h2: Loading of custom classes from remote servers through JNDI

A flaw was found in the H2 Console. This flaw allows remote attackers to execute arbitrary code via a JDBC URL, concatenating with a substring that allows remote code execution by using a script...

VulnCheck KEV: CVE-2014-0114

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrar...

Log4Shell HTTP Header Injection

Versions of Apache Log4j2 impacted by CVE-2021-44228 which allow JNDI features used in configuration, log messages, and parameters, do not protect against attacker controlled LDAP and other JNDI related endpoints. This module will exploit an HTTP end point with the Log4Shell vulnerability by...

Exploit for CVE-2020-2551

WebLogic-CVE-2020-2551-To-Internet CVE-2020-2551: POC fo...

Java deserialization vulnerability of the weblogic local use to achieve article-vulnerability warning-the black bar safety net

weblogic in the domestic scope of application more widely, supporting many of the company's core business, it has not put the weblogic to use the tool to publish it. However, many recent Party a friend asked me if I had a convenient tool to detect their companies deployed in the network of...

WordPress acento theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress acento theme Arbitrary File Download Vulnerability Author : alieye vondor : http://www.wpbyexample.com/detail/acentocultural.com Contact : email protected Risk : High...

Java RMI Server Insecure Endpoint Code Execution Scanner

Detect Java RMI endpoints Module Options msf use auxiliary/scanner/misc/java/rmiserver msf undefinedrmiserver show actions ...actions... msf undefinedrmiserver set ACTION msf undefinedrmiserver show options ...show and set options... msf undefinedrmiserver run This module requires Metasploit:...

Java RMI Server Insecure Default Configuration Java Code Execution

This module takes advantage of the default configuration of the RMI Registry and RMI Activation services, which allow loading classes from any remote HTTP URL. As it invokes a method in the RMI Distributed Garbage Collector which is available via every RMI endpoint, it can be used against both...

Java RMI Services Default Configuration Remote Loading

Added: 07/29/2011 Background The Java Remote Method Invocation RMI system allows an object running in one Java virtual machine to invoke methods on an object running in another Java virtual machine. RMI provides for remote communication between programs written in the Java programming language...

Java RMI Server Insecure Default Configuration Java Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Java RMI Server Insecure Default...

KnowledgeBuilder 2.2 - visEdit_Control.Class.php Remote File Inclusion

KnowledgeBuilder 2.2 - visEditControl.Class.php Remote File Inclusion source: https://www.securityfocus.com/bid/20857/info KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

GrapAgenda 0.1 - 'page' Remote File Inclusion

Kurdish Security Advisory Original Advisory : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html Script : GrapAgenda Site : http://www.graphiks.net Version : 0.1 Risk : High Class : Remote Contact : [email protected] and irc.gigachat.net kurdhack Nice cracker...

faqscript.txt

Kurdish Security FAQ Script v1.0 Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : FAQ Script Site : http://www.knusperleicht.at Code : //if the script is includet you have to set this path else the path...

quickie.txt

Kurdish Security Quickie Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : Kurdish Security FileManager Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack &...

PgMarket 2.2.3 - CFG[libdir] Remote File Inclusion

PgMarket 2.2.3 - CFGlibdir Remote File Inclusion C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit:...

a6mambohelpdesk Mambo Component <= 18RC1 Remote Include Vulnerability

a6mambohelpdesk Mambo Component = 18RC1 Remote Include Vulnerability Rish : High Class : Remote Script : a6mambohelpdesk Thanx : www.lezr.com/vb codes ? include "$mosConfiglivesite/components/coma6mambohelpdesk/about.html" ; ? d0rkiz : allinurl:"coma6mambohelpdesk"...

SAXON 4.6 Version - Remote File Include Vulnerabilities

SaVSaK.CoM | SpC-x - The-BeKiR | SAXON 4.6 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : SAXON Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : include"functions.php"; include "config.php"; include $template; Vulnerable ...

# MHG Security Team ---Rumble 1.02 version Remote File Inc.

Milli-Harekat Advisory www.milli-harekat.org Rumble = 1.02 version - Remote File Include Vulnerabilities Risk : high Class: Remote Script : Rumble 1.02 version Msn : erne at ernealizm dot com Credits : ERNE Thanks : DjReMix,Thebekir,SpC-x,Eskobar,Blackened,Poizonbox,Dilejyoner And ALL MHG USERS...

# MHG Security Team --- Gallery Upload Vulnerabilities

Milli-Harekat Advisory www.milli-harekat.org Gallery Upload Vulnerabilities Risk : High Class: Remote Script : Gallery Scripts Credits : Dj ReMix Thanks : Яy Korsan , Liz0zim ,ESOBAR, PoizinBo0x ,TRIP ,ERNE ,CyberWolf... Vulnerable Scripts : DUGallery v1.x Dugallery v2.x DuPortal v2.x DuBanner Al...