51 matches found
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401...
Exploit for Code Injection in Geoserver
GeoExplorer GeoExplorer is a mass scanner project consisting...
Exploit for Code Injection in Geoserver
🚀 GeoServer Exploit for CVE-2024-36401 🚀 📝 Description...
Metasploit Weekly Wrap-Up 7/19/2024
GeoServer Unauthenticated RCE This week, contributor h00die-gr3y added an interesting exploit module that targets the GeoServer open-source application. This software is used to view, edit, and share geospatial data. Versions prior to 2.23.6, versions between 2.24.0 and 2.24.3 and versions betwee...
Exploit for Code Injection in Geoserver
Geoserver CVE-2024-36401 Vulnerability Exploitation Tool Ge...
CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. GeoServer is an open-source software server written in Java that...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...
Geoserver Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Geoserver unauthenticated Remote Code Execution', 'Description' = %q GeoServer is an open-source software server written in Java that provides th...
Exploit for Code Injection in Geoserver
RCE vulnerability in GeoServer CVE-2024-36401 - detection sc...
Exploit for Code Injection in Geoserver
CVE-2024-36401: GeoServer Unauthenticated Remote Code Executio...
Exploit for Code Injection in Geoserver
GeoServer 无回显 远程代码执行漏洞 CVE-2024-36401 options: -h, --help sho...
Exploit for Code Injection in Geoserver
RCE for CVE-2024-36401 POC for CVE-2024-36401 GeoServer. This...
CVE-2024-36401
creationtimestamp| type| source ---|---|--- 2024-07-03 15:43:33+00:00| published-proof-of-concept| https://t.me/HackingInsights/4617 2024-07-04 13:46:58+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7863 2024-07-04 16:31:10+00:00| published-proof-of-concept|...
VulnCheck KEV: CVE-2024-36401
OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input...
CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer...
CVE-2023-36401
Microsoft Remote Registry Service Remote Code Execution Vulnerability...
CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution Vulnerability
...
CVE-2023-36401
Technical details (affected product, root cause, impact, or patch) are not provided in the connected documents. Please monitor for updates from Microsoft or CVE references to get concrete details and remediation when they become available.
