70 matches found
CVE-2024-23897
Configurazione dell'ambiente CVE-2024-23897 1. Installazione di Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Download del file WAR di Jenkins wget https://get.jenkins.io/war/2.441/jenkins.war 3. Modifica della versione Java predefinita - Seleziona Java 11 sudo update-alternatives...
CVE-2023-50164-Apache-Struts-RCE
Enthält verletzliche WAR-Datei und Docker-Datei, die zum Testen von CVE-2023-50164-Apache-Struts-RCE verwendet werden können. Dieses Dockerfile und die verletzliche Anwendung wurden mit Ressourcen und Code von https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE kompiliert und entworfen...
CVE-2022-22965
Analisi della CVE 2022-22965Spring4Shell Descrizione della vulnerabilità Spring4Shell è il nome di una CVE presente in Spring Core di Spring Framework. Con un punteggio CVSS 3.x di 9.8, la vulnerabilità è classificata come rischio massimo critical. Questa vulnerabilità consente a un attaccante di...
spring-core-rce
spring-core-rce Spring Core RCE - Einfache Nutzung WAR kann verwendet werden https://github.com/fengguangbin/spring-rce-war Docker-Umgebung kann verwendet werden https://github.com/lunasec-io/Spring4Shell-POC Oder die Online-Umgebung von Vulfocus kann verwendet werden http://vulfocus.io/ Oder die...
Java-Servlets-Shell
Java Servlets Shell Java-Servlets-Backdoor, inspiriert von https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Hinweis : Die WARs enthalten kompilierten Java-Code anstelle von JSP-Seiten, um in Umgebungen eingesetzt werden zu können, die JSP-Dateien blockieren oder nicht kompilieren...
CVE-2020-1938-Exploitation
CVE-2020-1938 Ausnutzung Apache Tomcat willkürlicher JSP-Upload führt zu RCE Beschreibung CVE-2020-1938 ist eine kritische Schwachstelle, die Apache Tomcat von 9.0.0.M1 bis 9.0.0.30, 8.5.0 bis 8.5.50 und 7.0.0 bis 7.0.99 betrifft. ⚠️ Dies wurde in einem Hack The Box Labor ausgenutzt. 🔗 Referenz:...
cve-2023-50164-poc
CVE-2023-50164 के लिए PoC स्थापना इस टूल को स्थापित करने के लिए आपके पास Go संस्करण कम से कम 1.20 स्थापित और कॉन्फ़िगर होना चाहिए। $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest वैकल्पिक रूप से, आप इसे DIY द्वारा संकलित कर सकते हैं: $ git clone...
Spring4Shell-POC
Spring4Shell-POC Processo di riproduzione locale della vulnerabilità Spring4Shell Preparazione dell'ambiente Ambiente docker, docker-compose Pacchettizzazione con mvn, genera ./target/ROOT.warshell mvn package root@kitploit: Avviare il servizioshell docker-compose up -d Ferma il servizioshell...
spring4shell-poc
Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...
inspec-log4j
inspec-log4j Este perfil verifica versões vulneráveis dos arquivos JAR do Log4j Core diretamente no sistema de arquivos e incorporados em arquivos WAR. Executando o perfil localmente root@kitploit: git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Executando o perfi...
PT-2023-8926 · Sysaid · Sysaid
Name of the Vulnerable Software and Affected Versions: SysAid affected versions not specified Description: The issue is related to a path traversal vulnerability in the doPost method of the com.ilient.server.UserEntry class in SysAid, a service support and hardware and software control automation...
Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining
Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners. The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year...
CVE-2023-33247
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog serv...
CVE-2023-33247
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog serv...
GHSA-F5WX-W2F9-82GH XXE vulnerability in Jenkins WebSphere Deployer Plugin
WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This could be exploited by a user with Job/Configure permissions to upload a specially crafted war file containing a WEB-INF/ibm-web-ext.xml which is parsed by the plugin...
GHSA-W47G-4VRC-M3W2 Cross-site Scripting in Apache Pluto Chatroom demo
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting XSS attacks. Mitigation: Uninstall the ChatRoomDemo war file - or - migrate to version 3.1.0 of the chat-room-demo war file...
GHSA-GGX9-4728-588R Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...
Spring4Shell (CVE-2022-22965): details and mitigations
Last week researchers found the critical vulnerability CVE-2022-22965 in Spring – the open source Java framework. Using the vulnerability, an attacker can execute arbitrary code on a remote web server, which makes CVE-2022-22965 a critical threat, given the Spring frameworks popularity. By analog...
