182 matches found
CVE-2023-32315-POC
CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Обзор Этот код — POC на Python для CVE-2023-32315, предназначенный для выполнения ряда операций с целью проверки, затронут ли целевой сайт уязвимостью CVE-2023-32315, и для попытки выполнения некоторых операций на затронутых сайтах. По...
CVE-2020-9484
Уязвимость десериализации Apache Tomcat CVE-2020-9484 Настройка уязвимого стенда Клонируйте этот репозиторий Выполните docker-compose up -d Готово! PoC эксплойта Выполните curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx Файл с именем coldfx...
CVE-2025-24813-Scanner
CVE-2025-24813 Сканер Многопоточный сканер уязвимостей для обнаружения серверов Apache Tomcat, уязвимых для CVE-2025-24813 произвольная загрузка файлов, приводящая к удалённому выполнению кода. Описание Этот сканер проверяет серверы Apache Tomcat на уязвимость CVE-2025-24813 следующим образом: 1...
CVE-2023-27350
CVE-2023-27350 POC для CVE-2023-27350, затрагивающей PaperCut MF/NG Технический анализ Технический анализ первопричины уязвимости, индикаторы компрометации и информация о распространении в интернете доступны в нашем блоге:...
CVE-2025-24813
CVE-2025-24813 Tomcat PoC 허가된 CTF/랩 환경을 위한 PoC입니다. Tomcat 세션 파일의 부분 PUT 쓰기를 통해 CVE-2025-24813을 악용한 후 JSESSIONID로 역직렬화를 트리거합니다. 사전 요구 사항 Python 3 Python requests 모듈 Java JDK java 및 javac 이 폴더에 포함된 commons-collections-3.2.1.jar 파일 ysoserial은 필요하지 않습니다. 파일 poccve202524813.py: 생성, 업로드 및 트리거를 자동화하는...
CVE-2020-9484
CVE-2020-9484 Tomcat Только в образовательных целях. Подробнее см. в разделе «Ссылки». Запуск root@kitploit: $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy Проверка до эксплойта...
CVE-2026-77614
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...
CVE-2026-77614
Opencast , an open-source platform for managing educational audio and video content, is vulnerable to session fixation prior to versions 19.7 and 20.2. The default security configuration in etc/security/mh_default_org.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path paramet...
CVE-2020-5421
Воспроизведение уязвимости Spring CVE-2020-5421 Обзор уязвимости CVE-2020-5421 позволяет обойти защиту от RFD-атак через параметр пути jsessionid. Ранее защита от RFD была добавлена в ответ на CVE-2015-5211. Что такое RFD Reflected File Download RFD — это техника атаки, при которой злоумышленник...
CVE-2023-32315-java7-
CVE-2023-32315 0x01 Die zurückgegebene JSESSIONID und csrftoken abrufen und ein Anforderungspaket zum Hinzufügen eines Benutzers erstellen JSESSIONID und csrftoken ersetzen img.png root@kitploit: cd CVE-2023-32315-Openfire-Bypass/scanall go mod tidy go run main.go -u http://openfire.com:9090 0x02...
BIT-KEYCLOAK-2024-7341 Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters
A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured. This flaw allows an attacker who hijacks the current session before authenticati...
CVE-2026-43828
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
EUVD-2026-31734
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
CVE-2026-43828 Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
CVE-2026-43828
Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...
PT-2026-43119
Name of the Vulnerable Software and Affected Versions Apache Shiro versions 1.0 through 2.1.0 Apache Shiro version 3.0.0-alpha-1 Description Default configurations cause the Shiro-native session manager and the Remember-Me manager to send JSESSIONID and rememberMe cookies without the 'Secure'...
Unity Linux 20.1070e Security Update: springframework (UTSA-2026-016731)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016731 advisory. In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from...
📄 Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket Hijacking
Traccar GPS Tracking System version 6.11.1 cross-site websocket hijacking proof of concept exploit. Exploit Title: Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking CSWSH Date: 2026-02-26 Exploit Author: Hazar Taspinar Vendor Homepage: https://www.traccar.org/ Software Link:...
CVE-2025-68930
Traccar open-source GPS tracking system versions up to 6.11.1 are affected by a Cross-Site WebSocket Hijacking (CSWSH) in the /api/socket endpoint. The vulnerability arises from the application not validating the Origin header during the WebSocket handshake, allowing an attacker to bypass Same-Or...