87 matches found
CVE-2020-6287_RECON-scanner
Vulnerability Assessment and Indicator of Compromise IoC Scanner for CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver is a critical CVSSv3 10 vulnerability affecting a number of SAP business and technical applications running on top of the SAP NetWeaver Java stack. This...
rejjeto_hfs-rce-exploit-cve-2014-6287
HFS Remote Command Execution Exploit CVE-2014-6287 This is a Python 3 rewrite of the classic Remote Command Execution RCE exploit targeting Rejetto HTTP File Server HFS v2.3.x , leveraging the vulnerability identified as CVE-2014-6287. Originally discovered by Avinash Kumar Thapa aka "-Acid" , th...
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 Este repositorio contiene una explicación detallada y un PoC funcional para la ejecución remota de comandos en Rejetto HTTP File Server HFS 2.3.x. Configuración: Crea un listener con netcat. root@kitploit: nc -lnvp 1234 Cambia la IP del...
HFS_EXPLOIT_PROJECT
HFSEXPLOITPROJECT Metasploit RCE on HFS 2.3 - CVE-2014-62 🔖 Title of the Project root@kitploit: Remote Code Execution via HTTP File Server HFS 2.3 ⚙ Tools Used • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 on Windows 7 🔐 Vulnerability Details • Name: CVE-2014-6287 • Type: Remote Code Executi...
hfs-cve-2014-6287-exploit
HFS CVE-2014-6287 Exploit Tool Overview This repository contains a Python-based exploit tool designed to take advantage of the CVE-2014-6287 vulnerability in HTTP File Server HFS versions 2.3.x. This vulnerability allows an attacker to execute arbitrary commands on the server, potentially leading...
SAP_CVE-2020-6287_find_mandate
SAPCVE-2020-6287findmandate Checker help to verify created account or find it's mandat The script allows you to check whether the account was created when using the exploit RECON.py or find the mandate of the created account Exploit: https://github.com/chipik/SAPRECON Quick start: chmod +x...
CVE-2020-6287-exploit
CVE-2020-6287-exploit PoC para CVE-2020-6287 El PoC en Python para agregar usuario únicamente, sin establecer permisos de administrador. Inspirado por @zeroSteiner de Metasploit. Módulo original de PR de Metasploit:...
Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287
This repository does not have a README...
SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition
SAP NetWeaver AS JAVA LM Configuration Wizard, versions 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an...
Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution
Rejetto HTTP File Server HFS 2.3.x - Esecuzione remota di comandi CVE-2014-6287 Riscrittura di Pergyz 49584.py per restituire una Reverse Shell PowerShell x64 Utilizzo $ python3 hfs-2-3-exploit.py Fornisci le variabili quando richiesto, avvia automaticamente Netcat per te...
Optimum
Optimum Optimum – Writeup di Hack The Box Panoramica In questa macchina, l'obiettivo è ottenere un accesso iniziale a un host Windows sfruttando un servizio web vulnerabile e successivamente elevare i privilegi per ottenere la flag dell'amministratore. Il percorso di attacco ha previsto:...
CVE-2020-6287-Sap-Add-User
CVE-2020-6287-Sap-Add-User sap netweaver portal Benutzeradministrator hinzufügen...
THM-Steel_Mountain-CVE-2014-6287
THM-SteelMountain-CVE-2014-6287 Ein Write-up zur Steel Mountain Box von TryHackMe.com und Exploit für CVE-2014-6287 Credits Ich maße mir nicht an, die ursprüngliche Entdeckung und Ausnutzung dieser Schwachstelle selbst gemacht zu haben. Vielen Dank an die folgenden Personen! Entdeckung: Daniele...
cve-2014-6287.py
Versione modificata dello script Python CVE-2014-6287...
CVE-2014-6287
Questo repository non contiene un README...
thm_steelmountain_CVE-2014-6287
thmsteelmountainCVE-2014-6287 una versione python3 dell'exploit scritto per CVE-2014-6287. Utile per completare la room "Steel Mountain" su TryHackMe.com senza l'uso di metasploit...
HTTP File Server <2.3c - Remote Command Execution
HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...
CVE-2026-6287 ShopLentor - WooCommerce Builder for Elementor & Gutenberg <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Product Grid 'blockUniqId' Block Attribute
The ShopLentor - WooCommerce Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blockUniqId' block attribute in multiple Product Gride blocks in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escapin...
Debian dsa-6287 : chromium - security update
The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6287 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6287-1 [email protected]...
