79 matches found
tc_hack
Esta ferramenta usa uma vulnerabilidade no Apache Tomcat chamada CVE 2017 12617 para obter acesso remoto a qualquer servidor com o método PUT ativado. Pode ser baixada aqui você precisará executá-la a partir da linha de comando Uso: tchack IP alvo porta alvo...
CVE-2017-12615
In Erinnerung an Chia Junyuan https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 POC Exploit für Apache Tomcat 7.0.0 bis 7.0.79 unter Windows; CVE-2017-12615 PUT JSP-Schwachstelle. Beschreibung: Standardmäßig ist es nicht erlaubt, JSP-Dateien über die PUT-Methode auf den Apach...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 ist eine kritische Schwachstelle, die zu Remote Code Execution RCE in Apache Tomcat führt. Diese Schwachstelle betrifft die Versionen 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Getestet nur auf 8.0.24. Die Schwachstelle nutzt eine...
CVE-2017-12615
CVE-2017-12615 Utilizzo: CVE-2017-12615.py http://targetip:port Quando gli operatori abilitano stupidamente il metodo PUT in web.xml su Apache Tomcat 7.0.0 - 7.0.79, questo EXP dovrebbe funzionare...
CVE-2016-3088
Apache ActiveMQ PUT RCE Ein-Klick-getshell Verwendung:python3 CVE-2016-3088.py -u https://tartget.com/...
put2win
put2win Script per automatizzare lo sfruttamento del metodo HTTP PUT per ottenere una shell. Installazione root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Utilizzo root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: ...
Tomcat-CVE-2017-12615
Vulnerabilità di scrittura arbitraria di file in Tomcat tramite metodo PUT CVE-2017-12615 中文版本Chinese version Versione Tomcat: 8.5.19 Configurazione dell'ambiente root@kitploit: docker-compose build docker-compose up -d Dopo aver eseguito con successo i comandi sopra, vedrai la pagina di esempio ...
Apache-GOExploiter
🛠 ApacheGoExploiter – Toolkit di Exploit per il Metodo PUT CVE-2025-24813 ApacheGoExploiter è uno strumento proof-of-concept basato su Go per scansionare e sfruttare server Apache Tomcat vulnerabili a CVE-2025-24813. Verifica il supporto HTTP PUT esposto sulla porta 8080 e tenta di caricare file ...
CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership
Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...
GO-2026-5625 goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs...
CVE-2026-39901 monetr: Protected Transactions Deletable via PUT
monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw allows an authenticated tenant user to soft-delete synced non-manual transactions through the transaction update endpoint, despite the application explicitly blocking deleti...
Juju has a resource poisoning vulnerability
Summary Any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This one is very straightforward to just read in the code: Step 1: The authorisation mechanism for the resource handler is defined here. One is on...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...
PT-2025-49017
Name of the Vulnerable Software and Affected Versions Seafile version 12.0.10 Description A stored Cross-Site Scripting XSS issue exists in Seafile. This allows an attacker to execute arbitrary code in a victim’s browser. The issue is caused by storing malicious payloads with the name parameter i...
Mageia: Security Advisory (MGASA-2025-0250)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2020-29733
Malware in sbrugna...