CVE-2017-12636

CVE-2017-12636 Usage: python3 exp.py target version1.6|2.1 reverseip reverseport root@kitploit: / \ | | | | / | |/ | | / / | / \ / || |/ | | / / | | | | ' / /'| |/' || | / /| | ' / /'/ / / / / | | | | | | || / / | /| | | | / /|| | / / | \ \ \ \ | /\ / / | ./ /\ |/ /| |./ / | |./ /| / |./ / /...

Apache-couchdb-CVE-2017-12635

CouchDB Vertical Privilege Escalation Vulnerability CVE-2017-12635 Apache CouchDB is an open-source database that focuses on ease of use and being a "fully web-embracing database." It is a NoSQL database that uses JSON as the storage format, JavaScript as the query language, and MapReduce and HTT...

CVE-2017-12635

CVE-2017-12635 Case study and PoC of CVE-2017-12635 Apache CouchDB 1.7.0 / 2.x 2.1.1 - Remote Privilege Escalation Presentation CouchDB Apache CouchDB is a document-oriented NoSQL database, implemented in Erlang. CouchDB uses multiple formats and protocols to store, transfer, and process it's dat...

CVE-2026-46588

camel-couchdb CouchDb Header Injection Reproducer CVE-2026-46588 This project demonstrates a message-header injection in Apache Camel's camel-couchdb component, tracked as CVE-2026-46588. The component reads several Exchange headers to control its behaviour — CouchDbDatabase, CouchDbSeq, CouchDbI...

audit_couchdb

Audit CouchDB: La evaluación de seguridad simple y clara de CouchDB Audit CouchDB es una herramienta simple con un mensaje poderoso. Dada una URL de Apache CouchDB, te dirá todo lo que siempre quisiste saber sobre su seguridad. Objetivo Audit CouchDB realizará las siguientes acciones: 1. Obtener...

Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit users documents with duplicate keysfor 'roles' used for access control within the database, including the special case 'admin' role, th...

CVE-2023-24706

CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...

CVE-2022-24706

CVE-2022-24706 Apache CouchDB 3.2.1 - Comprobador de Ejecución Remota de Código RCE Uso: nmap -p 4369 --script CVE-2022-24706.nse --script-args cookie=monster,timeout=5000...

audit_couchdb

Auditoría de CouchDB: La evaluación de seguridad simple y clara de CouchDB Audit CouchDB es una herramienta simple con un mensaje poderoso. Dada una URL de Apache CouchDB, te dirá todo lo que siempre quisiste saber sobre su seguridad. Objetivo Audit CouchDB realizará las siguientes acciones: 1...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-

Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post- I wrote a blog post about Apache CouchDB CVE-2022-24706 RCE Exploits...

CVE-2022-24706-CouchDB-Exploit

Apache CouchDB 3.2.1 - Remote Code Execution RCE CVE-2022-24706 Date: 2022-01-21 Exploit Author: Konstantin Burov, @sadshade Software Link: https://couchdb.apache.org/ Version: 3.2.1 and below Tested on: Kali 2021.2 Based on 1F98D's Erlang Cookie - Remote Code Execution Shodan: port:4369 "name...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...

CVE-2022-24706

CVE-2022-24706 Contributors White Hat School 4th Batch 39th Class Geum Jeong-hyeon@junghyeonkum CouchDB Erlang Distribution Remote Command Execution Vulnerability CVE-2022-24706 Summary Apache CouchDB is an open-source document-oriented NoSQL database implemented in Erlang. Because Apache CouchDB...

CVE-2017-12635_36

Lab7-CVE-2017-12635-12636 I. SYSTEM ANALYSIS Identifying Attack Surface Starting with what is running in the environment. I list all active containers: docker ps Victim exposes a single port:5984 ⇒ I curl directly into it to probe for more information: curl -i http://192.168.3.137:5984/ Analyzing...

CVE-2017-12636

Couchdb Arbitrary Command Execution Vulnerability CVE-2017-12636...

...[ More ]

This Metasploit module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read an...

SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution

This module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read and write...

CVE-2026-82243

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

CVE-2026-82243

Budibase Server before 3.41.3 is affected by a server-side request forgery (SSRF) vulnerability in the datasource verify endpoint . The root cause is that builder-level users can supply arbitrary URLs without SSRF validation, allowing them to make server-side requests to attacker-controlled hosts...