vulhub

Vulhub — это открытая коллекция готовых к использованию уязвимых Docker-сред. С помощью одной команды вы можете запустить уязвимое окружение для исследований, обучения или демонстрации, даже без предварительного опыта работы с Docker. 中文版本Chinese version Быстрый старт...

Ruby On Rails - Local File Inclusion

Ruby On Rails is vulnerable to local file inclusion caused by secondary decoding in Sprockets 3.7.1 and lower versions. An attacker can use %252e%252e/ to access the root directory and read or execute any file on the target server. id: CVE-2018-3760 info: name: Ruby On Rails - Local File Inclusio...

Apache Solr DataImportHandler <8.2.0 - Remote Code Execution

Apache Solr is vulnerable to remote code execution vulnerabilities via the DataImportHandler, an optional but popular module to pull in data from databases and other sources. The module has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug...

Kibana - Local File Inclusion

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

PhpMyAdmin Scripts - Remote Code Execution

PhpMyAdmin Scripts 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 are susceptible to a remote code execution in setup.php that allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. Combined with the ability to save files on server, this can allow...

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...

Gogs (Go Git Service) 0.11.66 - Remote Code Execution

Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron. id: CVE-2018-18925 info: name: Go...

Apache Tomcat Servers - Remote Code Execution

Apache Tomcat servers 7.0.0 to 79 are susceptible to remote code execution. By design, you are not allowed to upload JSP files via the PUT method. This is likely a security measure to prevent an attacker from uploading a JSP shell and gaining remote code execution on the server. However, due to t...

Spring Security OAuth2 Remote Command Execution

Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...

POC_CVE-2023-21839

CVE-2023-21839 특별한 요구에 따라 @4ra1n님의 GO 버전을 Python으로 번역했습니다. 다시 한번 감사드립니다! 면책 조항 이 프로그램은 승인된 보안 테스트 및 연구 목적으로만 사용해야 하며, 사용자는 네트워크 보안법에 따라 합법적으로 사용해야 합니다. 사용자가 이 도구를 사용하여 불법 공격 등 위법 행위를 저지른 경우, 그 책임은 작성자와 무관합니다. 사용법 vulhub 재현: 링크 root@kitploit: / /\ //\ | \ / \ | / | / | // \ / / \ \ / /\ | | | |...

vulhub-apache

此存储库没有 README。...

St2-057

St2-057 온라인 타깃 머신 환경, Enjoy! 0x01 docker 환경 구축 https://github.com/vulhub/vulhub/tree/master/struts2/s2-048 root@kitploit: docker-compose up -d 0x02 st2-057 취약점 환경 구축 root@kitploit: docker exec -i -t 88fd8d560155 /bin/bash 백그라운드로 시작하여 docker에 진입 공지에 따르면 https://struts.apache.org/releases.html...

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub CVE-2025-24813 vulhub 환경의 POC 스크립트 이 취약점의 활용에 대해 많은 분들이 어려움을 겪고 있어, vulhub에서의 취약점 활용을 돕기 위해 이 스크립트를 작성했습니다. 자세한 내용은 vulhub/tomcat/CVE-2025-24813을 참조하십시오. vulhub 환경에는 직접 활용할 수 있는 체인이URLDNS 제외 없으므로, 기존 docker-compose.yml 파일을 수정하여 취약점 의존성이 있는 jar 패키지를 추가했습니다. 여기서는 세 개의 jar 패키지를...

CVE-2018-20062

CVE-2018-20062 thinkphp 5.0.23 مناسب لثغرة thinkphp في vulhub أنا مبتدئ جدًا، سأحسّن هذا لاحقًا ببطء، أرجو من المحترفين عدم الانتقاد...

CVE-2024-9264

CVE-2024-9264 参考ドキュメント https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. 脆弱性の概要...

Cve-2023-28432-

Cve-2023-28432 Attraverso il processo di riproduzione con vulhub, è stato implementato un rilevamento batch di base. È piuttosto scadente, ma si può usare comunque. Collegamento vulhub: https://github.com/vulhub/vulhub/tree/master/minio/CVE-2023-28432 Istruzioni: crea un file tagerts.txt e...

Log4Shell-Vulnerability-Replication

CVE-2021-44228 Log4Shell Registrazione completa della riproduzione della vulnerabilità Questo registro si basa sul campo di tiro Apache Solr 8.11.0 fornito da Vulhub, riproduce completamente la vulnerabilità di injection JNDI di Log4j2 e verifica con successo l'esistenza della vulnerabilità trami...

GitList < 0.6.0 Remote Code Execution

klaussilveira GitList version = 0.6 contains a passing incorrectly sanitized input via the searchTree function that can result in remote code execution. id: CVE-2018-1000533 info: name: GitList 0.6.0 Remote Code Execution author: pikpikcu severity: critical description: klaussilveira GitList...

Jboss Application Server - Remote Code Execution

Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptible to a remote code execution vulnerability because the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization, thus allowing a...

ElasticSearch v1.1.1/1.2 RCE

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to search. Be aware this only violates the vendor's intended security policy if the user does not run...