522 matches found
Exploit for Code Injection in Geoserver
CVE-2024-36401 Usage bash python3 e...
Exploit for Code Injection in Geoserver
CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...
Exploit for Code Injection in Geoserver
CVE-2024-36401-WoodpeckerPlugin Introduction CVE-2024-36...
Exploit for Code Injection in Geoserver
CVE-2024-36401 This is a program for checking vulnerabilities...
GeoServer 2.25.1 Code Injection
============================================================================================================================================= | Title : GeoServer 2.25.1 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits...
Exploit for Code Injection in Geoserver
CVE-2024-36401 vulnerability graphical exploitation t...
Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware
A suspected advanced persistent threat APT originating from China targeted a government organization in Taiwan, and possibly other countries in the Asia-Pacific APAC region, by exploiting a recently patched critical security flaw impacting OSGeo GeoServer GeoTools. The intrusion activity, which w...
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC
We observed Earth Baxia carrying out targeted attacks against APAC countries that involved advanced techniques like spear-phishing and customized malware, with data suggesting that the group operates from China...
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401...
Critical GeoServer Vulnerability Exploited in Global Malware Campaign
A critical GeoServer vulnerability CVE-2024-36401 is being actively exploited, allowing attackers to take control of systems for malwareβ¦...
GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware
A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known backdoor called SideWalk. The security vulnerability is a critical remote code execution bug...
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
GHSA-MCMC-C59M-PQQ8 GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
Exploit for Code Injection in Geoserver
GeoExplorer GeoExplorer is a mass scanner project consisting...
OSGeo GeoServer Installed (Windows)
Binary data osgeogeoserverwininstalled.nbin...
GeoServer Jai-EXT RCE (CVE-2022-24816)
Binary data geoserverjaiextCVE-2022-24816.nbin...
OSGeo GeoServer RCE (CVE-2024-36401)
The version of OSGeo GeoServer installed on the remote host is affected by a remote code executionvulnerability, as follows: - Multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer installation due to...
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC This repository contains a Proof of Conce...
GeoServer Remote Code Execution
GeoServer versions 2.23.6, 2.24.0 2.24.4, 2.25.0 2.25.2 are affected by a vulnerability allowing a remote unauthenticated attacker to execute arbitrary code via a specially forged request due to an unsafely evaluating property names as XPath expressions. No source data...