CVE-2017-8046

此存储库没有 README。...

SpringBreakVulnerableApp

Spring Break 漏洞应用程序 这是一个用于测试 Spring Break 漏洞（CVE-2017-8046 ）利用程序的存在漏洞的应用程序。 警告！ 此应用程序包含严重的安全漏洞。请自担风险运行！建议使用已备份且隔离的环境（例如具有最新快照和仅主机网络的虚拟机）。请勿将此应用程序上传到任何面向互联网的服务器，否则它们将被入侵。 免责声明 ：我不对任何人使用此应用程序（SpringBreakVulnerableApp）的方式承担任何责任。此应用程序的唯一目的是作为 Spring Break 漏洞利用的测试场景，不应被恶意使用。如果您的服务器因安装...

spring-break-cve-2017-8046

CVE-2017-8046 Spring Break 这是一个利用 Spring Break 漏洞（CVE-2017-8046）的 Java 程序。 免责声明 此工具面向安全工程师和应用安全人员，用于安全评估。请负责任地使用此工具。本人不对任何人使用此应用程序的方式承担任何责任。本人对因使用此工具造成的任何损害或犯下的任何罪行概不负责。 使用方法 root@kitploit: $ ./mvnw clean install $ java -jar target/spring-break.jar 链接...

CVE-2017-8046

免责声明： 本仓库是对 VGS 博文《如何避免使用已知漏洞的组件》的补充。它包含一个具有已知安全漏洞（即 CVE-2017-8046）的应用程序，以及如何利用该漏洞的描述。请自行承担使用该应用程序的风险！ 设置 首先，在仓库根目录执行以下命令启动应用程序： root@kitploit: mvn clean spring-boot:run 然后，通过发送如下 POST 请求创建一个资源： root@kitploit: curl -X POST http://localhost:8080/books \ -H 'Content-Type: application/json' \ -d...

spring-data-rest-CVE-2017-8046

image:https://spring.io/badges/spring-data-rest/ga.svgSpring Data REST, link="http://projects.spring.io/spring-data-rest/quick-start" image:https://spring.io/badges/spring-data-rest/snapshot.svgSpring Data REST, link="http://projects.spring.io/spring-data-rest/quick-start" = Spring Data REST...

hutstore.vn Cross Site Scripting vulnerability OBB-1237457

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Critical: Red Hat Security Advisory: Red Hat FIS 2.0 on Fuse 6.3.0 R7 security and bug fix update

An update is now available for Red Hat Fuse Integration Services. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution Ex

Exploit for java platform in category web applications // Exploit Title: RCE in PATCH requests in Spring Data REST // Date: 2018-03-10 // Exploit Author: Antonio Francesco Sardella // Vendor Homepage: https://pivotal.io/ // Software Link: https://projects.spring.io/spring-data-rest/ // Version:...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

// Exploit Title: RCE in PATCH requests in Spring Data REST // Date: 2018-03-10 // Exploit Author: Antonio Francesco Sardella // Vendor Homepage: https://pivotal.io/ // Software Link: https://projects.spring.io/spring-data-rest/ // Version: Spring Data REST versions prior to 2.6.9 Ingalls SR9,...

Spring Data REST 2.6.9 (Ingalls SR9) 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 Ingalls SR9 3.0.1 Kay SR1 - PATCH Request Remote Code Execution // Exploit Title: RCE in PATCH requests in Spring Data REST // Date: 2018-03-10 // Exploit Author: Antonio Francesco Sardella // Vendor Homepage: https://pivotal.io/ // Software Link:...

CVE-2017-8046

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code...

CVE-2017-8046

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code...

CVE-2017-8046

CVE-2017-8046 is a remote code execution vulnerability affecting Spring Data REST before versions 2.6.9 (Ingalls SR9) and 3.0.1 (Kay SR1), and Spring Boot before 1.5.9 or 2.0 M6. When processing specially crafted JSON in PATCH requests, an attacker could execute arbitrary Java code on affected se...

CVE-2017-8046

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code...