Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package root@kitploit: Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down...

cve-2023-50164-poc

PoC for CVE-2023-50164 Install To install this tool you must have Go version at least 1.20 installed and configured. $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest Alternatively, you can compile it by DIY: $ git clone http://github.com/dwisiswant0/cve-2023-50164-poc...

CVE-2020-1938-Exploitation

CVE-2020-1938 Exploitation Apache Tomcat arbitrary JSP upload leading to RCE Description CVE-2020-1938 is a critical vulnerability which impacts Apache Tomcat from 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 ⚠️ This was exploited in a Hack The Box lab. 🔗 Reference: NIST NVD Entry...

CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN Authentication Bypass Vulnerability CVE-2026-20127 Exploit EXP Basic Usage python scan.py -f targets.txt Display Detailed Information python scan.py -f targets.txt -v Adjust Thread Count and Save Results python scan.py -f targets.txt -t 10 -o vulnerable.txt...

JFrog Artifactory Arbitrary File Upload Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production. An arbitrary file upload...

[The ManageOwnage Series, part V]: RCE / file upload / arbitrary file deletion in OpManager, Social IT and IT360

Hi, This is the fifth part of the ManageOwnage series. For previous parts, see: http://seclists.org/fulldisclosure/2014/Aug/55 http://seclists.org/fulldisclosure/2014/Aug/75 http://seclists.org/fulldisclosure/2014/Aug/88 http://seclists.org/fulldisclosure/2014/Sep/1 This time we have a file uploa...