net/KaliLinux_V/art... 格式化字符串 4948
8 NSSCTF RSA [LitCTF 2024]Polynomial_plus LitCTF{Th1s_i5_a_trick_for_s0lving_polynomi4l} https://blog.csdn.net/weixin_52640415... LitCTF 11710
9 NSSCTF 栈 [SWPUCTF 2022 新生赛]InfoPrinter NSSCTF{4b1027a5-f02f-4950-968a-3be2841bda70} https://www.cnblogs.com/GGbomb/p/1779... SWPUCTF 11283
10 封神台 MISC 杂项11:这是我最喜欢的女明星 - https://bbs.zkaq.cn/t/5477.html#%E6%9... - 14810