IIS_6.0_WebDAV_Ruby

IIS6.0WebDAVRuby Exploit de Ruby para el desbordamiento de búfer de IIS 6.0 CVE-2017-7269 Este exploit aprovecha el desbordamiento de búfer de ScStoragePathFromUrl descubierto por Zhiniang Peng y Chen Wu. Uso: ruby exploit.rb Opción de codificación denota opciones obligatorias...

cve-2017-7269

módulo msf corregido para cve-2017-7269 Se corrige el fallo cuando la longitud de la ruta física no es igual a 19, o hay un enlace de host. Se añaden las opciones: PhysicalPathLength, HttpHost para probar: ruta física del host: c:\inetpub\ , longitud=11 root@kitploit: msf use...

Exchange_IOC_Hunter

ExchangeIOCHunter Descripción: Busca IOCs en registros de IIS - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 Artefactos Compatibles: Direcciones IP de C2 utilizadas para escaneo y explotación Nombres de Archivo observados en intentos de explotación Ejecución Remota de Código RCE...

Penetration-Testing-Assessment-23-04-2026

渗透测试报告 – IIS WebDAV 漏洞利用 概述 本项目演示了在易受攻击的目标系统上执行完整的渗透测试生命周期。评估采用结构化方法，包括侦察、扫描、枚举、漏洞利用和后利用。 目标系统是一台运行 Microsoft IIS 6.0 且启用 WebDAV 的 Windows Server 2003 R2 机器，这使其暴露于严重漏洞。 目标 识别目标系统中的漏洞 利用发现的弱点 获取系统的初始访问权限 执行权限提升 评估整体安全态势 推荐缓解策略 工具与技术 Kali Linux Nmap Gobuster Davtest Cadaver Metasploit Framework...

Home-Demolisher

Home-Demolisher CVE-2021-31166 和 CVE-2022-21907 的概念验证 用法： root@kitploit: usage: CVE-2021-31166.py -h -u URL -l LIST -o OUTPUT Description message options: -h, --help show this help message and exit -u URL, --url URL IIS Server url. For instance: 192.168.1.110 -l LIST, --list LIST IIS Server urls...

Progress Telerik Report Server - Authentication Bypass

In Progress Telerik Report Server, version 2024 Q1 10.0.24.305 or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability. id: CVE-2024-4358 info: name: Progress Telerik Report Server - Authenticatio...

GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

...

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

...

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

...

Windows Server 2003 & IIS 6.0 - Remote Code Execution

Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...

Microsoft Windows 'HTTP.sys' - Remote Code Execution

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability." id: CVE-2015-1635 info: name: Microsoft...

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65939

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...

CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

CVE-2026-65941

CVE-2026-65941 affects WhatsUp Gold releases prior to 2026.0.2. An unauthenticated remote attacker with network access to the affected IIS-backed service can execute arbitrary code in the context of the IIS application service account. The CVE is documented by NVD and CVE records, with a high imp...

CVE-2026-65941

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

EUVD-2026-57267

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

EUVD-2026-57264

In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root...