133 matches found
CVE_2021_27850_POC
कमांड उपयोग root@kitploit: git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command 假设 hmac key为 change this...
CVE-2021-27850_POC
استغلال ثغرة CVE-2021-27850 نظرة عامة CVE-2021-27850 هي ثغرة حرجة لتنفيذ الأوامر عن بُعد غير مصرح بها، وُجدت في جميع الإصدارات الحديثة من Apache Tapestry. عن طريق تحميل ملف AppModule.class يمكننا تسريب المفتاح السري HMAC المستخدم لتوقيع جميع الكائنات المسلسلة في Apache Tapestry. واجهنا هذه الثغرة...
Apache Tapestry - Remote Code Execution
Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the...
asf__tapestry-5_CVE-2019-0207_5-4-4
इस रिपॉजिटरी में README नहीं है।...
CVE-2021-27850_POC
Exploit CVE-2021-27850 Visão Geral CVE-2021-27850 é uma vulnerabilidade crítica de execução remota de código não autenticada encontrada em todas as versões recentes do Apache Tapestry. Ao baixar o arquivo AppModule.class, podemos vazar a chave secreta HMAC usada para assinar todos os objetos...
CVE-2026-61899
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
EUVD-2026-55243
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899
CVE-2026-61899 affects tapestry-core (Apache Tapestry 5.5.0+) on all platforms. The issue allows an attacker to download classpath assets via specially crafted URLs, due to a vulnerability in tapestry-core. Impact is described as high with network exploitability and no user interaction. The recom...
CVE-2026-61899 Apache Tapestry: Possible classpath file download through URL manipulation
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899 Apache Tapestry: Possible classpath file download through URL manipulation
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2021-27850
A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Before the fix of CVE-2019-0195 it was...
CVE-2022-31781
Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service ReDoS in the way it handles Content Types. Specially crafted Content Types may cause catastrophic backtracking, taking exponential time to complete. Specifically, this is about the regular expression used on...
EUVD-2019-0738
Malware in sbrugna...
EUVD-2022-3496
Malicious code in bioql PyPI...
EUVD-2022-1222
Malicious code in bioql PyPI...
EUVD-2022-6199
Malicious code in bioql PyPI...
EUVD-2022-1426
Malicious code in bioql PyPI...
