CVE-2019-0193

CVE-2019-0193 Remote Code Execution...

ApacheSolrRCE

Project Statement For information security teaching and communication only. Do not use for illegal testing or attacks. ApacheSolrRCE ApacheSolrRCE CVE-2019-0193 one-click write shell, the principle is to write a web shell through code execution of Java file stream. Note: The author is not very...

solr_exploit

Declaración Los métodos de detección de vulnerabilidades, archivos y demás contenidos proporcionados aquí están destinados exclusivamente para que los profesionales de seguridad los utilicen con autorización legal, con el objetivo de verificar la seguridad de los servidores autorizados. Los...

U.S. Dept Of Defense: Remote Code Execution on █████████

Summary: An unauth solr lead to RCE on ██████████ Description: Hello, I found a solr unauth at https://██████/solr/ This version is 5.5.1, vulnerable with CVE-2019-0192 and CVE-2019-0193, i have try CVE-2019-0193 and successful RCE. Impact Attacker can get shell on server. Step-by-step Reproducti...

Debian: Security Advisory (DLA-2327-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2327-1] lucene-solr security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2327-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 15, 2020 htps://wiki.debian.org/LTS -...

Apache Solr Remote Code Execution (CVE-2019-0193)

A remote code execution vulnerability exists in Apache Solr. Successful exploitation could result in execution of arbitrary code on the affected system...

[SECURITY] [DLA 1954-1] lucene-solr security update

Package : lucene-solr Version : 3.6.2+dfsg-5+deb8u3 CVE ID : CVE-2019-0193 A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole...

CVE-2019-0193

creationtimestamp| type| source ---|---|--- 2019-08-13 07:19:26+00:00| published-proof-of-concept| https://t.me/antichat/6245 2019-12-16 08:33:51+00:00| seen| MISP/5df74123-1020-46ef-9504-7c5c0a3b4631 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-11-02...

Exploit for Code Injection in Apache Solr

CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln...

CVE-2019-0193: Apache Solr remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 8 October 1, Apache Solr official release for CVE-2019-0193 vulnerability alerts, vulnerability hazard rating is serious. The vulnerability appears in the Apache Solr DataImportHandler, the module is an optional but commonly used module for from the database and other sources to extract data...

com.github.jknack:mwa-solr3 (>=0.3.11, <=0.4.2), com.github.shyiko.rook:rook-target-hibernate4-fulltextindex (>=0.1.0, <=0.1.3) +39 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (3.6.2)

org.apache.solr:solr-core MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr3 =0.3.11, =0.1.0, =3.2.0, =4.0.0, =2.3.2, =2.3.2, =3.2.17, =3.2.23, =1.1.9, =1.1.1...

com.chenlb.mmseg4j:mmseg4j-for-solr32 (1.0.0), org.apache.solr:solr (3.2.0) +23 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (3.2.0)

org.apache.solr:solr-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-for-solr32 1.0.0 - org.apache.solr:solr 3.2.0 - org.apache.solr:solr-analysis-extr...

com.findwise.hydra:hydra-solr-in (>=0.3.1, <=0.4.5), com.google.code:lucene-gosen-ipadic (1.2.1) +20 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (3.4.0)

org.apache.solr:solr-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.findwise.hydra:hydra-solr-in =0.3.1, =1.9.0, =1.11.0, =4.0.0.beta2, =4.0.0.beta2, =4.0.0.final and more...

com.chenlb.mmseg4j:mmseg4j-for-solr40 (1.0.0), com.chenlb.mmseg4j:mmseg4j-solr (1.9.0) +25 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (4.0.0)

org.apache.solr:solr-core MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-for-solr40 1.0.0 - com.chenlb.mmseg4j:mmseg4j-solr 1.9.0 -...

com.browseengine.bobo:bobo-solr (>=3.0.0, <=3.2.0), com.browseengine.bobo:cardemo (>=3.0.0, <=3.2.0) +45 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (3.5.0)

org.apache.solr:solr-core MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.browseengine.bobo:bobo-solr =3.0.0, =3.0.0, =3.0.9, =3.0.9, =3.1.0, =3.3.0 - com.senseidb.zoie:zoie-solr...

com.datasalt.pangool:pangool-core (>=0.40, <=0.43.3), com.datasalt.pangool:pangool-examples (>=0.40, <=0.43.3) +15 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (3.3.0)

org.apache.solr:solr-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.datasalt.pangool:pangool-core =0.40, =0.40, =3.0-rc2, =4.0.0.alpha1, =4.0.0.alpha1, =4.0.0.beta1 and more...

edu.cmu.lti.oaqa.core.provider:solr-provider (1.0.3), org.apache.directmemory:directmemory-solr (0.1-incubating) +20 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (3.6.0)

org.apache.solr:solr-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - edu.cmu.lti.oaqa.core.provider:solr-provider 1.0.3 - org.apache.directmemory:directmemory-solr 0.1-incubating...

org.apache.solr:solr (4.0.0-alpha), org.apache.solr:solr-analysis-extras (4.0.0-alpha) +8 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (4.0.0-alpha)

org.apache.solr:solr-core MAVEN version 4.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr 4.0.0-alpha - org.apache.solr:solr-analysis-extras 4.0.0-alpha -...

com.github.jknack:mwa-solr4 (>=0.3.11, <=0.4.0), org.apache.jackrabbit:oak-solr-embedded (>=0.11, <=0.17.1) +11 more potentially affected by CVE-2019-0193 via org.apache.solr:solr-core (4.1.0)

org.apache.solr:solr-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr4 =0.3.11, =0.11, =0.11, =0.17.1 - org.apache.solr:solr 4.1.0 -...