Spring-Cloud-Function-SpEL

Spring-Cloud-Function-SpEL Visita il blog personale per i dettagli https://pizz33.github.io/ Un ambiente di test per l'iniezione di espressioni SpEL in Spring Cloud Function Versione java11, avvia con java -jar demo-0.0.1-SNAPSHOT.jar Dopo la configurazione, accedi alla porta 127.0.0.1:8080...

CVE-2024-23692

Rejetto HTTP File Server HFS - Riproduzione della vulnerabilità RCE non autenticata CVE-2024-23692 Introduzione Rejetto HTTP File Server HFS è un server HTTP leggero per la condivisione e il trasferimento di file. La vulnerabilità CVE-2024-23692 è una vulnerabilità di injection di template che...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell und Auto-Export von PCAP -- NUR FÜR LEHRZWECKE -- Der Autor ist nicht verantwortlich oder haftbar für Handlungen, die mit irgendeinem Aspekt dieses Projekts/Repositorys durchgeführt werden. Ich habe dies erstellt, um den Angriff zu verstehen sowie Erkennungen in...

CVE-2024-50379-POC

Exploração do CVE-2024-50379 e POC Este repositório contém uma Prova de Conceito POC para CVE-2024-50379 , uma vulnerabilidade que afeta o Apache Tomcat. O problema envolve uma condição de corrida do tipo Time-of-Check Time-of-Use TOCTOU , que pode levar à Execução Remota de Código RCE ,...

log4j2-rce-poc

Log4j2 RCE-Schwachstellen-POC Ein minimaler Proof-of-Concept für die Log4j2-JNDI-Remote-Code-Execution-Schwachstelle CVE-2021-44228. Er ist für Bildungszwecke gedacht, um Menschen, die keine Sicherheitsforscher sind, zu helfen zu verstehen, wie sie funktioniert und wie groß die Auswirkungen sind...

CVE-2023-36158

CVE-2023-36158 Cross-Site-Scripting XSS-Sicherheitslücke im sourcecodester Toll Tax Management System 1.0 ermöglicht es Remote-Angreifern, beliebigen Code über die Felder 'Vorname' und 'Nachname' auf der Seite 'Mein Konto' auszuführen...

CVE-2021-29505

Processo di riproduzione In IDEA, importare il file jar del componente xstream. Per questa riproduzione, lo sfruttamento è stato effettuato tramite la catena CommonsCollections6, quindi importare il file jar del componente commons-collections. Per i dettagli del POC, vedere l'allegato...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate Questo POC usa Spring / Hibernate, tuttavia un approccio simile di rmi - deserializzazione potrebbe essere usato per innescare qualsiasi vulnerabilità di deserializzazione TL;DR root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain'...

cve-2021-44228-rce-poc

CVE-2021-44228 रिमोट कमांड निष्पादन PoC यह रिपॉज़िटरी सुरक्षा शोधकर्ताओं को रिमोट कोड निष्पादन के साथ प्रयोग करने की अनुमति देती है, जिसमें एक आक्रमण सर्वर का कार्यान्वयन प्रदान किया गया है जो log4j युक्त किसी कमजोर अनुप्रयोग पर एक कस्टम एक्सप्लॉइट लोड करता है। ⚠️ यह उपकरण स्व-मूल्यांकन के लिए है...

CVE-2024-10542

PoC di CVE-2024-10542 e CVE-2024-10781 Autenticazione non funzionante nel plugin Spam protection, AntiSpam, FireWall di CleanTalk = 6.43.2 Disclaimer: Le informazioni fornite in questo documento relative a CVE-2024-10542 sono solo a scopo di apprendimento ed educazione. Non incoraggiamo né...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: Vulnerabilità RCE in ADSelfService Plus Uno: Descrizione della vulnerabilità ZOHO ManageEngine ADSelfService Plus è una soluzione integrata di gestione self-service delle password e single sign-on per Active Directory e applicazioni cloud dell'azienda ZOHO...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP-Upload-Bypass / Remote Code Execution für Python3 Ich habe lediglich einige Anpassungen am ursprünglichen Skript vorgenommen, um es mit Python 3 kompatibel zu machen! Sollten Probleme oder Schwierigkeiten...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

DEBIAN-CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2026-61800

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

CVE-2026-19318

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution und Docker Labor Klonen wir das Repository mit gitclone, dann navigieren wir zu apisix-docker/examples. In dieser docker-compose.yml Datei haben wir bereits image: apache/apisix:2.12.0-alpine geändert, da die Sicherheitslücke in dieser Version existiert...

cve-2021-42013-docker-lab

CVE-2021-42013 Introdução Foi descoberto que a correção para CVE-2021-41773 no Apache HTTP Server 2.4.50 era insuficiente. Um atacante poderia usar um ataque de path traversal para mapear URLs para arquivos fora dos diretórios configurados por diretivas do tipo Alias. Se arquivos fora desses...