DingTalk RCE Vulnerability

News 2023-07-28 22:10:51 views: null

DingTalk RCE Vulnerability

Affected version

Version: 6.3.5

https://dtapp-pub.dingtalk.com/dingtalk-desktop/win_installer/Release/DingTalk_v6.3.5.11308701.exe

trigger method

dingtalk://dingtalkclient/page/link?url=127.0.0.1/test.html&pc_slide=true

Successfully reproduced

POC

Reference https://github.com/crazy0x70/dingtalk-RCE

Repair method

Upgrade to the latest version 6.3.25

Guess you like

Origin blog.csdn.net/god_zzZ/article/details/122962775

DingTalk RCE Vulnerability

fastjson deserialization RCE Vulnerability

RCE vulnerability of pikachu

spark unauthorized RCE vulnerability study

fastjson of RCE vulnerability reproduced record

Webmin <= 1.920 RCE vulnerability reproduction

Solr-rce vulnerability reproduction

[Vulnerability reproduction] Apache Solr RCE

SpringBoot Actuator RCE Vulnerability Summary

An RCE vulnerability exists in an ERP system

Pikachu vulnerability exercise platform experiment --RCE (V)

Solr 8.2.0 latest RCE vulnerability reproduction

CTFHUB - RCE eval execution and file inclusion vulnerability

PhpStudy2016-2018-RCE vulnerability recurrence

whitelabel error page SpEL RCE vulnerability reproduction

spring cloud SnakeYAML RCE vulnerability recurrence

JD-FreeFuck background RCE vulnerability

CVE Vulnerability Reappearance-CVE-2022-22965-Spring-RCE Vulnerability

VLC say RCE vulnerability is incorrect, it does not affect user security

RCE vulnerability bluekeep (CVE-2019-0708) use

Apache Solr Velocity template injection RCE vulnerability reproduction

CVE-2019-12409: Apache Solr RCE vulnerability alerts

ThinkPHP 5.0 version exists getshell vulnerability php_rce

Pikachu-RCE [remote code execution vulnerability command]

Pikachu-RCE (remote commands and remote code - execution vulnerability)

pikachu learn --RCE (remote command code execution vulnerability)

pikachu--RCE (Remote Command / Code Execution Vulnerability)

WeCenter v3.3.4 phar deserialized to learn RCE Vulnerability Analysis

Sangfor EDR terminal detection response platform RCE vulnerability code analysis

[Vulnerability recurrence] Vmware vcenter does not authorize any file RCE

Recommended

The number of MaxKB GitHub Stars, an open source knowledge base question and answer system based on large language models, exceeded 5,000!

Ranking

Getting the basic concepts of ROS + catkin Profile

Spring Learning (2) --- Assembling Beans in the IoC Container

js to get the src attribute of the image regularly

STM32 is based on CubeIDE and HAL library basics entry study notes: Bluetooth WIFI STM32 connects to Alibaba Cloud

Short video learning - 3, pandas simple use of pivot_table

Print directory of project configuration log, output log

Understand the difference between vi and vim in Linux in 3 minutes

1 + x certificate Web front-end development HTML5 special exercises

mangodb save and insert the difference

7-1 Family tree processing (50 points) (binary tree solution)

Daily

2024-05-13(8)

2024-05-12(28)

2024-05-11(32)

2024-05-10(34)

2024-05-09(32)

2024-05-08(18)

2024-05-07(34)

2024-05-06(6)

2024-05-05(0)

2024-05-04(18)