CVE-2017-5638

LAB 1 — Iniezione OGNL in Apache Struts2 CVE-2017-5638 / S2-045 I. ANALISI DEL SISTEMA Analisi della Superficie di Attacco Dopo aver avviato il container, i log di Struts2 mostrano che l'applicazione carica file di configurazione noti come struts-default.xml , struts-plugin.xml e struts.xml. Ciò...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Einleitung: Apache Struts 2 ist ein Open-Source-Webanwendungsframework zur Entwicklung von Java EE-Webanwendungen. Es ist die zweite Generation des Struts-Frameworks, das erstmals am 10. Oktober 2006 veröffentlicht wurde. Das Struts-Framework ist so konzipiert, dass ...

struts2_cve-2017-5638

struts2cve-2017-5638 Questa è una sorta di porting in Java dell'exploit Python disponibile su: https://www.exploit-db.com/exploits/41570/. Questo software è scritto per non avere dipendenze esterne. DISCLAIMER Questo strumento è pensato per ingegneri della sicurezza e addetti appsec per valutazio...

CVE-2017-5638

CVE-2017-5638 Die Apache Struts 2 Versionen 2.3.x vor 2.3.32 und 2.5.x vor 2.5.10.1 weisen einen Fehler in ihrem Jakarta Multipart-Parser auf. Dieser Fehler führt zu einer fehlerhaften Behandlung von Ausnahmen und zur Generierung von Fehlermeldungen beim Versuch, Dateien hochzuladen. Infolgedesse...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 Script di test della vulnerabilità XworkStruts RCE Il parser Jakarta Multipart in Apache Struts 2 2.3.x precedenti a 2.3.32 e 2.5.x precedenti a 2.5.10.1 ha una gestione delle eccezioni e una generazione dei messaggi di errore errate durante i tentativi di caricament...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Beispiel:...

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 发布时间 2017-03-07 危害级别 高 AV:N/AC:L/Au:N/C:C/I:C/A:C 影响产品 Apache struts =2.3.5，=2.5， CVE-Identifikator CVE-2017-5638 Problem Es ist möglich, einen RCE-Angriff mit einem bösartigen Content-Type-Wert durc...

PoC-CVE-2017-5638

PoC: Apache Struts2 CVE-2017-5638 Demo Educativa Sicura 📌 Panoramica Questo progetto è una Proof-of-Concept PoC per CVE-2017-5638 , una famosa vulnerabilità di Apache Struts2 che consentiva agli attaccanti di eseguire codice arbitrario sui server interessati. ⚠️ Questo repository contiene una demo...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.0 RCE-Sicherheitslücke Dies ist ein Skript zur Ausnutzung von CVE-2017-5638 - Es ermöglicht einem Angreifer, über den Content-Type-Header Betriebssystembefehle in eine Webanwendung einzuschleusen. Apache Struts 2 ist ein Open-Source-Webanwendungsframework zur...

CVE-2026-74866

@fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only on the two-byte carriage-return line-feed sequence, so a lone carriage return or line feed embedded in a part header is not treated as a line break and is carried verbatim into t...

EUVD-2026-63829

@fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only on the two-byte carriage-return line-feed sequence, so a lone carriage return or line feed embedded in a part header is not treated as a line break and is carried verbatim into t...

CVE-2026-74866 @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

@fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only on the two-byte carriage-return line-feed sequence, so a lone carriage return or line feed embedded in a part header is not treated as a line break and is carried verbatim into t...

CVE-2026-74866

@fastify/busboy (a multipart form-data parser for Node.js) is vulnerable to CRLF injection via the Content-Disposition filename and field name. The part-header parser splits lines only on the two-byte CRLF sequence, so a lone carriage return or line feed embedded in a part header is carried verba...

CVE-2026-74866 @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

@fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only on the two-byte carriage-return line-feed sequence, so a lone carriage return or line feed embedded in a part header is not treated as a line break and is carried verbatim into t...

CVE-2026-19508

A heap-based buffer overflow in jst_post.c (multipart form-data parser) in RDK-B WebUI version rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to send a crafted multipart/form-data request, causing memory corruption, denial of service, and potentially arbitrary code execut...

EUVD-2026-62718

Heap-based buffer overflow in the multipart form-data parser in jstpost.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request...

CVE-2026-19481

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

CVE-2026-19484

@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...

EUVD-2026-57757

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

CVE-2026-19481 @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...