281 matches found
CVE-2021-31805
CVE-2021-31805 远程代码执行 S2-062 CVE-2021-31805 由于 Apache Struts2 对 S2-061 CVE-2020-17530 的修复不完整，某些标签属性仍可执行 OGNL 表达式，该漏洞允许攻击者构造恶意数据以远程执行任意代码。 CVE202131805POCEXP.py POC pocsuite -r CVE202131805POCEXP.py -u url EXP pocsuite -r CVE202131805POCEXP.py -u url --attack --command "command" 免责声明...
CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION
CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION...
S2-046_S2-045_POC
S2-046POC 使い方: root@kitploit: ./s2046.sh url ./s2045.sh url サンプル: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action 出力: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...
CVE-2024-53677
El POC proviene de https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ Condiciones de RCE 1. Sin restricción en las extensiones de archivo peligrosas 2. El nombre del archivo se obtiene d...
Computer-Security-Equifax-2017
教育用リポジトリは、実際のソフトウェア脆弱性を示しています：Apache Struts2 CVE-2017-5638 RCE、データ流出、弱い暗号化、および緩和策（サニタイゼーション、監視、暗号化のベストプラクティス）。 レッドチーム対ブルーチームのデモ：OSのセキュリティ欠陥に対するエクスプロイト、持続性（バックドア）、および防御技術（監視、TLS検証）。...
test_struts2_vulnerability_CVE-2017-5638
teststruts2vulnerabilityCVE-2017-5638inMACOSX Prueba de la vulnerabilidad Struts2 CVE-2017-5638 en Mac OS X descargar aplicación web de prueba y ejecutarla en tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ...
CVE-2020-17533
一、最近、Apache Struts2 のリモートコード実行の脆弱性（CVE番号：CVE-2020-17530）が発見されました。Apache Struts2フレームワークは、Java EE Webアプリケーションを開発するためのWebフレームワークです。広く使用されているため、脅威の影響範囲は広いです。 二、脆弱性の説明 開発者が %… 構文を使用した場合、攻撃者は悪意のあるOGNL式を構築することで、OGNL式の二次解析を引き起こし、リモートコード実行が可能になります。 三、影響範囲 • Apache Struts 2.0.0 - 2.5.25 四、解決策 Apache...
CVE-2017-5638-Apache-Struts2
CVE-2017-5638 Apache Struts2 Código PHP de ejemplo de PoC Exploit para CVE-2017-5638 Uso php exploit.php "http://127.0.0.1:8080/example/index.action" "command" ÚSALO BAJO TU PROPIO RIESGO...
Allocation of Resources Without Limits or Throttling
Overview org.apache.struts:struts2-core is a popular open-source framework for developing web applications in the Java programming language. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the handling of the localized-text cache. An...
CVE-2026-44668
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invoke without checking for a valid session. Four action methods in BoilerPlateConfig perform no local...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Overview This...
nanshihui__PocCollect.e13e1379
PocCollect !Build Statushttp://nanshihui.github.io/public...
br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +272 more potentially affected by CVE-2025-68493 via org.apache.struts.xwork:xwork-core (>=2.2.1, <=2.3.37)
org.apache.struts.xwork:xwork-core MAVEN version =2.2.1, =2.0.0, =1.2.4, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =2.0.0, =2.2.1 and more Source cves: CVE-2025-68493 Source advisory: OSV:GHSA-QCFC-HMRC-59X7...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +58 more potentially affected by CVE-2025-68493 via com.opensymphony:xwork (>=2.0.4, <=2.1.3)
com.opensymphony:xwork MAVEN version =2.0.4, =1.2.1, =4.0.1, =0.9.2, =1.1.5, =1.3.3, =1.3.1, =2.0.5-incubating, =2.0.9, =2.0.11, =2.0.9, =2.0.9, =2.0.9, =2.1.6 - org.apache.struts:struts2-convention-plugin 2.1.6 and more Source cves: CVE-2025-68493 Source advisory: OSV:GHSA-QCFC-HMRC-59X7...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
SSP ASSIGNEMENT 3 : CVE poc Exploitation of CVE-2017-5638...
CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2025-54253 CVSS score:...
EUVD-2022-1679
Malicious code in bioql PyPI...
K8tools
It is an offensive tool for web application exploitation. The repository, K8tools, contains a collection of tools for various purposes, including internal penetration, privilege escalation, remote overflow, vulnerability exploitation, scanning, password cracking, and evasion. The primary focus is...
Security Bulletin: CVE-2023-50164 affects Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary Vulnerability found in Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-50164 DESCRIPTION:...