564 matches found
GeoServer 2.25.0 < 2.25.1 Sensitive Information Exposure
According to its banner, the version of GeoServer running on the remote host is 2.10.0 prior to 2.24.4 or 2.25.x prior to 2.25.1. It is, therefore, affected by a Sensitive Information Exposure. Note that the scanner has not tested for these issues but has instead relied only on the application's...
GeoServer < 2.23.4 Path Traversal
According to its banner, the version of GeoServer running on the remote host is prior to 2.23.4. It is, therefore, affected by a Path Traversal. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Exploit for Code Injection in Geoserver
CVE-2024-36401 Usage bash python3 e...
Exploit for Code Injection in Geoserver
CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...
Exploit for Code Injection in Geoserver
CVE-2024-36401-WoodpeckerPlugin Introduction CVE-2024-36...
Exploit for Code Injection in Geoserver
CVE-2024-36401 This is a program for checking vulnerabilities...
GeoServer 2.25.1 Code Injection
============================================================================================================================================= | Title : GeoServer 2.25.1 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits...
Exploit for Code Injection in Geoserver
CVE-2024-36401 vulnerability graphical exploitation t...
Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware
A suspected advanced persistent threat APT originating from China targeted a government organization in Taiwan, and possibly other countries in the Asia-Pacific APAC region, by exploiting a recently patched critical security flaw impacting OSGeo GeoServer GeoTools. The intrusion activity, which w...
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC
We observed Earth Baxia carrying out targeted attacks against APAC countries that involved advanced techniques like spear-phishing and customized malware, with data suggesting that the group operates from China...
Exploit for Code Injection in Geoserver
CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401...
Critical GeoServer Vulnerability Exploited in Global Malware Campaign
A critical GeoServer vulnerability CVE-2024-36401 is being actively exploited, allowing attackers to take control of systems for malware…...
GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware
A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known backdoor called SideWalk. The security vulnerability is a critical remote code execution bug...
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
GHSA-MCMC-C59M-PQQ8 GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
Summary GeoNode is vulnerable to an XML External Entity XXE injection in the style upload functionality of GeoServer leading to Arbitrary File Read. Details GeoNode's GeoServer has the ability to upload new styles for datasets through the datasetstyleupload view. py...
Exploit for Code Injection in Geoserver
GeoExplorer GeoExplorer is a mass scanner project consisting...
OSGeo GeoServer Installed (Windows)
Binary data osgeogeoserverwininstalled.nbin...
GeoServer Jai-EXT RCE (CVE-2022-24816)
Binary data geoserverjaiextCVE-2022-24816.nbin...
OSGeo GeoServer RCE (CVE-2024-36401)
The version of OSGeo GeoServer installed on the remote host is affected by a remote code executionvulnerability, as follows: - Multiple OGC request parameters allow Remote Code Execution RCE by unauthenticated users through specially crafted input against a default GeoServer installation due to...