96 matches found
CVE-2024-36401
CVE-2024-36401 GeoServer Exploitation Tool Vulnerability Overview CVE-2024-36401 is a remote command execution vulnerability in GeoServer. An attacker can execute arbitrary commands without authorization by crafting a specific WFS Web Feature Service request. Requirements Python 3.x Install...
CVE-2023-25157
Lab CVE-2023-25157 and CVE-2023-25158 Lab nay dung GeoServer/PostGIS de nghien cuu OGC Filter SQL injection trong moi truong cuc bo, co tach ro operator/setup mode va attacker mode. CVE-2023-25157: be mat GeoServer product, request WFS/WMS di vao JDBC filter encoding. CVE-2023-25158: root cause o...
CVE-2023-25157-checker
CVE-2023-25157-checker A script, written in golang. POC for CVE-2023-25157 Steps to use 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Replace with the URL of the target server. Google Dork...
geoexplorer
GeoExplorer Client This is the client component of the GeoExplorer project, designed to send requests to GeoServer instances and test for potential vulnerabilities. Requirements Python 3.x Required Python packages install using pip install -r requirements.txt: requests argparse urllib3 Usage Run...
geoserver-CVE-2023-25157
geoserver CVE-2023-25157 White Hat 3rd Cohort Class 30 Kim Jeong-woo github link - https://github.com/custiya/geoserver-CVE-2023-25157 Vulnerability Summary CVE-2023-25157 is an SQLi vulnerability that occurred in GeoServer, an open-source map data service web application. Occurs in some versions...
geoserver-
GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...
CVE-2026-76904
GeoServer WFS Inventory and Authorized Verification This repository contains two Python scripts for investigating GeoServer WFS endpoints. Overview wfsinventory.py Purpose: Inventory layers, XSD fields, and WFS values, and optionally verify candidates via a time-based check. Execution examples:...
GeoServer WFS - XXE Processing Vulnerability
GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...
CVE-2023-25157-GeoServer-SQLi-Lab
GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Vulnerability Lab & PoC Report Practical environment Vulnerable Lab and detailed exploitation analysis report for SQL Injection Error-based vulnerability in GeoServer CVE-2023-25157 and the GeoTools library CVE-2023-25158...
GeoServer-CVE-2024-36401
GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Remote Code Execution RCE Vulnerability In Evaluating Property Name Expressions GetPropertyValue POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36...
[SECURITY] Fedora 45 Update: tinyows-1.2.2-10.fc45
TinyOWS server implements latest Open Geospatial Consortium Transactional Web Feature Service WFS-T standard versions, as well as related standards such as Filter Encoding FE...
XMEye Sofia WFS Use-After-Free
XMEye Sofia contains a potential use-after-free vulnerability in its WFS block buffer cache due to unsynchronized reference count operations. Concurrent access can cause a buffer that is still referenced by one thread to be treated as free and repurposed for another block, resulting in a stale...
Exploit for SQL Injection in Osgeo Geoserver
Lab CVE-2023-25157 va CVE-2023-25158 Lab nay dung GeoServer/P...
GeoServer CVE-2024-36401 Detection
Detects CVE-2024-36401 by checking vulnerable version ranges and confirming XPath injection on WFS GetPropertyValue HTTP 400 + ClassCastException. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer CVE-2024-36401 WFS XPath injection detection.""" import re import xml.etree.ElementTree as ET...
GeoServer Unauthenticated RCE (CVE-2024-36401)
Exploits CVE-2024-36401 XPath injection in GeoServer WFS GetPropertyValue. Affected: 2.23.6, 2.24.0–2.24.3, 2.25.0–2.25.1. Blind RCE confirmed by HTTP 400 + ClassCastException. !/usr/bin/env python3 -- coding: utf-8 -- """GeoServer unauthenticated XPath injection RCE CVE-2024-36401 — reverse CMD...
Exploit for CVE-2026-76904
GeoServer WFS Inventory und autorisierte Verifikation Dieses...
CVE-2023-29804
WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the syssmbpwdmod function...
EUVD-2017-14626
Malware in sbrugna...