349 matches found
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell Reimplementation Environment Example Explanation...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Spring Boot Log4j - CVE-2021-44228 The Log4Shell vulnerabilit...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228-Demo Examples of remote code execution using C...
MobileIron Core Unauthenticated JNDI Injection RCE (via Log4Shell)
MobileIron Core is affected by the Log4Shell vulnerability whereby a JNDI string sent to the server will cause it to connect to the attacker and deserialize a malicious Java object. This results in OS command execution in the context of the tomcat user. This module will start an LDAP server that...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Join Community Telegram CVE-2021-4...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4J-RCE-Proof-Of-Concept CVE-2021-44228 This is a proof o...
Apache Log4j 代码问题漏洞
Apache Log4j is a U.S. Apache Apache Foundation of a Java-based open source logging tool . Apache Log4j There is a code problem vulnerability , due to the existence of JNDI injection vulnerability in ApacheLog4j , an attacker can design a data request to send to the server using the ApacheLog4j...
UniFi Network Application Unauthenticated JNDI Injection RCE (via Log4Shell)
The Ubiquiti UniFi Network Application versions 5.13.29 through 6.5.53 are affected by the Log4Shell vulnerability whereby a JNDI string can be sent to the server via the 'remember' field of a POST request to the /api/login endpoint that will cause the server to connect to the attacker and...
VMware vCenter Server Unauthenticated JNDI Injection RCE (via Log4Shell)
VMware vCenter Server is affected by the Log4Shell vulnerability whereby a JNDI string can sent to the server that will cause it to connect to the attacker and deserialize a malicious Java object. This results in OS command execution in the context of the root user in the case of the Linux virtua...
Oracle Business Intelligence UpdateConnectionServlet JNDI Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Business Intelligence. Authentication is required to exploit this vulnerability. The specific flaw exists within the UpdateConnectionServlet class. The issue results from the lack of proper...
SpringBootVulExploit
It is an offensive tool for Spring Boot exploitation. The repository contains a collection of exploits and techniques for exploiting Spring Boot applications, including: Spring Boot Vulnerability Exploit Check List: a checklist for identifying vulnerabilities in Spring Boot applications...
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞 0x00 简介 jackson-databind 是隶属 FasterXML 项目组下的JSON处理库。 0x01 漏洞概述 2月19日，NVD发布安全通告披露了jackson-databind由JNDI注入导致的远程代码执行漏洞（CVE-2020-8840），CVSS评分为9.8...
Exploit for CVE-2021-2109
CVE-2021-2109: WebLogic Server Remote Code Execution Vulnerabili...
Oracle WebLogic Server 14.1.1.0 - RCE (Authenticated)
Exploit Title: Oracle WebLogic Server 14.1.1.0 - RCE Authenticated Date: 2021-01-21 Exploit Author: Photubias Vendor Advisory: 1 https://www.oracle.com/security-alerts/cpujan2021.html Vendor Homepage: https://www.oracle.com Version: WebLogic 10.3.6.0, 12.1.3.0, 12.2.1.3, 12.2.1.4, 14.1.1.0 fixed ...
SpringBootVulExploit
This repository contains a collection of Spring Boot vulnerability exploit checklists, which are used for authorized testing and security research purposes. The repository includes various exploits and techniques for exploiting Spring Boot applications, including: 1. Spring Boot Vulnerability...
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
cve-2020-24616-poc cv...
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
CVE-2020-8840: FasterXML/jackson-databind remote code executio...
FasterXML jackson-databind Remote Code Execution Vulnerability
FasterXML jackson-databind is a simple Java-based application library , Jackson can easily convert Java objects into json objects and xml documents , the same can be json, xml into Java objects . A remote code execution vulnerability exists in FasterXML jackson-databind. The vulnerability hi due ...
