CVE-2026-49099

CVE-2026-49099 — camel-salesforce sObjectQuery Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

OFBiz-Attack

OFBiz-Attack Uno strumento per l'attacco alle vulnerabilità CVE-2023-49070/CVE-2023-51467 Ambiente di test vulhub/ofbiz:18.12.09 Utilizzo Avvio root@kitploit: java -jar OFBiz-Attack.jar Ci sono tre moduli, rispettivamente: Rilevamento vulnerabilità È sufficiente inserire solo l'URL di destinazion...

CVE-2021-44228

CVE-2021-44228 PoC Log4Shell ⚠️ अस्वीकरण: यह उपकरण केवल शैक्षिक उद्देश्यों, सुरक्षा अनुसंधान और नियंत्रित परीक्षण वातावरण के लिए है। बिना स्पष्ट अनुमति के सिस्टम के खिलाफ इसका उपयोग करना अवैध है और पूरी तरह से उपयोगकर्ता की जिम्मेदारी है। 📌 विवरण इस परियोजना में Apache Log4j2 CVE-2021-44228 भेद्यत...

CVE-2021-44228-DFIR-Notes

CVE-2021-44228 DFIR-Notes घर जाते समय मुझे log4shell कमजोरी के बारे में पहले संदेश मिलने शुरू हुए। Apache Log4j 2 उपयोगिता के कई संस्करणों को प्रभावित करने वाली एक उच्च गंभीरता वाली कमजोरी CVE-2021-44228 9 दिसंबर, 2021 को प्रोजेक्ट के GitHub के माध्यम से सार्वजनिक रूप से प्रकाशित की गई थी। यह...

Apache-OFBiz-Exploit

Apache-OFBiz-Exploit Apache OFBiz CVE-2024-38856 के लिए Exploit द्वारा: Alisson Faoli Description इस रिपॉजिटरी में Apache OFBiz में पाई गई CVE-2024-38856 कमजोरी के लिए एक exploit है। यह दोष बिना प्रमाणीकरण के RCE Remote Code Execution की अनुमति देता है। नोट: यह exploit केवल शैक्षिक और अनुसंधान...

CVE-2021-41773_42013

CVE-2021-41773 e CVE-2021-42013 - Configurazione del Laboratorio Configurazione root@kitploit: $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTA: I file httpd.conf sono...

wordpress-fix-cve-2018-6389

wordpress-fix-cve-2018-6389 Apache RewriteRule per mitigare un potenziale attacco DoS tramite il file wp-admin/load-scripts.php di Wordpress Divulgazione iniziale di Barak Tawily: https://baraktawily.blogspot.in/2018/02/how-to-dos-29-of-world-wide-websites.html...

ofbiz-poc

ofbiz-poc CVE-2020-9496 e CVE20209496 utilizzano dnslog per la verifica batch di poc ed exp delle vulnerabilità OFBizCVE20209496.py e OFBizCVE202126295.py sono per la verifica di singole vulnerabilità ofbizpoc.py è per la verifica batch di due vulnerabilità, salva i siti da verificare in batch in...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack Dieses Projekt demonstriert die HTTP/2 „Rapid Reset“-Sicherheitslücke CVE-2023-44487, die es Angreifern ermöglicht, Server mit RSTSTREAM-Frames zu überlasten und einen Denial-of-Service DoS zu verursachen. Es beinhaltet: ✅ Exploit-Test mit...

CVE-2017-12617

Primeiros passos O objetivo desta Prova de Conceito é demonstrar como é possível usar o CVE-2017-12617 para ter controle remoto em um servidor Apache Tomcat. Instruções 1. Execute este comando para iniciar o servidor. make serverup 2. Execute este comando para executar o ataque e enviar um web...

Apache Kylin 3.0.1 - Command Injection Vulnerability

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation. id: CVE-2020-1956 info: name: Apache Kylin 3.0.1 - Command Injecti...

Red Hat JBoss - Insecure Deserialization

Red Hat JBoss Application Server 4.x, 5.x, 6.x contains an insecure deserialization vulnerability in the JMXInvokerServlet and EJBInvokerServlet HTTP Invoker endpoints. These endpoints deserialize arbitrary Java objects from unauthenticated HTTP POST requests. An attacker can send a crafted Apach...

Apache ShenYu Admin Unauth Access

Apache ShenYu suffers from an unauthorized access vulnerability where a user can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1. id: CVE-2022-23944 info: name: Apache ShenYu Admin Unauth Access author: cckuakilong severity: critical description: Apach...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner Uno strumento di rilevamento basato su Python per CVE-2024-40725 , una vulnerabilità di divulgazione del codice sorgente del server Apache HTTP che interessa le versioni 2.4.0 e 2.4.61. Nota legale: Esegui questo scanner solo su server di tua proprietà o per i quali disponi...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 Apache Tomcat Tribes क्लस्टरिंग में EncryptInterceptor fail-open बाईपास, जो Java डिसीरियलाइज़ेशन के माध्यम से बिना प्रमाणीकरण के RCE की ओर ले जाता है। प्रभावित संस्करण: 11.0.19+, 10.1.53+, 9.0.116+। इनमें ठीक हुआ: 11.0.21, 10.1.54, 9.0.117। इनके द्वारा खोजा और रिपोर्ट किया गया:...

CVE-2024-38856-ApacheOfBiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz ist ein Open-Source-System für die Unternehmensressourcenplanung. Es bietet eine Reihe von Unternehmensanwendungen, die viele der Geschäftsprozesse eines Unternehmens integrieren und automatisieren. CVE-2024-38856 ist eine Schwachstelle vor der...

CVE-2022-47966-Scan

Scanner CVE-2022-47966 Informazioni CVE-2022-47966 è una vulnerabilità critica di esecuzione remota di codice non autenticata che colpisce almeno 24 prodotti ManageEngine on-premise. La vulnerabilità si applica solo se SAML SSO è abilitato. Per alcuni prodotti si applica anche se SAML SSO è stato...

CVE-2021-44228

CVE-2021-44228 Apache Log4j è uno strumento di logging scritto in Java. Questo documento si concentra su cosa sono Log4j e la vulnerabilità log4shell, come funziona, come colpisce la vittima e come può essere mitigata. Scarica il PDF e divertiti !!! Saluti !!!...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - Bypass del caricamento JSP / Esecuzione remota di codice per Python3 Ho apportato alcune modifiche allo script originale per renderlo compatibile con Python 3! Se ci sono problemi o difficoltà, sentiti libero d...