79 matches found
tc_hack
Этот инструмент использует уязвимость в Apache Tomcat, известную как CVE-2017-12617, для получения удаленного доступа к любому серверу с включенным методом PUT. Его можно скачать здесь вам потребуется запустить его из командной строки Использование: tchack target IP target port...
CVE-2017-12615
À la mémoire de Chia Junyuan https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 Exploit POC pour Apache Tomcat 7.0.0 à 7.0.79 fonctionnant sous Windows ; vulnérabilité PUT JSP CVE-2017-12615. Description : Par conception, il n'est pas autorisé de télécharger des fichiers JSP v...
put2win
put2win نص برمجي لأتمتة استغلال طريقة HTTP PUT للحصول على شيل. التثبيت root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh الاستخدام root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g...
Tomcat-CVE-2017-12615
Уязвимость произвольной записи файлов в Tomcat через метод PUT CVE-2017-12615 中文版本Chinese version Версия Tomcat: 8.5.19 Настройка окружения root@kitploit: docker-compose build docker-compose up -d После успешного выполнения указанных выше команд вы увидите пример страницы Tomcat, перейдя по адрес...
CVE-2016-3088
Apache ActiveMQ PUT RCE одним кликом getshell usage:python3 CVE-2016-3088.py -u https://tartget.com/...
Apache-GOExploiter
🛠 ApacheGoExploiter – CVE-2025-24813 PUT 메서드 익스플로잇 툴킷 ApacheGoExploiter는 CVE-2025-24813 에 취약한 Apache Tomcat 서버를 스캔하고 익스플로잇하기 위한 Go 기반 개념 증명 도구입니다. 8080 포트에서 노출된 HTTP PUT 지원을 테스트하고 쓰기 가능한 디렉터리에 테스트 또는 셸 파일을 업로드하려 시도합니다. 📸 데모...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617은 Apache Tomcat에서 원격 코드 실행RCE으로 이어지는 치명적인 취약점입니다. 이 취약점은 버전 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81에서 작동합니다. 오직 8.0.24에서만 테스트되었습니다. 취약점은 애플리케이션 또는 Tomcat 인스턴스 자체에서 잘못 구성된 PUT 옵션을 이용합니다. PUT을 사용하여 리버스 셸 페이로드를 서버로 전송하고 실행하며, netcat으로 수신 대기합니다...
CVE-2017-12615
CVE-2017-12615 Utilisation : CVE-2017-12615.py http://targetip:port Lorsque les opérateurs activent bêtement la méthode PUT dans web.xml sur Apache Tomcat 7.0.0 - 7.0.79, cet EXP devrait fonctionner...
CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership
Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...
GO-2026-5625 goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs...
CVE-2026-39901 monetr: Protected Transactions Deletable via PUT
monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw allows an authenticated tenant user to soft-delete synced non-manual transactions through the transaction update endpoint, despite the application explicitly blocking deleti...
Juju has a resource poisoning vulnerability
Summary Any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This one is very straightforward to just read in the code: Step 1: The authorisation mechanism for the resource handler is defined here. One is on...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...
PT-2025-49017
Name of the Vulnerable Software and Affected Versions Seafile version 12.0.10 Description A stored Cross-Site Scripting XSS issue exists in Seafile. This allows an attacker to execute arbitrary code in a victim’s browser. The issue is caused by storing malicious payloads with the name parameter i...
Mageia: Security Advisory (MGASA-2025-0250)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2020-29733
Malware in sbrugna...