498 matches found
Tomcat-AJP-CVE-2020-1938
Este proyecto se basa en la versión modificada de 00theway...
ghostcat
Ghostcat - CVE-2020-1938 Exploit Read Tomcat files via AJP connector port 8009 Usage: python3 ghostcat.py file """ Save the script cat ghostcat.py 'PYEOF' AQUÍ VA EL CÓDIGO COMPLETO DE ARRIBA PYEOF Set permissions and run chmod +x ghostcat.py Read tomcat-users.xml Tomcat Manager credentials pytho...
CVE-2020-1938
CVE-2020-1938 Scanner for CVE-2020-1938 ¿Scanner? ¿PoC? Llámalo como quieras Ejecútalo directamente en un entorno Python Simplemente ingresa la dirección IP según las indicaciones. Se recomienda usarlo después de haber configurado Tomcat. Scanner es un script modificado que añadió entrada de...
CVE-2020-1938
Este repositorio no tiene un README...
CVE-2020-1938
Este repositorio no tiene un README...
Ghostcat-Tomcat-AJP-Exploit-Py3
Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerability Detection Tool Introduction This project provides a Python verification script for verifying the Apache Tomcat AJP protocol local file inclusion vulnerability commonly known as Ghostcat, CVE-2020-1938 / CNVD-2020-10487. This script is ...
Ghostcat-CNVD-2020-10487
Ghostcat exp for CNVD-2020-10487CVE-2020-1938 tomcat ajp协议任意属性设置导致的文件读取和文件执行。 漏洞分析 代码仅供安全测试，请勿用于非法用途,造成的后果使用者负责与本人无关！！！ root@kitploit: python3 ajpShooter.py -h /\ / \ | | | //\ | | ' \ \ | ' \ / \ / | / \ '| / | | | | \ \ | | | | | || / | / // | ./ /| ||/ / \|| |/|| 00theway,just for test...
Exploit for CVE-2020-1938
CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...
Exploit for CVE-2020-1938
CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...
CVE-Apache-Ecosystem
Apache Ecosystem CVE Vulnerability Reproduction Testbed D...
CVE-2025-1938 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2024-1938 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-1938 vulnerabilities
Vulnerabilities for packages: chromium...
Exploit for CVE-2020-1938
🔐 THM Writeups Hands-on TryHackMe machine writeups documented...
CVE-2026-1938 YayMail <= 4.3.2 - Missing Authorization to Authenticated (Shop Manager+) License Key Deletion via '/yaymail-license/v1/license/delete' Endpoint
The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized license key deletion due to a missing authorization check on the /yaymail-license/v1/license/delete REST endpoint in versions up to, and including, 4.3.2. This makes it possible for authenticated...
MiracleLinux 4 : tomcat6-6.0.24-114.AXS4 (AXSA:2020-4523:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4523:01 advisory. tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability CVE-2020-1938 Tenable has extracted the preceding description block directly from the MiracleLinu...
MiracleLinux 8 : thunderbird-128.8.0-2.el8_10.ML.1 (AXSA:2025-9775:05)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9775:05 advisory. firefox: thunderbird: Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8 CVE-2025-1938 firefox:...
MiracleLinux 9 : firefox-128.8.0-1.el9_5.ML.1 (AXSA:2025-9736:09)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9736:09 advisory. firefox: Use-after-free in WebTransportChild CVE-2025-1931 firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process...
EUVD-2026-1938
Imaster's Patient Record Management System contains a stored Cross-Site Scripting XSS vulnerability in the endpoint ‘/projects/hospital/admin/editpatient.php’. By injecting a malicious script into the ‘firstname’ parameter, the JavaScript code is stored and executed every time a user accesses the...