SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 Missing Authentication Check in SAP Solution Manager This script allows to check and exploit missing authentication checks in SAP EEM servlet tcsmdagentapplicationeem that lead to RCE on SAP SMDAgents connected to SAP Solution Manager Original finding: Pablo Artuso Yvan 'igg...

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra Path Traversal Vulnerability 📋 Overview CVE-2025-68645 is a path traversal vulnerability in Zimbra Collaboration Suite that allows unauthenticated attackers to read arbitrary files from the server's filesystem. Vulnerable Endpoint...

grails3-cve-2022-27772

grails3-cve-2022-27772 The Grails® framework 3.3 application provides custom implementation for TomcatEmbeddedServletContainerFactory which overrides createTempDirectory method implementation. The custom implementation is then used to create EmbeddedServletContainer bean from Application.groovy...

CVE-2020-9484

CVE-2020-9484 Tomcat For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy Check clean $ docker exec -it $CONTAINER ls...

Spring Framework - Path Traversal

Spring Framework MVC applications deployed as WAR or with embedded Servlet containers that do not reject suspicious URI sequences and serve static resources with Spring resource handling contain a path traversal vulnerability, letting attackers access unauthorized files, exploit requires...

CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability

CVE-2025-68645 — Zimbra Classic UI LFI Defender Pack This repository is a defender-focused reference pack for CVE-2025-68645 , a Local File Inclusion LFI issue in Zimbra Collaboration ZCS 10.0.x and 10.1.x Classic Webmail UI caused by improper handling of user-controlled request parameters in the...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

damn-vulnerable-log4j-app

SnapAttack Log4j / CVE-2021-44228 / log4shell Resources What's included? Damn Vulnerable Log4j App damn-vulnerable-log4j-app contains a basic vulnerable Java Servlet that logs the User Agent, HTTP GET and POST parameters with log4j. It is packaged as a .war file and can be deployed to servers lik...

CVE-2019-17638-Jetty

JETTY The Jetty project is a 100% Java HTTP Server, HTTP Client and Servlet Container from the eclipse foundation http://www.eclipse.org/jetty/ Jetty is open source and is dual licensed using the Apache 2.0 and Eclipse Public License 1.0. You may choose either license when distributing Jetty...

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra Local File Inclusion LFI Analysis 📌 Overview This document describes a Local File Inclusion LFI vulnerability affecting Zimbra Collaboration Suite. The issue arises from improper handling of the following parameter: /h/?javax.servlet.include.servletpath= This allows an...

CVE-2019-8451

CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

CVE-2023-22047

Description: CVE-2023-22047 is unauthentication read file on oracle-peoplesoft. However, advance exploit attacker can use this vulnerability to execute remote code execution. In the peoplesoft application "Portal.war"," Serlet "WSRP Consumer ResourceProxy" enables the ability to read files and ma...

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit to create a new admin user Compromised audit log: As a reverence served: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html and https://github.com/Chocapikk/CVE-2023-22515 pluginshellplug.j...

CVE-2019-0232

CVE-2019-0232 Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution RCE Video PoC available at https://www.youtube.com/watch?v=RA7kzuHOWqA Details Apache Tomcat has a vulnerability in the CGI Servlet, which can be exploited to achieve remot...

CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat has a vulnerability in the CGI Servlet which ca...

Confluence-EvilJar

aaaademo/Confluence-EvilJar Use CVE-2023-22515 to upload a jar package via the backend to achieve RCE. git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell http://confluence.local/plugins/servlet/testbin/cmServlet Godzilla webshell connection method...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. 0x00 Dork shodan title:"GoAnywhere" FOFA title="GoAnywhere" 0x01 Use Java Version java -version openjdk...

web-inf-path-trav

WebXMLExp.py Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications. This tool is referenced in the Invicti Security white paper Exploiting path traversal vulnerabilities in Java web applications. Install Python3 is required for this tool. Run the followin...

CVE-2019-0232

Vulnerability Environment Tomcat 8.5.39 Jdk 8u121 Edit web.xml file cgi org.apache.catalina.servlets.CGIServlet debug 0 cgiPathPrefix WEB-INF/cgi-bin executable 5 cgi /cgi-bin/ Edit content.xml file WEB-INF/web.xml $catalina.base/conf/web.xml...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Apache Tomcat CGI Servlet Remote Code Execution This repository provides a Docker-based lab environment to reproduce the CVE-2019-0232 vulnerability in Apache Tomcat 9.0.17 on Windows. Vulnerability Overview CVE-2019-0232 is a remote code execution vulnerability in the Apache Tomc...