677 matches found
Exploit for Code Injection in Geoserver
CVE-2024-36401 This is a program for checking vulnerabilities...
GeoServer 2.25.1 Code Injection
============================================================================================================================================= | Title : GeoServer 2.25.1 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits...
Exploit for Code Injection in Geoserver
CVE-2024-36401 vulnerability graphical exploitation t...
org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +7 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (1.2.5)
org.springframework:spring-web MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...
Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware
A suspected advanced persistent threat APT originating from China targeted a government organization in Taiwan, and possibly other countries in the Asia-Pacific APAC region, by exploiting a recently patched critical security flaw impacting OSGeo GeoServer GeoTools. The intrusion activity, which w...
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC
We observed Earth Baxia carrying out targeted attacks against APAC countries that involved advanced techniques like spear-phishing and customized malware, with data suggesting that the group operates from China...
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401...
Critical GeoServer Vulnerability Exploited in Global Malware Campaign
A critical GeoServer vulnerability CVE-2024-36401 is being actively exploited, allowing attackers to take control of systems for malware…...
GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware
A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known backdoor called SideWalk. The security vulnerability is a critical remote code execution bug...
GHSA-MCMC-C59M-PQQ8 GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
Exploit for Code Injection in Geoserver
GeoExplorer GeoExplorer is a mass scanner project consisting...
OSGeo GeoServer Installed (Windows)
Binary data osgeogeoserverwininstalled.nbin...
GeoServer Jai-EXT RCE (CVE-2022-24816)
Binary data geoserverjaiextCVE-2022-24816.nbin...
OSGeo GeoServer RCE (CVE-2024-36401)
The version of OSGeo GeoServer installed on the remote host is affected by a remote code executionvulnerability, as follows: - Multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer installation due to...
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC This repository contains a Proof of Conce...
GeoServer Remote Code Execution
GeoServer versions 2.23.6, 2.24.0 2.24.4, 2.25.0 2.25.2 are affected by a vulnerability allowing a remote unauthenticated attacker to execute arbitrary code via a specially forged request due to an unsafely evaluating property names as XPath expressions. No source data...
Exploit for Code Injection in Geoserver
🚀 GeoServer Exploit for CVE-2024-36401 🚀 📝 Description...
GeoWebCache ByteStreamController Component Bypass Security Restrictions
The vulnerability of the GeoWebCache ByteStreamController component in the software for administrative and publishing of geospatial data on the OSGeo GeoServer server is related to an incorrect limitation on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious...