From c597f4997ad1568f2a18f3b5d1a3bea7a4af394f Mon Sep 17 00:00:00 2001 From: himazawa <73994521+himazawa@users.noreply.github.com> Date: Sat, 10 Aug 2024 12:27:11 +0200 Subject: [PATCH] chore: fixed poc link --- content/posts/zimaos-casaos-rce/image.png | Bin 0 -> 20967 bytes content/posts/zimaos-casaos-rce/index.en.md | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 content/posts/zimaos-casaos-rce/image.png diff --git a/content/posts/zimaos-casaos-rce/image.png b/content/posts/zimaos-casaos-rce/image.png new file mode 100644 index 0000000000000000000000000000000000000000..b27201f93de73df20882debe85d4b8a4983f43a6 GIT binary patch literal 20967 zcmagFby!s0+cr!IgVYexohmIz3_X-ci_+2^g3>K8Fd!{TcPkA;N)Cw9-AadaN!PcB z`~JP(b3D)c9Pb~>z|8Eu)?RB}=Xssid4+4JDH7bLzK@26MxgXe?gbheh79of6od`@ zPYrs%4g5fNd7%hJD;uEQ0Di%;mQe*hQ5l1GWqJ?z9oPApo(mcpVF&6T`VXff3p6xM zUnM!2m!3vD%>*T6uTpM}r8Ga8zJHa>SoAO`nz`|QSgt*#a7kmwCYWWD9h)f{S0>8A zf)tJwE@n2QB<)IUR>jQwEj$c2qAFKG4;B`EKd7nX?W<43Fgkf0f?zSqo7-#glTnv9 z!@u1&=NeDl=WqN!KKIbcggCivrmc&we>u8pWw_ag-x@Q+z);Yzh3nQ_^W}B^9@JIz z&9|Lei(mC`yFcp~B{yAc7Ux$p_cx!;rKWjre(8>;6MJqQ&CVWKq?$X)G&tHXJfD{4 zv)j=9gCQX8>L4b7>zYN*{GG~%))-a5WnDn(FSp6p`Nqt=QWwK9A1!+m*y`rIi*cpB zyq3Z_QWR_&HwsceW?pYwcM}Dib&MqEhU2o>jlSC4N8<6Sbj2`aa_Lod_OQyakk-(4 zz29GExE1j_nYNBUKU$v^wGtE`B9i#4akv!0JJXOOjds@Cdeytqu%4kj=d;&5GHrHn zrJgA%;k6tk{M@<~ewg7pqSPHFJf{m8J-AvEZdLN%4`x6pUw5@hoUQT(=v}x8W(M4N zm0e`FC`QxTB5|88cfWOys!P2tyR_SAzP-8ZUg?fkZe2PMx&#KuN+fmVyx}13@0Wn~ zU{qTyN1`qy>BNX=P%d|L+D+F&jJ53BUdwEYda6(<&uk5te`N&gwf9DTzS9mK(PNAr zD(f^&h?e-)WO>~nF^j@fVFzRX!s)Og!{-54LXZsTeyWh;(DRR5!)!VPw=GL8RDIW8qe3I z26bhwYc^)cu$eJgI`V14$nKCiBend(?Gbv=@>B2!! z@ky>2+~FcQUbv{S-|=Sxv(E_~NjuKbR5*O^bNNm9f{zBoc=hU?v;7KX&lZA-9BTI_ zebUCC@v6qsKb{8m6KBKi&DF{8m2@1>?WxLqf$;CLkfM^;Xzi4-z6}!?1RZIjE*1-u|Ft=euw+KFs#*2qmb#rA5|zryb@c!bU8yCl(t*uQXx|>fSiUG3-)c zbj{S*JMLuc+31q<8u^Zm7(cDok-9w}R6Qc)`H`JH(;5))#1sh|Np>h=*sZR^+^@Pg z->%KO&SL{+D+S+HLy?DIc27AjTh@20*9LwI0s4> zCp-4(y|s?B+fsx}1XL23sf>i;K6LJCgAQ2S&^rp%~$2I<^70NE;8fsv{`t96(*gZ9c(ynZ>L zjBo6F5Hemji5GjanrNKSbamJ()YkRHc7&BPW}WCw{UWx#RHr&bHWdF+-6KiSXM1PM zF}#!NTw{Z`SA(~RXS}>)OvlEhgyu7L4n8NBPfgm;l(*v5B`dudB?LeIiby(H?v$kH z^jb@{o-uh&{ke#oy*TRpTHJF#>$>1~+sV#se6}oHU###-&kv(>OdX$pP_3`}>L*K# z?hJ^_sr9;c)qa1WU1=~wBF5V&yT%QaK3u*Q*z_U*WZB6km;2UXL*RY_ds1ZA-iHUA4hr&=Qc17(o%vn9j)%uHEZOgL{80H=2lot9f>S;4 zx<9$IQ8ZHR*fZ$HMesr!B0MM{0L{#95JLZhFl`UI_sUwu^xD(cwkwj#JX64WfD3-? z`ZGYc^=Pf1^HyPNRbX=BP$%G6=cK`^pZYQ~q&?^=PCen9n)rd7*n1fg$_m`|bOB5} z$0+Xtd@rlyzM=@`k`6@%KZH00_KuB(1Nk73k5EonW-UD9ssAq}|M z*VYVaQNzD0JVOnO8I-*2gVkzqw%3^c+K^<*)4uKmA8lJm^sdCH&)C^isAq5vPe8UK z{ht#3(qf`c{#E`nSMnr~5vGEf>tn;`Z6{i^z?*t)~`s14oME(=1C1p`*j*YKYRtA02)`J<2 z#ROuHV8@tJLjKlD(>c$7Dd(G`wCYPTJ%-M0jI~~$7?8TR;n?l69EWg|Ife%QvL4S> zjHw;e)t{w*Oq@{DEOxc8_txMc0x!1i+CqY2`#7kg-fsNs9f*xi2qhG%7rm0=U-5F! z8mZpqeR1ZdR^t~iqYqCXFYgNKQV&yLuLE~>^qKq-I2W%dh`#QhYxXH6Rq|ksw#R{B zj2*c~yRxpQxkMAtZV1RZ?qeWK=1~+=F^*M|xoR%u#dE#*+Qf<}EX6yho_;VtAtwU`nYlcL8o|4Sg{89*U zi18l}(GYBa3Nkl@Fw$FL*ZieHr(9-IdFkU5DH9zSJ}nW*L}|lcGV30*MfD zrkQv{AsIp;ftv()N0$c(uV_o}*1d*@ng!yxC$5|L!;?r>3R@J0kAJPPexVQvq7~Q8 z3k=L@O^9kEk#u-N@xB0CRo0$Sa)j9!KMj~6KL*Eb)0_SmS&7ApG4vA~L%2+gp4J}< zg6B5~x^-jLsd@2^gN7csGtSut{rKS~O-0=FM`MF5;JDa0nV*@Cx^-iry|lZi z)Uujj&~w80iO!cZ2na{OUIShIQbZ_^hvANDAO6MFDE3d&w;c3#H_Nb;#2xg4c_loP z@J(UftPr>u*EK|AF@_30Zg?uAVXLvkg!GIVfDa_2M+MihzaPMSB}r5;XrZ@jvJoUB zME3QM$W&NF9owHU@iIYIY4NerN_mh>{Xx5EGgk0I`v`@=6Nt$mo|7wDI#cVlH&J{o zf7a;zUML+ghuc~ORsQYX!MW22I^<=fdEk+2tSfZtH-e%pZgEbVWy>g52c`nce56&7 zghqwLPnh(!Wq{?EHTi$VH5$+2{;0DV>7%2>sX@l?__S7H^knEE7<-4}bQ)(Km@}{o zB%L)Uff;LId0k)u2TQHA%34CKaW5LISm_$&b6h^D%(zmU{4`j50uAh|#in2$Z34nfq#JOZd zU)K;0KRXc5_Jg*?qp?!c*#^P>SWwH14kwQpT*GR8-lTqi!K>`Z)qu-HjRU+1X2teEL}@ZP zv#$u5bFzRnvuYCMzDd{h9zNwnpKDt+Bv9)Urnxp=9OE)dtRI_n(w8Pt|`^J)6p1Ev=h_JpcCjLFiebYO1z>Zg+?H&DpXy zn-OT(72vq}uWolj_B!>ut6i*vq}vxdPmW5n1$xFO#3N3AaFA^uMu5NbbRj+i za{K_fC_(c#o#MhYp45tzrY?$zXEvXP8gst1-;y!1w)Z6qaO0a!-=jhAx|d(Vhd^IS zm-K7QUo;gl?nW;HLtWi~>p^TGV{ezcJ`d0m2x!(uSU(Cf|Nh~DP_LVF-o|ZqHY3-h z2y9hquWzGBLR^u$j4dOFz)1EPOP_4MFPfKet%F{K^QZaSWe=4GzS>pDZHy%s!^(R$ z@ew9kOAh>X=%OI|Apb!u&xQ}J?`hRah$S^I#YRnmp*-oR{|7tsnkAX3=@vhqjmgvc zAA2&v*wY+hBu7^vy+ti}Ct<`a+XC$P3bPxp{eKUB0`>z7tH?c{SOsEj6DLu_SpLs{HBis(Y;FD zfvocNXG3Ug>jlmIr_p%mB4g&Y5nug~FkGSK)2*cJcNv(AKX62_<=UJRZ{2r)*|rj6 zhy%}fNxmkNUL}IHuX>%6Ac&#D(Lc$U*TbQK&&JXgLwzW%kY2B)2!Su^G$)QHE5XbM z?h5a&*5aneegOkxD;gIpRzHoT66lijOAcKXU1IY`1T)q2yb|Q!DJ&Aw=AsXh*o}?10;wlWFQ_<<&c{g&d|#gtV%y2W#2rU=-MiO?(SliXbKbdaEK7^VonX z)8qS==Ie{M_UrOdT54FYn!U3ZYESjx# ztiJWt!}tFC$JB|Oq&8)UgtSYhB16#jBe&bPHXazbU+xW)&G^?>>{vBcUhgf_E6sn* zbh+UNjU&hwx9f=8tikl34@#P>2k8Z#$oGawlaXlgVDk#1Z^$}%xV;8P4n>=`Z9BP` zaz&Z!#DiJ{^rWA$azXKw9rh1?Fw9!3P~xD6)eWBP&1e2{8I;HeV#%=K3VD#PP--m! zav(U_;i;_lHtCQnmr+xFlcBcb$wsyDUYos)w~ac4W)pT;5!vyMT%WdwWpb;;}egnDB2`#=2KSnpW%x2Uz9l6-)Z`MQ5CHeE*ug>pp4b_$C zeseGN>w+;ECHxxFADIKchcr6kG6Au;)aP_JxxCq=7^7IHymrw4`r>n9r;*RjQ<`5y zv?8&F{^zR&15&5ITpUGLf%K=s-q>sP^Gf}4v~pSV$xI$90rHslOT=f86mI~6Pkedn z4P;}yIPrUTfupn`j1J;jgnQ3*rPFQYXB;Y>A;+%pGg%gf_-FF32R0q=%ubH5-|RE0 ze~J(+Yq_u!`_V=hddi3YSm(9dE78nO<#R#?Ne5&`{HroqIN>zsFsxxA2(QQO*)Pzm z1uumpSCFi)KM(t$-huDIcM2gJmcNF;3-?yN6!V6BfSq!e^{0gDeavbE z%Pq|C?m>2b;w0ia(ojoyTueObZ#Fv>%OuOyIzCeJfC$>l>wkb(JP)8MYhl{E55M<} zZ!aeE!Sk|LMsOG#4>AP#LYorCfXsS2Q)Lxn z9ysf@RhoUjpXvn>`SAC4NCTW;Pm4Uv^r&#npwD0-m?Tl3n|7xEze4a-R_xZ5R6-?E zCi;Je;C#}5Aeg@*_vwzH;Tzwhe&HQbIHFSUop?(~hxGt&@M?}fjR<@{b zG97yR#}NHhGkpD7$Fb|?w$(4A?U|b5v=#u=LVxfqz|L3SPrYM$xNuG*qAu}b-erBD z#)XhtG=Y7x)WG_!>15{!j5OZ*=LhSF6200q8QM;H33KI-6g{g4Br#%PY&WqbSDn&6 zZAy>L}MvkZ$>fiWw7R0f$@;bdzp*Mr}$ zyIN%xwQ{H=nF#o|M(eSxi-P@q-{f;u%uhr)7lk z41JdsdF9<;-WwA4sP~@d)Vlcb&yUc2%b#9HYkHKM#DRf)YAPA&b_aa*OfWu^^AX(4 zQq#U9{*w)54z59B-h*5^{4cM{bScwpa}nKJ<*hBQLQ+xG>ZR+*Ejn%*B;H^lo;(f_ zJwhGWDozdHP+OfceiCTd0QmCZN~FEq^&N1cu&Gww}S*lvVn>)-m;Zz1IvJubpwl*r}c( z*qt!$_l^+;PFMZ^ff)D09T2kv@KhsHk&?ii7AJ%uLYfZft5vQWBNl-6V|5mufEW0X zwZIVnVc)>0Vs+E+ac!^y@mJ!4ArbzCDse1^fU8QsuAx`UGJH$k_(`JRDgFd@|I7;D z#B)f2q?`O|fjO^a`0PGPe*ioijymv)Kp(;p>`vduQ%qH5Ch)$%{9x((>gp57!1J@n zF|l#|So)dxflx@cIM;GTS_nD(F!VU?6^~W7%^28|G8UPeTl0GAfefU))T_F1WF(Qd z-4i0exWlK?TjzdyVxjQaY~%y3Y!g>QHdDSM3!0m&7&$adA5}Z> zSu1`u^|fttym+VDxYd7^t#Z=Hryu(i6NivB(b&J?%haI6siA>d!_o)N?HL^-FE&v? z>iYe_+DNNynbaqhmbk4VQqVHIz zn|0=uca(|KCOJxQmYj4zuq!Vg!-zh={^Pkwqk z9m_++?-kv?qgWqmuh#{HUGt53PhFl)8`?0OcI;g1C0^>ySj1Jo9O5m0pAEz4m>sb8 z^b6itT4jph=Rb(!wN)sc>hk21_J58NhJbUL!``Jb!8#6cF)5*GC`|nMUqE*c_yZFv z4VHUV!7a0oo^YkRW^Nm72~Ma7FfvR*0UBF$AA5ev3GGB>Dy3ps;DqrGXIcI?oXuI~ zGyUd8MD>I@;o@#T30prkOYB-2P35PghfZ(D&~;AB)8ua3 z@n}OxX9(#Jr_)FRqv$F)y=K<+s6^jcoU49wy<8F(6ZfI{TO|eLy$!!qI@fTX#lLQp z*lu*&(%*iQ@p+x{aHWu(|G<;3O4L5dI!zGn7KUlPIXO#8Bfi!@Ie#->{XMkYcI2Q! z0OF>Sah(yGs?_!CH0j;g@nXGe{{Fnm9_v7-H!iVOT}k*p0wrQe{+;MtG2%FZA6gC1!i|J79q3T zU(&6z2(M`ez+Ip6#MDfn2dL>(lPS~kpQB@`){3@`-xI5ke7BBQ*o+2A*)@oMTTeFg~oGDCSPd;>!?hsfN5!YT`Y(3H5od zXSVC3((u9VKZB)kC70AH$4bW}lA^=IAz}`$?7-Z)IMhhA$i)Vij zB|n71JGq2QZJ*&u7u7t9Sf^5SW_iEKWr)WtJDo3S93$|}<;hOI@%(bM zEDiy+MJA#ZVG=mO;x}I%)=gx|raq3v=$vW3@wb6@!*_z2U5dZ6Q#OguX@!m(f3Qvf zC|g|0rGAumn1_l)3vQRF1t_)9PLeHBQvH_+0~&&7n4U)&79Bb!50O+bel@E{*|Q&8 z&Ka2F-038fo*dBi&Hz{Xw&2}60f7$kjcWaSVmP$??`IQf`BH+F_Vm;$b_Qf$OgrDr(4g z&@|G(61g{B{bTd}e1?%jhOK~SVc|8OIme!_^+vwUeic1QHLWb&%Wu4nflZ7We|LX> z<9c{VC7H`bEU+P?C4bH0ynHNGE_^%iz80$IX$8i57$M-iAblCBcM`Q>;JM~WE^3(M zUQcfNu~vz0q)TrkNdL5T#;^QU*>i->C2>x1oHFQLl+sy+SeX~dQB)Vhq-$rAzj#p` zhYn7pjsK#p@6$hu#6}iM^;wda$fRF5T&O;@Gl|6oiYEy1{REP9JWM}*d%imvVj7GM zCL9^NA56@KN%q(QsS!h&OWO66PVbo30KV9~Ut#-!$LA>}*+UAPU~Ks9nseaOK2A)0 zTTPsm?$L;TfrI)jBJ4uS9clZ0#Bek}<-1J7hY+B+)DXKSZDHZw1)&3{B6Hh70z@fy|-^#s+j{w}*b-E*2Lq1<^{+Oi7N z=iH6Ggc>rr3NbfAsg-6P`mworULQ{;4rmw7_zgbRNjU)yuItlxd!#Vz!V#6O@mAX! zhoX1u?Va>N=z$$#l#s#+s5gJQ{?jU}Reb7CoGaeG`^x4k7W_^-&7uws5y2oxWe-wF}}iVJlyWXa}QrhJ-)I z5DEU1rxdS3x*QMBF=hPzGuc})%#|R#E`6oYvS+CbakwrRW(|y33?ifL6E;>I+IU zm|8(-pU~TJ+PTT*e3L(8>O#Ke{Vu~+HpuS68FBl0ZTSw4)^W`tH8<&db@1b4qjT=` z`Re_Rq7xQ59cF;gRp$bPu9iYPX=9*0ds%w4J+eFT?brU7zM-@%StvHwG$fkMFP&99 zj!we9`rmt z+shccbCgyRL-J(A?a!d?6rltGMN*j9pr6MG=}^-F+3P{5;FICA9?!`p7GB57>z5bsdEN;OkCW#p*Y_%Xj-a_cqJ!2j94`*$Vpcq-XMRg(-cBacj%> zCtxIAue^3x!ub~9Bdo=fNWSw(pjTpv==;#If;A-J&6NBGj zZ*#4!;<&`T>2kCcona;3?p2$yjYrX7rog6bJDkmUAN`lpN3n103EgC8GIV%-yaj%i zi2KlKX=A+=r1dTATRf*kLh_n2*gacpPPqiUS^@>H{V{@wy;fR|Xkll~&UQ8D0PZv& z+}arADnwQBIZ*d_wHA(1&CKxOryhnJ|DL!Kag2idgRZUzObuTY7}4JM+fV8YHmG=^)|HSvsrCFC1mDZNmffoe<0I0$`sRyM>%+y zfWOa>LX9jGHs!?F`+F6|K1k%{QnfkV{Z-Z~-+utd`c@TwpHA!((dPI)FGU0rca zv_v+G?sAXM_)5XX63t>hNdpa|wH0=-b-nMiIA(Xme=gJJVw!k_Aef;UM0dn4;ymne z0f%P)4hh0TJe5*2SZ<$q>`Pyy)iXVFX~ZdI1pmDGV=LA=+5L~x8|M1Fkolxbdabe? z;OzB>`NDAl;Uwpg?PvBo2_3U3J6`532U)1oG#%A!t?;e0w?n;=yEyFV^Q)9 ztVrj{Q<4!wNaYz~h5^C@ zi^$REg0h}}-G6lmFJKMPg$$%T?Hv%k`Vq+CHqyChHk)Ht@=||^5WGV+gm-xWgtWJFYmJe9torGwX}^G?co5#-!ew;`w@eqhxnb=~|@ zn6i&Kg-$>(E^>Z#G`Qoz#g*S)?tjeb(-A4$ie!6&#nk2w3Ixg83Cia6k{D*Z&h#>m z6cjNWI-IvW7SHKR95zl6`I*xkJD?>p$+>7vS%m{HVBjb@ zo(>z-eZtCuVE@+XNdAW)_^(p<-#;*x5AKW}*xsgXoV?pj4?i}N1x*bnr>Fm}Zn|5j zVH;5u)NNFiKFvnz82gP&zD@cdJ1VwY-{A{CcRFQ_>Cn3JTU_6Y3Ai$^a@(4)7)TT4 zrY)Vg-$6o2on>bTsNMNacO!MoH30PMJzl@^=dJ$N9|0AS70AU^Zq#j_x16t~u5=Jd zsSHTn`nsq!zFU1x`UV^gc9fwBM%ysC4Y zwX%KdFjdjMgj#Nx4d*c7%h$?B|9asn(tQ9|p9%;nyF6d0l594&&~bZhs6x4qp!fch zz4D#H7~yg^I{A;Y?01Y zC=7#wRs1);0(?<%j%K%1;ELCegB^`;r%3p5sNYM6Y={6#HgA;y9GeqEu#nk z_gTl>1+-|wTQ%>y~{=*szerh10g8Wmp0VLvhiZ%3@9 zRT41Wt%Oh*Ju~t>kQZC87!v??z{=lIb>4KPkAqUT;tdB~G|H`Z@P@6jZ(Ky9h3e`T ze>dW<4ij4uuJrzAixxmxb#2P+aHYFD#{X}w#SFr>TiySV^c%fF7EmZjPFU^XEJwKT z*AozL3<6=LVL4ii%lPIJaB5cEzQtC)d6szS^tOTwF`z8fuBQEKax9v3|- z-jK;6*u&6ov*GlQ?cGrh-IWOgC)EtUlWB{at8;fAtZYy}KC=7zG=SGy;^I%P(4XAz zZwa2Kl<+0KcGr6XIPok1BUm>I07NhmQh6cTHh`|3AcO&4ryGdlMLect%$5HdYMiQs5} zF;3P>7o{(XcOj={vKnNZ&6B^P=_-tOHEO4V`jD03~JJ>@u zABGOmQgXmpUr*j&#U?sCF&GydHFct54`aH=-6|>bq%y*yVk9qq4n$Eu?U^I#$hhYz z5E)1>y9mUCRQ{(~rFwO5(x(Yb_eOFRiF}mtz!p4B`_Rj1a$GZHEW=1BE-8D`bswNF z+SxJ*2CgTwm7rX6ScD1vzt|sQ!^F1Z>l5nvv~M_IGN}!QoX=-Q}n$%=? z6Hi8p{c|2D;%r|UI5od2!-@P-Jgtc$Rm@VuPVj@S5g-lv*vs4cOYkvZw`OptP-t7+ zsW6Wg?Seg+1Bo5=3B&_(?X;1p;(JP<7-}0H1{eP3nHzzb4b$1+e+Nv$L$tJnFE8dd zk<*t-hwmPQH>Y)#bG}Eaq=sO@Fl!(TcJKM0ie1uQx=#@Z|1weN`9!BCwu5+QSXPPd z5LIE$Y@7!N*V~R3thD1WAdV_c-|qqWs(L6s)r$c!oLY4w|GPCxH%wvNd4<9N0BYSM z$${{Os5cX;xe0A;E9uVuLxN#IWVzuVh}F%=t3{{3>-Z3Rh=w!FWz48MSJ zaH2f`+7Tu$hbL3-V`9BF4|u`3u``B#%QwF}{q4cA{3FI`@kCaT2O(rv*Hz=|kIYI?Y&yndl=mH*ahI2F?VtooYs%Nq~RA^gG@uA0r{=Gki z{lCdA2TO@wO?4-x0OPEUJ^vuC&zP2*b1t+0CG^{bw1(LRZZ__E*4f5kd(Se4uSJ74 z?yYgOnBwbi?vCT0&QBnYGl;5nPY;J4uIbl46|S)ZPBS}-nzr9H9&uwIu4e{FqWr8} zDk|52r4KMc3k+TmVq}QLgy@@A#4w{mxbW?pG13jjUuC+Lcfe^N;=fA087S`fyKx*5 z#G_F~d+!Qm9}x{_Q@vG{DAL&^L{C|`ConqoT9wzYBuJZIOw6Pj5mPUcydP^r`Io4*eUvcu$KPr7oTblhSuBbJx7gJ057<= zIm??~ocIoAMN(V>r2_*W6TL3F@e{zmyy>yf7TA4@JJt=j?ae2bA5LuXzlOv54d9>} z5d_=3;Vf{fi`D&I80$6R@~fhNFllxe|DZsp+=#rc&OGBgpxWr^)6xhzRCogWb%kYy zFJ(X|6d?GY6MHFLWmP+YfNOnwe(QR*KphmzM-TCf!I23>4@G~Vie~!Q77K|0+%kF) zgXG$R&v1@R-;o5cD1ZWbqo63j_i_{Qg#nAat+)lg3UV~7LINJ`Hpv4Eb*kZK$3S=< zKu_V>_w7#;9WAp~ifhbL`z4ZiWYlV?*z$;GvFJz6=FpC*NLYMFfJ=S43b9u-8+%65 zl|_gQDP=)OMURsdDt1QOFonrH#KwNNUOgzu>32zw&4VE0vUa}1061m^Y1eY_6M$?X zB}aq$QOzRrhof<}A<70kpR$MplP*jrV!BLDwx>@%hy?Sbz+y}IT2usVh8Rb&O7*I{ z5VAKXX|1-aNM&6qBZ|+FF4qw0A=Bi7B8Wu=ha}-)CmY5_BO(8}_8>y0w}$ zJ17;V-!MW^zsxaELoB|~pD$rmD#4hqz|sq5-yxA&g>+W;>b=j6b(+M+Z|v@(N^E*I zpXi7tM!VnGox`$6K^C{p9Nw+&km08Uv4SG~6sjKrw}k+7^?mz3;9h^zl`_Sf<}x5^ z71_fmY4H;*kmTO+XK3g%-&CP9q3kM9FPqrb0BU64EY9{9Yr~nkzES#{Sx}P_b(OpB zfEtHz3F?-)U!j@=g zcAx?O<+K?ja|r;|V;WAMYkHsU%G#?{g&qwHI>-v$uL_a8F!3K?8g*@dvyS(5aVUp8 z&GBVKJ4(=1&TetKY>I-LeD<#fYG9q2;Z?X$0qMdI!+gCQZz4a?;ns5SXE~a9h1wg6 zwQnuqQ}^k5S&Ai430Nf&U}HW$H#rXzPKQ!5if7_uFSIuBBqSjYrIV=^z(KlmZJx=E z;iU`+VZ$xU2B3>*=ash*p{p6PVl31u>HA3LBBCP^8J_-I2rA((63;JA5|6 zyEg`ftZ^$OL54%^rI@p))y4w=uQj~TLCrbmZJ4)w%Zx$*SH$AVTY%!{3(Uhq_6U^=Z-ec&8$S*B(so||NMci_7_7n z;^VYeaJ5pzZsQiuH+LZOP|B3_Q_(HlVXR*!Bj>iPaZfII;XlQ81*A5-d&I9S3`!rc zt2a2e^gJCS@|tOMv)?`Gs5!ge$w2Mg4{X$uxlunf<*yPpvP^fFgHej_f>P zZg5wy$WZubLlve#x)bR3?NA`f@&WOK7{F!Pao!Sb!AVoK$tw@|Viyo@zZ>0z_*lgG z+Rz4M8xmyb&gPGL7d!J-5BM|yDW3-@EXRZ_*A*tpJNT#Btp??6QrV3&S>zut!Wm{b zf-rWlnb4e$rLR}q9zOTCvBuxe3z@uDif6B>$UcPFD;xCRCpF*!RJRCw;vTRCpy^ny zzdzF3f$tkCiXZ_pE``eCuM9-~+|aYZI2^z1y3;ggwAZIN9`F%NpOz zu-D1q%gwRz?Nhxf3nkHcH5GkRag?-lvypkzjWo^kpU|_esaG5i>sQZz_Zl$Bb&Ia2 zX{i+!c@KP*{rP+=;Px~izV$q{l|OK0OiNuAD7hw}lBXGFB;N6ZgmUr>poecgK<#GL z_$EJ%9NAVk?{6QZspV_rx ziRFiJju|#&JmKo*boILCPJ}o~!e8(Ju+`&!=Ho&w2W71LOXAd=&JS1f1FB7}RN-oc zTkyf{g+}u6 zvo@Ff_q*(=ZjqXRa_zHsAf%O=HXV|2V2+sD`KtLO+$W)(27x-9yYOkjStQN1S!TbD|Brb{ow z*;doyp{cE3N%nxK-Vvwz{5e^&Hoo3JH;gAw0dH&B1cUw$ z68W>Dd2K$w&`U?@^)9{Dv7?4lr%c8BboX^FzZrI9`}WoOk)u+yy{GxTXP7%=j9D_k zz&bm%zWD!S(XZa8#k^N5{9ZMDJpjn}HIF-Pw|6?)6uc>kNY{Y=)85j!V8EmWNdDeD zkGYrHH7M8t&y_y&wvCMxh@#TdA1ow!@rOlB7-*AFMgRN^j80-hhZtguK|G8!*B+QaOpHjev2h{htr_USB6=AvRU;qr zi#*@AhhKjN9KZ9-w`$t@Ee%X=c=QD|sdQGW9HGox91%$faMN(sSwTAf;o@G?(9KYg zh7=bAk8VZVjBT9bQ+5@V23>8I0BLcXey}U5fok1smT1u{R6@Mh5A^D@^fTx~x4@Tx z9V8s+NdWgNu=N9m_OLQ}`0hWDrpfysQR@FBc>l*``Jb+cf2FXG?f~e0BFKCWpcf2$ z{QMKec~b>C15GIq!^*c)WbP0t!-j$>jLw+|@Z!?1O{;3({c&z+))e(6o98)nMN3V@ z^Uu!Ymc-Pk4zhOWOMW+4K4VM7gmo|w_gXFt&>tXo7Cy!Cota=>cG?n1W)5nU(Q7tnrJ|y%>(ilD@<3wI-KV;-@?usQlAC;u|q&3 zltlWRRwEh^AVt@b%s&G0F_mK*(2jm54DVaD0JdKgm+SsBoZEZH7odpGHmYEZ!B3C0 zRGiV9yp}^6Kh~}TO3YJLwTo7u?QTp^8pzLh?PJjvK}3rcKzt#s-S64SqG~*zFoPIMyQAh;e&#$r} z$A++e@|O$Kl=Le{8PM=E6ptDT!J%LLef_=c^*09(8^VU#B0?lH=6A34bRCG+t)N*3 zN=l%7XNzJ-tM_i2odeq!!aUC54E|HmK%;gQnSP$>x`TVG^c~I>F9C(u_pnc3@Kc$c&$Rg={+!Uyx^=ivrRTxYyWi5pr#UaCj|u<<)?>QnU+LEz zLt+PS(H~HK3%W}t+($cqMKI60l=6A?xQ(g`Pd^=t5qnIyC$EyaJ_86r$pKOeDS!;D z*IamsoA7cEWdQ`n^^w$qN$&M)s5x+Z>SKi~W$e2F}&C50~C4M$^E|NJcfXGa=&Q;9^PN;nAs3lFv5=p$AP>|Nv z$04MxZ~@Zg+S-t{Q1oBjoLDlYK8x_tnUk~!?6rnGF9*{^tJ8R$dgpelX2cJU!qLd= z`XB1Bf%n5F?>z+ytQ5e`|3fKC>6t|QM1IXw;a78iT{-vo&R@g z1k(Zr&+!gdrf6AI*C@-ycOei*-?f0>nGX8$VhUj!e?3_B9nca~JLEW0cWuypBEm^I zQt0k~y*L__nuk5XhR2p5KCrTv0wF1($W|8EU)>}C))AoAD&bu&BGL?$B2`DG4@5P`0H-6qc+9^2|GV*7OTO< zcCI)*P603c*U1|>p+r$ISlupIp_Q*_oy~FpYy9;p}6Pgql5m;SKsaKRd@jY`+ zy@q2Cs@Z6LoS-JtJ4q6^)^s|>Pz9YlLTF*BmmRRx*f}; z>24ExC*A(W{GRo$snUGK*j{p+fF5!zmpVsSjFm32_{Smnc;r#JeoYU=6#E{;8QVR< z)Atc3rdnC9`I;(q*=xYtF)eJejNbQ#KQvt`poP2pErC-mnr&7(2A1H@=bYF}CZZo? zf)35Yl*Lg_U_1g{2Yq}D|0FfsxUvlQF~q0rk2^Ns0Ey=Gq$@ zbIHPMpc|MVHfC8i*TO-bBZt|j*@9_6{`KW)-Om7OY>ttYIz*1n^mkpioR`172*SR`7%H@(aF62-wAvB zEFps{P?f6&;$|4U;{ zw5HG*O2UJEy)=;0zBV%bxUwbgvvY@p!!6v?LMzE+jVB3G!5WB)=_&wY>}aTj=CBDaFXV5kjCB5r~UbA_A$oF!M~rPand?p=x#Ll+~vx?g(+ z^y9`32So3p1L9g+ozOStq&}7;k1HXSH}85}2zI(m(=r=iiO_Y`KB%N~`(V9bx;u%Jkcs*At##wyKffe8-RiAjTjg;`Bw!N%D=&HYizoH1YoU*&ur z<7$94D(p%l@my2Z&pGHZFo|w_I}K2xu(B3@NvBOp9_xYUf+qOrw**k92`tpKOFyS{ z!#Dx*Nu>&gmDM{i|+qzM*Q^y1shA8x8YhotsT8L&hou& zq7YddZK9f)I4)F%?>2EjBJ-d61u+5WnWwKmJEqNP?Jz5Kozf*Nb6Cl&F!1KhZcS@V z=B2-F-;Z1LiEZc!&CRg!?g5fO3a{V;5skKwZMzy~Y!FkET#x`xt|wB@R+;TK^hv0v z7CCZw71IbO41)VjmVAyxxYc8Y)0`K1HWwz`Hu0a%(^7Z~z#|aPjOLsB*)f%s%-!*w z7NAq)TT;9JiF1Ck3vHZ4y(v=l`s3wpVDRi-7yRIwF2NGN_Le;j`^E?_tGJ6XXJYYe zUeQ(KOkxUs%a+}NN5g>qbFFn-{`K0w73)`Kh8wm11T3YGYBwJqEoJ*wjX;B|KcXK) z8jGebM*tsW^sdCLyr`N94r^3Bef0Xb8;&;uz?img{7XszTovPE_#`~8lRc@6C11uh zlBJu0%IK=J*!pe;I5%3auyYqvKt$dBlpZhRo>Agv(x6#r)@UP(>h^U0BIOdKkq=KK z!P-yXil{FI`-lQG9PM)oA6XykJGJ-jBa>26s_TqN7u)Fr=pT(;!0H>YHl%X<6q#t- z;Ig>=y=jKJI9>%TNYhm(@P01vWawVws>^{KO?m@lGjvUZ85HDbSsOpBGM8FAU5d@Y zwy85;M`N~QOy9YlevVlsEZekU%t3(&_A;*w#_J3*GeeU3gS80;VIzB&ip}W<@`dE5 zU#^a>H9HS-v+QfC-gBG;mF%gt0u(XQBV>MB1s?I70=ubYVNye4g`B^CE2lz1iu7Bd z_UkL|MJs|nvQ98$p+`@jq?>1+r3i7z%yPuMfUmT0xy>yw9QJ?-0sa?GQf&g6=VKhb z)6%uj7A~G%w?vP33hZ{-6E0l>6se{90Sf1~x0Rta@0~IXqI$H%!>a4evBNn)%jr1* zC{Smek*3^}Oj)Y||5fJl{mqXtMtO@n3#XoPUE%a2Lqt@JIv~m1mO$%_6du(3h;)12C$0RT`gf90ftDv$u8G)?qvt~6 zRd4Mr>&r+^u2pj4#J*8bquhBo&6EBC%62Xf%TL!iqVURJTYmFj6J@oyju2v<6#s(S!A&* zXBr1|_h@IWkrO^dV!nr*;Q!_!nlp2G;lwSLf`mg7{|;uymJpFSHQTsArWg}~TLY?X zpMqj;)%QiJR>&hh%k_*56snNP|5%49><~Ri>egOEDgB^~By8vcIkOdoU8ce(mk}r1 zb~LO%R1FMM~a=b!9yx1mMH$(7`g8FtN5x}H3mh2HSp!)NY;=1Ut>Xad#y!vt`=#Mb@ z>XV03FCP-*^_?R2KA6CE{2JF;;4J7%sW?3l-H5YM(SLOfk#`DwhDGhnHIX0|8>Je# zqI_F{5?DdqRmM75%z9MMO6c(^>14^>0But0BetIGa0b%XC%i{Hy|hz`rp2DN_~g$M zt8@ap^g7P%(C<9e0@e-DQ?4c&9AcNdB2KOYeIt)p6?X`OOO3G!VAEf{G{;ui+PvOx z-}n5!^@L#+f5=$0lqdV`_B`{(^?mV_S(5WkIc4p3Z!l!M=nzI}0 zlhrM7YW6vLb-p|>!hHYkGc_rg{L3mOO4N92CM+8lO<2w-VUaPqP3LB|MoNmA(75ti zE_DW^p}s>d@pm{)cg|~Ff}QllTDlP}Xq%*_LH6OZVz~KUAy89F&yYs71Vo9~qWy3+ z-q80EHSxUm6!N~Q7efB|y@K3qkds4v#+O!6D7iF0`DBqJAj$@BwiyuX^vnj zv{g5-CCa`+zdzH~IvB!PSHZAlifps8&lTiBBCW3O2D!#R7ah8=QoHn)KM`C0wLn_+ zW@8fTM_wAsAmklu(--S_)Wu!3!m#EgurupS`9y_(WlW z-6v1*0Fm-h!_6zae$akC?wi{{Pq;WEwiR*8C3_>-R2c9rL@5i0Yeo(+Ox**a4kU)eZ zjxUCN{W5-{cek_yBN?BTsR3rSF_72yN4Rttmqt&-(;JFpT7YsJuK67RSQt0Lg9>p# zxbBs)1hHWnpa+6d;EA?x(*otl9X}} -The PoC is available at https://github.com/himazawa/zimaos-rce-poc +The PoC is available at https://github.com/himazawa/zimaos-postauth-rce {{< figure src="rev_shell.png" title="Problem Solved" >}}