Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kitploitKitPloitKITPLOIT:4611207874033525364
HistoryAug 26, 2018 - 9:14 p.m.

Apache Struts v3 - Tool To Exploit 3 RCE Vulnerabilities On ApacheStruts

2018-08-2621:14:00
www.kitploit.com
1110

10 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

Script contains the fusion of 3 RCE vulnerabilities on ApacheStruts, it also has the ability to create server shells.

SHELL phpfinished jsp process

CVE ADD CVE-2013-2251'action:', 'redirect:' and 'redirectAction' CVE-2017-5638Content-Type CVE-2018-11776 'redirect:' and 'redirectAction'

Download Apache-Struts-v3

Related

myhack58 9
threatpost 24
openvas 15
attackerkb 4
thn 5
nessus 11
veracode 2
akamaiblog 1
prion 3
ibm 17
zdt 7
exploitpack 1
redhatcve 2
dsquare 2
packetstorm 7
checkpoint_advisories 5
osv 5
d2 1
cvelist 3
trendmicroblog 3
cve 3
impervablog 3
cisa_kev 3
krebs 2
securityvulns 2
qualysblog 4
talosblog 1
metasploit 1
cisco 3
kitploit 4
nuclei 3
seebug 3
jvn 1
github 3
ubuntucve 3
f5 3
saint 7
canvas 2
exploitdb 3
vmware 2
securelist 1
hackerone 3
malwarebytes 1
lenovo 2
atlassian 4
rapid7community 1
cloudfoundry 1
cert 1
huawei 1
githubexploit 1
myhack58
myhack58
Apache Struts OGNL injection vulnerability principle with an example-vulnerability warning-the black bar safety net
2019-03-30 00:00:00
S2-057 vulnerability in the original author's README: how to use automated tools find 5 RCE-vulnerability warning-the black bar safety net
2018-08-23 00:00:00
Apache Struts2 S2-057 vulnerability analysis and early warning-vulnerability warning-the black bar safety net
2018-08-23 00:00:00
threatpost
threatpost
Record Oracle Patch Update Addresses ShadowBrokers, Struts 2 Vulnerabilities
2017-04-19 07:20:09
Active Campaign Exploits Critical Apache Struts 2 Flaw in the Wild
2018-09-05 17:48:03
On xDedic, a Flash Zero Day, Facial Recognition, and More
2016-06-17 11:15:12
openvas
openvas
Apache Struts Security Update (S2-057) - Active Check
2018-08-27 00:00:00
Apache Struts Security Update (S2-057) - Version Check
2018-08-23 00:00:00
Apache Archiva Multiple Remote Command Execution Vulnerabilities
2014-01-15 00:00:00
attackerkb
attackerkb
CVE-2019-0230
2020-09-14 00:00:00
CVE-2018-11776
2018-08-22 00:00:00
CVE-2013-2251
2013-07-20 00:00:00
thn
thn
New Apache Struts RCE Flaw Lets Hackers Take Over Web Servers
2018-08-22 14:04:00
New Apache Struts Zero-Day Vulnerability Being Exploited in the Wild
2017-03-09 01:03:00
Whoops, Turns Out 2.5 Million More Americans Were Affected By Equifax Breach
2017-10-02 21:23:00
nessus
nessus
Apache Struts CVE-2018-11776 Results With No Namespace Possible Remote Code Execution (S2-057)
2018-08-22 00:00:00
Cisco Unified Communication Manager Apache Struts RCE (CSCvm14042)
2018-09-05 00:00:00
Apache Struts CVE-2018-11776 Results With No Namespace Remote Code Execution (S2-057) (remote)
2018-08-23 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2018-08-22 17:36:38
Remote Code Execution (RCE) Through Jakarta Multipart Parser
2017-03-09 12:39:55
akamaiblog
akamaiblog
Web Application and API Protection -- From SQL Injection to Magecart
2020-09-09 13:00:00
prion
prion
Remote code execution
2018-08-22 13:29:00
Code injection
2013-07-20 03:37:00
Design/Logic Flaw
2017-03-11 02:59:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by a Publicly disclosed Apache Struts vulnerability
2018-09-28 04:30:01
Security Bulletin: Content Collector for Email, File Systems, Microsoft SharePoint and IBM Connections are affected by a publicly disclosed vulnerability found by vFinder: Eclipse Jetty
2018-11-12 12:55:02
Security Bulletin: A vulnerability in Apache Struts affects the IBM FlashSystem V840
2019-02-18 15:05:01
zdt
zdt
Apache Struts 2.x Remote Code Execution Vulnerability
2018-08-24 00:00:00
Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (2) Exploit
2018-08-28 00:00:00
Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (1) Exploit
2018-08-28 00:00:00
exploitpack
exploitpack
Apache Struts 2.3 2.3.34 2.5 2.5.16 - Remote Code Execution (1)
2018-08-26 00:00:00
redhatcve
redhatcve
CVE-2018-11776
2018-08-22 08:49:33
CVE-2017-5638
2017-03-08 11:53:37
dsquare
dsquare
Apache Struts 2 Multiple Tags Result Namespace Handling RCE
2018-10-20 00:00:00
Apache-Struts DefaultActionMapper < 2.3.15.1 RCE Linux
2013-10-20 00:00:00
packetstorm
packetstorm
Apache Struts 2.3 / 2.5 Remote Code Execution
2018-08-26 00:00:00
Apache Struts 2 Namespace Redirect OGNL Injection
2018-09-07 00:00:00
Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution
2013-07-25 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts Remote Command Execution (CVE-2013-2251)
2013-07-25 00:00:00
Apache Struts Remote Code Execution (CVE-2018-11776)
2018-08-23 00:00:00
Apache Struts Remote Command Execution - Ver2 (CVE-2013-2251)
2015-05-18 00:00:00
osv
osv
Code injection in Apache Struts
2022-05-13 01:14:26
Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
2018-10-18 19:24:38
CVE-2018-11776
2018-08-22 13:29:00
d2
d2
DSquare Exploit Pack: D2SEC_STRUTS4
2013-07-20 03:37:00
cvelist
cvelist
CVE-2013-2251
2013-07-18 01:00:00
CVE-2018-11776
2018-08-22 00:00:00
CVE-2017-5638
2017-03-11 02:11:00
trendmicroblog
trendmicroblog
Server Security for the Modern IT Ecosystem
2019-01-03 15:30:46
Linux is secure…right?
2017-06-15 19:00:13
Sound, Fury, And Nothing One Year After Equifax
2018-09-07 12:00:34
cve
cve
CVE-2018-11776
2018-08-22 13:29:00
CVE-2013-2251
2013-07-20 03:37:30
CVE-2017-5638
2017-03-11 02:59:00
impervablog
impervablog
Read: Apache Struts Patches ‘Critical Vulnerability’ CVE-2018-11776
2018-08-23 14:25:36
Two New Trends Make Early Breach Detection and Prevention a Security Imperative
2022-08-31 13:47:34
Keeping Your WAF Relevant: Emergency Feed Pushes New Mitigations in Just Hours
2018-04-26 19:01:59
cisa_kev
cisa_kev
Apache Struts Remote Code Execution Vulnerability
2021-11-03 00:00:00
Apache Struts Improper Input Validation Vulnerability
2022-03-25 00:00:00
Apache Struts Remote Code Execution Vulnerability
2021-11-03 00:00:00
krebs
krebs
Experts Urge Rapid Patching of ‘Struts’ Bug
2018-08-23 20:22:35
Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop
2017-09-14 18:03:12
securityvulns
securityvulns
[SECURITY] CVE-2013-2251: Apache Continuum affected by Remote Command Execution
2014-06-14 00:00:00
[SECURITY] CVE-2013-2251: Apache Archiva Remote Command Execution
2014-05-04 00:00:00
qualysblog
qualysblog
Security News: Hackers Aim Ransomware at Big Cos., as Experts Call for Swift Patching of Struts Bug
2018-08-27 18:32:33
How To Prioritize Vulnerabilities in a Modern IT Environment
2018-05-07 16:00:10
Cryptomining is all the rage among hackers, as DDoS amplification attacks continue
2018-03-09 21:45:09
talosblog
talosblog
Connecting the dots between recently active cryptominers
2018-12-18 08:33:00
metasploit
metasploit
Apache Struts 2 Namespace Redirect OGNL Injection
2018-08-31 18:48:22
cisco
cisco
Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products: August 2018
2018-08-23 20:00:00
Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products
2013-10-23 16:00:00
Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability Affecting Cisco Products
2017-03-10 19:30:00
kitploit
kitploit
Mitaka - A Browser Extension For OSINT Search
2019-09-21 12:00:00
Struts2Shell - Interactive Shell Command to Exploit Apache Struts CVE-2017-5638
2017-03-17 14:22:00
strutszeiro - Telegram Bot to manage botnets created with struts vulnerability (CVE-2017-5638)
2017-03-14 17:30:00
nuclei
nuclei
Apache Struts2 S2-057 - Remote Code Execution
2021-02-24 04:29:30
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
2020-10-13 22:06:01
Apache Struts 2 - Remote Command Execution
2020-08-19 13:13:31
seebug
seebug
Apache Struts2 多个前缀参数远程命令执行漏洞(CVE-2013-2251)
2013-07-17 00:00:00
S2-046: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
2017-03-21 00:00:00
S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
2017-03-06 00:00:00
jvn
jvn
JVN#33504150: Apache Struts vulnerable to remote command execution
2013-09-06 00:00:00
github
github
Code injection in Apache Struts
2022-05-13 01:14:26
Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
2018-10-18 19:24:38
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
2018-10-18 19:24:26
ubuntucve
ubuntucve
CVE-2018-11776
2018-08-22 00:00:00
CVE-2013-2251
2013-07-20 00:00:00
CVE-2017-5638
2017-03-11 00:00:00
f5
f5
K60499474 : Apache Struts vulnerability CVE-2018-11776
2018-08-24 00:00:00
K14933 : Apache Struts vulnerability CVE-2013-2251
2014-05-16 00:00:00
K43451236 : Apache Struts 2 vulnerability CVE-2017-5638
2017-03-09 00:00:00
saint
saint
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
canvas
canvas
Immunity Canvas: STRUTS2_DEFAULT_ACTION_MAPPER
2013-07-20 03:37:00
Immunity Canvas: STRUTS_OGNL
2017-03-11 02:59:00
exploitdb
exploitdb
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
2020-10-20 00:00:00
Apache Struts 2 - Namespace Redirect OGNL Injection (Metasploit)
2018-09-10 00:00:00
Apache Struts 2.3 &lt; 2.3.34 / 2.5 &lt; 2.5.16 - Remote Code Execution (1)
2018-08-26 00:00:00
vmware
vmware
VMware product updates resolve remote code execution vulnerability via Apache Struts 2
2017-03-13 00:00:00
VMware product updates resolve remote code execution vulnerability via Apache Struts 2
2017-03-13 00:00:00
securelist
securelist
Unveiling NKAbuse: a new multiplatform threat abusing the NKN protocol
2023-12-14 13:00:40
hackerone
hackerone
U.S. Dept Of Defense: Remote Code Execution (RCE) in a DoD website
2017-03-09 17:59:08
U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website
2017-03-13 04:14:12
U.S. Dept Of Defense: Remote Code Execution (RCE) in a DoD website
2017-03-13 13:22:29
malwarebytes
malwarebytes
Equifax breach: What you need to know [updated]
2017-09-08 07:02:47
lenovo
lenovo
Apache Struts Open Source Framework Remote Code Execution - Lenovo Support US
2017-06-09 00:00:00
Apache Struts Open Source Framework Remote Code Execution - us
2017-06-09 00:00:00
atlassian
atlassian
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
2017-03-10 04:31:09
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
2017-03-10 04:57:51
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
2017-03-10 04:57:51
rapid7community
rapid7community
Apache Struts Vulnerability (CVE-2017-5638) Exploit Traffic
2017-03-15 14:29:55
cloudfoundry
cloudfoundry
CVE-2017-5638: Apache Struts Remote Code Execution | Cloud Foundry
2017-03-14 00:00:00
cert
cert
Apache Struts 2 is vulnerable to remote code execution
2017-03-14 00:00:00
huawei
huawei
Security Advisory - Apache Struts2 Remote Code Execution Vulnerability in Huawei Products
2017-03-16 00:00:00
githubexploit
githubexploit
Exploit for Injection in Atlassian Confluence
2021-10-06 23:24:24

10 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON
Related for KITPLOIT:4611207874033525364
myhack589threatpost24openvas15attackerkb4thn5nessus11veracode2akamaiblog1prion3ibm17zdt7exploitpack1redhatcve2dsquare2packetstorm7checkpoint_advisories5osv5d21cvelist3trendmicroblog3cve3impervablog3cisa_kev3krebs2securityvulns2qualysblog4talosblog1metasploit1cisco3kitploit4nuclei3seebug3jvn1github3ubuntucve3f53saint7canvas2exploitdb3vmware2securelist1hackerone3malwarebytes1lenovo2atlassian4rapid7community1cloudfoundry1cert1huawei1githubexploit1