CVE-2019-0604

一、k8gege의 cve-2019-0604-exp.py 해설 k8gege의 스크립트 https://github.com/k8gege/CVE-2019-0604 솔직히 k8gege의 py 스크립트는 약간 화려합니다. 수많은 16진수 문자열이 payload1, 2, 3으로 나뉘어져 있어서 좀 나쁘네요. python 스크립트가 원격으로 post하는 payload는 역직렬화 후 xml 데이터 본체입니다. cmd /c echo ^%@ Page Language="Jscript" %^^%var pwd="tom";var...

CVE-2022-45047

CVE-2022-45047 POC, EXP, 나를 위한 chatGPT 코드 import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding": "gzip, deflate"...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE 개념 증명 과제: SSP 과제 3 팀: RCE You Later 팀원: Banica Horia Alexandru, Comarlau Vlad-Constantin 저장소를 사용하여 PoC를 수행하는 비디오 링크:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 개요 이 저장소는 CVE-2023-46604 에 대한 완전한 기능의 개념 증명PoC을 포함합니다. 이 취약점을 통해 공격자는 취약한 Apache ActiveMQ 서버버전...

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XML 역직렬화 RCE 이 저장소는 악성 XML 역직렬화를 이용한 Apache Struts S2-052 CVE-2017-9805 악용을 시연합니다. 해당 익스플로잇은 INE eWPTX Practice Range – Struts XML Deserialization RCE 랩 을 해결하는 과정에서 개발되었습니다. 취약점 개요 Apache Struts REST 플러그인은 XStream 을 사용하여 XML 요청을 역직렬화합니다. 애플리케이션이 다음 콘텐츠 유형의 XML을 처리할 때:...

S2-052

CVE-2017-9805 S2-052 리버스 셸 익스플로잇 영향받는 버전 Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 PoC Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0 jdk.nashorn.internal.objects.NativeString referen...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 페이로드 빌더 및 익스플로잇 정보 / 도움말 $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | | CVE-2017-3506 / CVE-2017-102...

CVE-2021-42237

CVE-2021-42237 이것은 Assetnote 보고서에서 가져온 CVE-2021-42237용 익스플로잇/PoC입니다. 면책 조항: 저는 Assetnote와 어떤 형태로든 관련이 없습니다. 이 콘텐츠는 교육 목적으로만 제공됩니다. 아래 PoC에서 CMD-COMMAND-HERE와 Host를 반드시 교체하세요: POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1 Host: sitecore.local Accept-Encoding: gzip, deflate Accept: ...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – XML 역직렬화 RCE리버스 셸 WSUS CVE-2025-59287을 XML 역직렬화를 통해 악용하여 Windows 리버스 셸을 획득하는 데 초점을 맞춘 PoC입니다. 이 스크립트는 리버스 셸 페이로드만 지원합니다calc 대체 없음. 대상: WSUS 역할이 설치된 Windows Server 기법: SOAP + ObjectDataProvider 역직렬화 결과: cmd.exe가 PowerShell 리버스 셸을 실행하여 리스너에 연결 면책 조항 랩 환경에서의 공인된...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 취약점 설명 초기에 해커들은 WebLogic WLS 구성 요소 취약점을 이용하여 대규모 원격 공격을 기업 서버에 가했습니다. 많은 기업의 서버가 침해되었으며, 공격을 받은 기업 수가 현저히 증가하는 추세를 보여 큰 주의가 필요합니다. 그중 CVE-2017-3506은 Oracle WebLogic의 WLS 구성 요소를 이용한 원격 코드 실행 취약점으로, 공개되지 않은 세부 사항이 있는 제로데이 취약점이며, 많은...

BIT-JENKINS-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

PT-2026-88163

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

The Jenkins automation server is vulnerable in versions 2.579 and earlier (and LTS 2.568.2 and earlier ). An attacker with Overall/Read permission can exploit a flaw where user objects appear as nested field values in other deserialized XML objects. By submitting crafted XML , the attacker can cr...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

EUVD-2026-70112

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

PT-2026-84769

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

ROS-20260812-73-0037

The vulnerability of the XStream library used by Jenkins automation servers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or...