86 matches found
CVE-2017-12615
In memory of Chia Junyuan https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 Windows上で動作するApache Tomcat 7.0.0から7.0.79を対象としたPOCエクスプロイトです。CVE-2017-12615 PUT JSP脆弱性。 説明: 設計上、Apache TomcatサーバーではPUTメソッドによるJSPファイルのアップロードは許可されていません。...
put2win
put2win 自动化利用PUT HTTP方法获取Shell的脚本。 安装 git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh 使用 自动化利用PUT HTTP方法获取Shell的脚本。 选项： -t TARGET 目标URL/IP 例如 192.168.1.10 -p PORT 目标端口 例如 8080 -u URL PATH 保存Shell的路径 例如 /uploads -l LOCAL IP 接收Shell连接的IP 例如 192.168.1.5 -s SHELL NAME...
CVE-2016-3088
Apache ActiveMQ PUT RCE ワンクリックgetshell 使い方:python3 CVE-2016-3088.py -u https://tartget.com/...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 は、Apache Tomcat においてリモートコード実行 RCE を引き起こす重大な脆弱性です。 この脆弱性は、バージョン 9.0.0.M1 - 9.0.0、8.5.0-8.5.22、8.0.0.RC1 - 8.0.46、7.0.0 - 7.0.81 に影響します。 検証は 8.0.24 でのみ実施しました。この脆弱性は、アプリケーションまたは Tomcat インスタンス自体で誤設定された PUT オプションを利用します。 PUT を使用してリバースシェルのペイロードをサーバーに送信して実行し、その間 netcat...
CVE-2017-12615
CVE-2017-12615 用法：CVE-2017-12615.py http://targetip:port 当运维人员愚蠢地在 Apache Tomcat 7.0.0 - 7.0.79 的 web.xml 中启用 put 方法时，此 EXP 应能正常工作。...
tc_hack
このツールは、Apache Tomcat における CVE 2017 12617 と呼ばれる脆弱性を利用して、PUT メソッドが有効な任意のサーバーへのリモートアクセスを取得します。 これはここからダウンロードできます（コマンドラインから実行する必要があります） 使用方法： tchack target IP target port...
Tomcat-CVE-2017-12615
Tomcat任意ファイル書き込み脆弱性: PUTメソッド利用 CVE-2017-12615 中文版本Chinese version Tomcatバージョン: 8.5.19 環境セットアップ docker-compose build docker-compose up -d 上記のコマンドが正常に実行されると、サイト http://your-ip:8080 にアクセスすることでTomcatのサンプルページが表示されます。 原理 参考リンク: http://wooyun.jozxing.cc/static/bugs/wooyun-2015-0107097.html...
Apache-GOExploiter
🛠 ApacheGoExploiter – Toolkit di Exploit per il Metodo PUT CVE-2025-24813 ApacheGoExploiter è uno strumento proof-of-concept basato su Go per scansionare e sfruttare server Apache Tomcat vulnerabili a CVE-2025-24813. Verifica il supporto HTTP PUT esposto sulla porta 8080 e tenta di caricare file ...
CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership
Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...
GO-2026-5625 goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs...
CVE-2026-39901 monetr: Protected Transactions Deletable via PUT
monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw allows an authenticated tenant user to soft-delete synced non-manual transactions through the transaction update endpoint, despite the application explicitly blocking deleti...
Juju has a resource poisoning vulnerability
Summary Any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This one is very straightforward to just read in the code: Step 1: The authorisation mechanism for the resource handler is defined here. One is on...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...
PT-2025-49017
Name of the Vulnerable Software and Affected Versions Seafile version 12.0.10 Description A stored Cross-Site Scripting XSS issue exists in Seafile. This allows an attacker to execute arbitrary code in a victim’s browser. The issue is caused by storing malicious payloads with the name parameter i...
Mageia: Security Advisory (MGASA-2025-0250)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2020-29733
Malware in sbrugna...