37 matches found
CVE-2020-1938
cve-2020-1938 1. 读取文件： python3 tomcat.py URL -f /WEB-INF/web.xml 示例： python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2. 执行shell add --rec 1 参考： https://www.t00ls.net/articles-55062.html...
CVE-2026-52102-PoC
CVE-2026-52102 - PoC de Exploit Una Prueba de Concepto PoC que demuestra CVE-2026-52102. Uso python3 CVE-2026-52102-PoC.py Objetivos Añade un objetivo por línea al archivo targets.txt. Nota: Solo incluye sistemas que te pertenezcan o para los que tengas autorización explícita para probar. Ejemplo...
CVE-2017-18349
Lab 6-CVE-2017-18349 一、系统分析 攻击面识别 首先，我们看看环境中运行了哪些内容。我列出所有活跃容器： docker ps 受害者仅暴露一个端口：8090 目前，我尚未完全清楚目标。从docker ps的结果来看，系统仅对外暴露了一个值得注意的服务，端口8090，映射到容器的内部服务。这是需要分析的主要攻击面。 ⇒ 我直接对其进行curl探测以获取更多信息 curl -i 192.168.3.137:8090/ 响应分析： 响应头中有 Content-Type: application/json;charset=UTF-8。 返回数据为JSON格式："age": 2...
CVE-2019-13956
CVE-2019-13956 cd CVE-2019-13956 docker-compose up -d http://127.0.0.1:8090...
CVE-2024-51378
CVE-2024-51378 CVE-2024-51378漏洞分析，用于搜索脆弱主机、单线程和多线程模式下利用漏洞的Python及nuclei脚本。脚本仅允许在教学环境中用于测试主机。 1-CVE-2024-51378.pdf - 主要文件，包含工作结果的文字描述 2-exploit - 第2部分工作文件 51378use.py – 用于单线程模式下应用漏洞利用的文件，允许用户向启动时指定的URL发送命令序列。 启动示例：python3 51378use.py https://157.13.218.109:8090 3-scan - 第3部分工作文件 port8090.txt -...
CVE-2026-22095
The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22096
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22103
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22103 Command injection in NPC start web endpoint
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
EUVD-2026-43333
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22103
CVE-2026-22103 : The NPC start endpoint on the web server listening at port 8090 is vulnerable to command injection. The public CVSS v4.0 metrics indicate a base score of 9.3 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and no user interaction. Impacts are...
CVE-2026-22103 Command injection in NPC start web endpoint
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22096 Missing authentication for webserver endpoints
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22096
CVE-2026-22096 concerns a webserver running on port 8090 that does not require authentication, enabling sensitive information leakage (e.g., configured passwords) and file uploads via multiple endpoints. The Connected documents provide the same description across NVD and CVE records, with no vend...
EUVD-2026-43328
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22096 Missing authentication for webserver endpoints
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22095 Command injection in diagnosis web endpoint
The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22095
The CVE-2026-22095 entry describes a command injection vulnerability in the network diagnosis endpoint of a web server listening on port 8090. Details from connected sources confirm the affected component is the diagnosis endpoint (web server) and that exploitation would allow command execution w...