70 matches found
spring-core-rce
spring-core-rce استغلال بسيط لثغرة spring core rce يمكن استخدام war https://github.com/fengguangbin/spring-rce-war يمكن استخدام بيئة docker https://github.com/lunasec-io/Spring4Shell-POC يمكن أيضًا استخدام البيئة الإلكترونية لـ vulfocus http://vulfocus.io/ أو بيئة vulhub...
CVE-2022-22965
CVE 2022-22965Spring4Shell का विश्लेषण दोष विवरण Spring4Shell Spring Framework के Spring Core पर मौजूद एक CVE का नाम है। CVSS 3.x स्कोर 9.8 के साथ, इस दोष को उच्चतम जोखिम स्तर critical में वर्गीकृत किया गया है। यह दोष हमलावर को दूरस्थ कोड निष्पादन करने और दोष युक्त सर्वर को नियंत्रित करने की अनुम...
CVE-2024-23897
Configuração do ambiente CVE-2024-23897 1. Instalação do Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Download do arquivo WAR do Jenkins wget https://get.jenkins.io/war/2.441/jenkins.war 3. Alterar a versão padrão do Java - Selecionar Java 11 sudo update-alternatives --config java...
CVE-2020-1938-Exploitation
Exploração CVE-2020-1938 Apache Tomcat upload arbitrário de JSP levando a RCE Descrição CVE-2020-1938 é uma vulnerabilidade crítica que afeta o Apache Tomcat de 9.0.0.M1 a 9.0.0.30, 8.5.0 a 8.5.50 e 7.0.0 a 7.0.99 ⚠️ Isto foi explorado num laboratório Hack The Box. 🔗 Referência: Entrada NIST NVD...
cve-2023-50164-poc
CVE-2023-50164 के लिए PoC स्थापना इस टूल को स्थापित करने के लिए आपके पास Go संस्करण कम से कम 1.20 स्थापित और कॉन्फ़िगर होना चाहिए। $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest वैकल्पिक रूप से, आप इसे DIY द्वारा संकलित कर सकते हैं: $ git clone...
Java-Servlets-Shell
Java Servlets Shell باب خلفي لـ Java Servlets مستوحى من https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz ملاحظة : تحتوي ملفات WAR على كود Java مُجمَّع بدلاً من صفحات JSP لاستخدامها في البيئات التي تحظر أو لا تُجمِّع ملفات JSP...
CVE-2023-50164-Apache-Struts-RCE
يحتوي على ملف WAR قابل للاستغلال وملف docker file يمكن استخدامهما لاختبار CVE-2023-50164-Apache-Struts-RCE. هذا dockerfile والتطبيق القابل للاستغلال تم تجميعهما وتصميمهما باستخدام موارد ورمز من https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE. شكرًا له على هذا المورد والاستغلال...
Spring4Shell-POC
Spring4Shell-POC عملية إعادة إنتاج ثغرة Spring4Shell محليًا تحضير البيئة البيئة: docker، docker-compose mvn package، إنشاء ./target/ROOT.warshell mvn package root@kitploit: تشغيل الخدمةshell docker-compose up -d إيقاف الخدمةshell docker-compose down root@kitploit: عملية إعادة الإنتاج تشغيل...
spring4shell-poc
Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...
inspec-log4j
inspec-log4j يقوم هذا الملف التعريفي بفحص الإصدارات الضعيفة من ملفات Log4j Core JAR مباشرة على نظام الملفات، وكذلك المضمنة في ملفات WAR. تشغيل الملف التعريفي محلياً root@kitploit: git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j تشغيل الملف التعريفي ضد هدف SSH عن...
PT-2023-8926 · Sysaid · Sysaid
Name of the Vulnerable Software and Affected Versions: SysAid affected versions not specified Description: The issue is related to a path traversal vulnerability in the doPost method of the com.ilient.server.UserEntry class in SysAid, a service support and hardware and software control automation...
Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining
Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners. The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year...
CVE-2023-33247
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog serv...
CVE-2023-33247
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog serv...
GHSA-F5WX-W2F9-82GH XXE vulnerability in Jenkins WebSphere Deployer Plugin
WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XML external entity XXE attacks. This could be exploited by a user with Job/Configure permissions to upload a specially crafted war file containing a WEB-INF/ibm-web-ext.xml which is parsed by the plugin...
GHSA-W47G-4VRC-M3W2 Cross-site Scripting in Apache Pluto Chatroom demo
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting XSS attacks. Mitigation: Uninstall the ChatRoomDemo war file - or - migrate to version 3.1.0 of the chat-room-demo war file...
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...
GHSA-GGX9-4728-588R Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...
Spring4Shell (CVE-2022-22965): details and mitigations
Last week researchers found the critical vulnerability CVE-2022-22965 in Spring – the open source Java framework. Using the vulnerability, an attacker can execute arbitrary code on a remote web server, which makes CVE-2022-22965 a critical threat, given the Spring frameworks popularity. By analog...
