EUVD-2026-84380

In MISP, the CollectionsController add method enforced the sharing-group usability authorization check and element capture only when the HTTP request method was POST. However, the underlying CRUDComponent::add method persists data on both POST and PUT requests. As a result, an authenticated user...

CVE-2026-95671

CVE-2026-95671 affects MISP (Malware Information Sharing Platform). The CollectionsController add() method only enforced the sharing-group authorization check for POST requests, while the underlying CRUDComponent::add() persists data on both POST and PUT requests. An authenticated user could ther...

CVE-2025-24813

CVE-2025-24813 - Apache Tomcat 원격 코드 실행 익스플로잇 이는 CVE-2025-24813 에 대한 개념 증명PoC 익스플로잇입니다. Apache Tomcat9.0.80–9.0.83, 10.1.0–10.1.17의 취약점으로, 세션 역직렬화를 통해 원격 코드 실행RCE이 가능합니다. 이 익스플로잇은 부분 PUT 요청과 PersistentManager 세션 저장 메커니즘을 악용하여 코드 실행을 달성합니다. Description Apache Tomcat은 불완전한 파일 업로드를 잘못 처리합니다. 공격자는...

Hoverfly < 1.10.3 - Arbitrary File Read

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary...

CVE-2025-24813

Apache Tomcat 認証なしRCE - CVE-2025-24813 このリポジトリは、CVE-2025-24813 脆弱性を評価するためのガイドとテスト環境を提供します。 詳細 影響を受けるバージョン: Apache Tomcat 11.0.0-M1 から 11.0.2 Apache Tomcat 10.1.0-M1 から 10.1.34 Apache Tomcat 9.0.0.M1 から 9.0.98 参考資料 CVE-2025-24813 勧告 Apache 発表 脆弱性をテストする手順 1. 以下のコマンドを実行して、脆弱なApache...

CVE-2025-24813

CVE-2025-24813 Apache Tomcat의 취약점 CVE-2025-24813에 대한 개념 증명PoC 스크립트입니다. 이 스크립트는 관련 링크를 기반으로 수정되었으며 제 필요에 맞게 조정되었습니다. 취약한 Tomcat 환경 설정 공식 Tomcat 9.0.90 이미지를 기반으로 한 환경입니다. 서버의 읽기 전용 제한을 제거하고 세션 데이터를 디스크에 저장하도록 구성합니다. 그런 다음 ROOT.war 파일을 Tomcat의 webapps/ 디렉터리에 복사하여 자동으로 애플리케이션을 배포합니다. root@kitploit:...

Tomcat-CVE-2025-24813

사용 조건 DefaultServlet 쓰기 기능 활성화: web.xml에서 readonly=false로 설정해야 함 부분 PUT 요청 지원: Tomcat은 기본적으로 블록 업로드를 지원함 파일 세션 지속성 활성화: context.xml에서 PersistentManager와 FileStore를 구성해야 함 역직렬화 익스플로잇 체인 존재: 클래스 경로에 취약한 라이브러리가 포함되어 있어야 함 영향 9.0.0.M1 readonly false 2. conf/context.xml에서 파일 세션 저장을 활성화해야 합니다...

CVE-2017-12615

curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...

CVE-2020-13768

🐞 CVE-2020-13768: MiniShare 1.4.1 - スタックベースのバッファオーバーフロー MiniShare 1.4.1 におけるスタックベースのバッファオーバーフロー。単一の HTTP PUT リクエストで到達可能。 📑 目次 このリポジトリの意図 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュの再現 エクスプロイト 🎓 このリポジトリの意図 このリポジトリは、メモリ破壊エクスプロイトの教育用資料の一部です（普段の業務に加えて、私は複数のサイバーセキュリティコースで教鞭をとり、次世代のリバースエンジニアを育成しています）。...

EUVD-2026-80933

SIMAC MyPHR 1.1 contains an insecure direct object reference IDOR vulnerability that allows authenticated attackers to access and modify arbitrary employee records due to missing server-side ownership validation. Attackers can send a PUT request to the employee update endpoint with an arbitrary...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve によるディレクトリ保護バイパス → PUT ベースの RCE🚨🚨 概要 CVE-2025-55752 は、Apache Tomcat においてバグ 60013 の修正中に導入されたセキュリティリグレッションです。Rewrite Valve が使用されている場合、Tomcat は URL デコード の前に パス正規化 を適用します。この誤った順序により、StandardContextValve.java で実装されている /WEB-INF/ や /META-INF/...

CVE-2026-27562

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27564

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27564 Command Injection via PUT in /api/datastorage/data

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27564

CVE-2026-27564 is a command injection vulnerability in the /api/datastorage/data endpoint, where a remote attacker holding admin credentials can send a PUT request to execute arbitrary commands with root privileges on the device. The specific affected product is not named in the provided document...

EUVD-2026-80247

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device...

CVE-2026-27562

CVE-2026-27562 is a command injection vulnerability in the /api/iodd/config endpoint. A remote attacker with admin-level credentials can send a crafted PUT request to execute arbitrary commands with root privileges on the affected device. The CVSS 3.1 score is 7.2 (HIGH) (AV:N/AC:L/PR:H/UI:N/S:U/...

cve-2019-6715

cve-2019-6715 感谢 TomNomNom，其代码贡献了本工具的 99.9%.... 构建 root@kitploit: go get github.com/fatih/color go build 用法 root@kitploit: cat list.txt | ./2019-6715 所有存在漏洞的 URL 都会记录在 text.log 中 CVE 2019-6715 描述：WordPress 的 W3 Total Cache 插件 0.9.4 之前版本中的 pub/sns.php 允许远程攻击者通过 SubscriptionConfirmation JSON 数据中的...

CVE-2023-3722

CVE-2023-3722 CVE-2023-3722 Avaya Aura Device Services 무제한 파일 업로드 RCE에 대한 Python POC입니다. 이 스크립트는 PUT 요청을 사용하여 8자리 무작위 생성 파일 이름으로 PHP 파일을 업로드합니다. 그런 다음 GET 요청을 통해 이 파일을 검색하고 출력을 파싱하여 명령 출력을 얻습니다. 실행 root@kitploit: python3 ./CVE-2023-3722.py example.com:444 --query "id" root@kitploit: python3...

CVE-2026-82920

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7 fail to enforce authorization boundaries on the access control policy update endpoint which allows a channel or team administrator to detach a system-assigned ABAC parent policy via a crafted PUT /api/v4/accesscontrolpolicies...