rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 يحتوي هذا المستودع على شرح مفصّل وPoC عملي لثغرة تنفيذ الأوامر عن بُعد Remote Command Execution في خادم الملفات Rejetto HTTP File Server HFS 2.3.x. الإعداد: أنشئ مستمعًا عبر netcat. nc -lnvp 1234 غيّر عنوان IP الخاص بالمهاجم إلى عنوان IP...

CVE-2024-23692

POC - Faille RCE non authentifiée dans Rejetto HTTP File Server - CVE-2024-23692 Aperçu POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 est une vulnérabilité critique dans Rejetto HTTP File Server HFS version 2.3m, permettant...

CVE-2024-23692

CVE-2024-23692 - Exécution de code à distance RCE sur Rejetto HFS Une documentation tactique et un guide d'exploitation pour CVE-2024-23692 , une vulnérabilité critique d'exécution de code à distance RCE non authentifiée affectant les versions de Rejetto HTTP File Server HFS antérieures à 2.3m. C...

CVE-2024-23692

Rejetto HTTP File Server HFS استغلال ثغرة RCE غير مصادق عليها CVE-2024-23692 مقدمة Rejetto HTTP File Server HFS هو خادم ملفات HTTP خفيف الوزن، يُستخدم على نطاق واسع لمشاركة الملفات ونقلها. ثغرة CVE-2024-23692 هي ثغرة حقن قوالب Template Injection تسمح لمهاجم عن بعد غير مصادق عليه بتنفيذ أوامر...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

ثغرة SSTI غير موثقة في خادم الملفات HTTP الخاص بـ Rejetto HFS. الـ PoC الأصلي من المكتشف: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ تم الاختبار على الإصدارات: 2.4.0 RC7, 2.3m مثال استخدام: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang انضم إلينا للحصول على ثغرات EXP POC بشكل دوري CVE-2024-23692-RCE-EXP CVE-2024-23692 ثغرة تنفيذ الأوامر عن بعد في خادم Rejetto HTTP HFS FOFA "HttpFileServer" ملاحظات النطاق المتأثر هو إصدارات HFS 2.3 وما دون طريقة الاستخدام How To Use ulimit -n...

hfs-cve-2014-6287-exploit

أداة استغلال HFS CVE-2014-6287 نظرة عامة يحتوي هذا المستودع على أداة استغلال مبنية بلغة Python مصممة لاستغلال الثغرة الأمنية CVE-2014-6287 في خادم ملفات HTTP HFS الإصدارات 2.3.x. تسمح هذه الثغرة للمهاجم بتنفيذ أوامر عشوائية على الخادم، مما قد يؤدي إلى وصول وتحكم غير مصرح به. ⚠️ إخلاء مسؤولية: هذه...

CVE-2024-23692

Vulnérabilité CVE-2024-23692 dans Rejetto HFS HTTP File Server Vue d'ensemble Rejetto HFS HTTP File Server est un serveur de fichiers web simple qui facilite le partage de fichiers sur un réseau ou internet. Malgré sa facilité d'utilisation et sa simplicité, une vulnérabilité critique...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

Ce depot n’a pas de fichier README...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...

The vulnerability of the getDiskSpaceSync module, which is used to determine free disk space in the HTTP File Server 3 file server, allows a hacker to execute arbitrary commands.

The vulnerability of the getDiskSpaceSync function, which is responsible for determining free disk space on the HTTP File Server 3 file server, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

EUVD-2026-43506

Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a crafted username that is written to the error log and executes JavaScript in an administrator's browser when the logs ar...

Exploit for Code Injection in Rejetto Http_File_Server

Optimum --- Optimum – Hack The Box Writeup Overview I...

CVE-2023-4118

A vulnerability, which was classified as problematic, was found in Cute Http File Server 2.0. This affects an unknown part of the component Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

EUVD-2008-0415

Malware in sbrugna...

EUVD-2008-0416

Malware in sbrugna...

EUVD-2008-0418

Malware in sbrugna...

EUVD-2008-0420

Malware in sbrugna...