Lucene search
+L

943 matches found

Kitploit
Kitploit
added 2026/09/13 5:55 p.m.8 views

CVE-2023-31664

CVE-2023-31664 CVE-2023-31664 A reflected cross-site scripting XSS vulnerability in /authenticationendpoint/login.do of WSO2 Api Manager below v4.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter. PoC: to exploit it only...

6.1CVSS6.8AI score0.012EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:43 p.m.7 views

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

10CVSS8.6AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 4:42 p.m.8 views

carbon-identity-framework

carbon-identity-framework Branch| Build Status ---|--- master| This repository contains the core components and features required by the WSO2 Identity Server product. Building from the source If you want to build carbon-identity-framework from the source code: 1. Install Java 21. 2. Install Apach...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 2:07 p.m.7 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Usage : root@kitploit: python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 11:16 a.m.7 views

CVE-2022-29464

CVE-2022-29464 A preauth arbitrary file upload that leads to RCE in WSO2 Summary of the CVE CVE-2022-29464 is a RCE vulnerability for WSO2 discovered by Orange Tsai. A unauthenticated arbitrary file upload allows an attacker to execute code by uploading a malicious JSP file. Affected Versions WSO...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/13 10:55 a.m.12 views

wso2-rce-cve-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which which allows unauthenticated attackers to gain RCE on WSO2 servers via uploading...

10CVSS8.3AI score0.99999EPSS
SaveExploits22References2
Kitploit
Kitploit
added 2026/09/13 6:58 a.m.7 views

WSO2RCE

WSO2RCE The CVE-2022-29464 affects some WSO2 products such as WSO2 API Manager and WSO2 Open Banking , allowing arbitrary file upload and remote code execution. Affected Products: WSO2 API Manager 2.2.0, up to 4.0.0 WSO2 Identity Server 5.2.0, up to 5.11.0 WSO2 Identity Server Analytics 5.4.0,...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 5:15 a.m.7 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

10CVSS8.3AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/13 4:36 a.m.5 views

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/13 4:23 a.m.5 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

10CVSS8.3AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/13 3:29 a.m.5 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 Uso • Este exploit solo se puede ejecutar para múltiples objetivos python3 exploit.py --file urls.txt Referencias https://github.com/hakivvi/CVE-2022-29464...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.36 views

WSO2 - Server Side Request Forgery

WSO2 products contain SSRF and reflected XSS vulnerabilities in the deprecated Try-It feature accessible only to administrative users, caused by improper URL validation and direct content reflection, letting attackers trick admins into executing arbitrary JavaScript and querying internal services...

5.9CVSS5.9AI score0.00574EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.37 views

WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting

WSO2 Data Analytics Server 3.1.0 is susceptible to cross-site scripting in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter. id: CVE-2017-14651 info: name: WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting author: mass0ma severity: medium...

4.8CVSS5.7AI score0.03836EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.312 views

WSO2 User Registration - Arbitrary Account Creation

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...

4.3CVSS5.8AI score0.00665EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.68 views

WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection

WSO2 API Manager 3.1.0 and earlier is vulnerable to blind XML external entity injection XXE. XXE often allows an attacker to view files on the server file system, and to interact with any backend or external systems that the application itself can access which allows the attacker to transmit...

9.1CVSS7.9AI score0.26282EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.144 views

WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting

WSO2 Management Console through 5.10 is susceptible to reflected cross-site scripting which can be exploited by tampering a request parameter in Management Console. This can be performed in both authenticated and unauthenticated requests. id: CVE-2020-17453 info: name: WSO2 Carbon Management...

6.1CVSS6.2AI score0.26225EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.107 views

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

6.1CVSS6.2AI score0.41078EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/13 1:01 a.m.7 views

CVE-2022-29464-mass

WSO2 Carbon Server CVE-2022-29464 Vulnerabilidad RCE pre-autenticación CVE-2022-29464. Escrito por Chocapikk Ligeramente modificado por trhacknon Uso root@kitploit: python exploit.py -u o: root@kitploit: python exploit.py -f Zoomeye Dork CLI: root@kitploit: zoomeye search 'title:"WSO2 Management...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 12:36 a.m.8 views

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is a serious flaw in WSO2. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to upload malicious JSP files to WSO2 servers and get Remote Code Execution RCE. the vulerable upload rou...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/12 11:22 p.m.7 views

CVE-2022-29464

CVE-2022-29464 WSO2 is a leading provider of various SOA solutions, including SOA-related infrastructure, technical frameworks, and related tools, process servers, application servers, etc. Affected Versions 2.2.0 ≤ WSO2 API Manager ≤ 4.0.0 5.2.0 ≤ WSO2 Identity Server ≤ 5.11.0 WSO2 Identity Serv...

10CVSS8AI score0.99999EPSS
SaveExploits22
Rows per page
Query Builder