CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

CVE-2019-0604

CVE-2019-0604 cve-2019-0604 SharePoint RCE exploit blog: https://www.cnblogs.com/k8gege/p/11093992.html wiki: https://github.com/k8gege/K8CScan/wiki/%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8-CVE-2019-0604-SharePoint-GetShell-Exploit...

CVE-2019-0604

This repository does not have a README...

CVE-2019-0604

1. Analysis of k8gege's cve-2019-0604-exp.py k8gege's script https://github.com/k8gege/CVE-2019-0604 Honestly, k8gege's Python script is a bit fancy, with a large number of hexadecimal strings split into payload1, 2, 3. Devious. The Python script sends a remote POST payload, which after...

weaponized-0604

Weaponized CVE-2019-0604 Automated Exploit Tool to Maximize CVE-2019-0604. Requirement The requirements.txt file should list all Python libraries this tool used, and they'll be installed using $ pip install -r requirements.txt Manual blind exploit without credential $ python exploit.py -u -c whoa...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-1999-0604

An incorrect configuration of the WebStore 1.0 shopping cart CGI program "webstore.cgi" could disclose private information...

WordPress FastDup plugin <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter vulnerability

Authenticated Contributor+ Path Traversal via 'dirpath' REST Parameter vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin FastDup versions = 2.7...

EUVD-2026-0604

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2021-0604

Malware in sbrugna...

CVE-2024-0604

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-0604

The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2021-0604

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (1.2.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.2.0.cr1 Source cves: CVE-2025-060...

org.keycloak:keycloak-dependencies-server-all (1.0.2.final), org.keycloak:keycloak-server (1.0.2.final) potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (1.0.2.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.2.final -...

org.keycloak:keycloak-dependencies-server-all (23.0.4), org.keycloak:keycloak-guides (23.0.4) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (23.0.4)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.4 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (24.0.4)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 - org.keycloak:keycloak-guides...

io.phasetwo.keycloak:keycloak-orgs (>=0.76, <=0.78), org.keycloak:keycloak-dependencies-server-all (25.0.0) +7 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (25.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.76, =0.78 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.1) +7 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (25.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-dependencies-server-all (25.0.2), org.keycloak:keycloak-guides (25.0.2) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (25.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.2 - org.keycloak:keycloak-guides...