CVE-2023-36845

CVE-2023-36845 Juniper Networks Junos OS（EX系列和SRX系列）的J-Web中存在一个PHP外部变量修改漏洞，允许未经身份验证的基于网络的攻击者控制某些环境变量。 脚本使用 root@kitploit: $ dos2unix CVE-2023-36845.sh $ CVE-2023-36845.sh example.com...

CVE-2023-36845-POC

CVE-2023-36845 PoC 自动化脚本 该脚本为漏洞 CVE-2023-36845 提供了自动化概念验证（PoC），该漏洞影响 Juniper Networks Junos OS 中 EX 和 SRX 系列设备上的 J-Web 组件。它展示了远程修改 PHP 环境中 PHPRC 变量的可能性，从而导致代码注入和执行。 前提条件 Python 3.x 所需：requests==2.26.0 安装 1. 克隆仓库：git clone https://github.com/cyberh3als/CVE-2023-36845-POC.git 2. cd 你的目录名 3. 安装所需库：p...

CVE-2023-36845

CVE-2023-36845 Juniper JunOS J-Web PHP 外部变量修改 CVE-2023-36845 漏洞利用。...

EUVD-2026-21088

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

Junos J-Web Detection

Binary data junosjwebdetect.nbin...

CVE-2023-36845

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution...

CVE-2022-22182

A Cross-site Scripting XSS vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects: Juniper Networks Junos OS 12....

CVE-2021-31373

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

CVE-2021-0268

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the...

Juniper Networks Junos J-Web Cross-Site Scripting Vulnerability

Juniper Networks Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A cross-site scripting vulnerability exists in Juniper Networks Junos, which arises from the program's...

Juniper Junos J-Web - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Sense of Security - Security Advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating...