Solr-SSRF

Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...

CVE-2025-24813-noPoC

CVE-2025-24813-noPoC After countless hours I was unable to come up with any real PoC. While the deserialization of uploaded files could pose a threat, all payload-chains I tested failed. Tested on versions 9.0.90 and 10.1.15 of Apache Tomcat Nothing else to see here! SEVERE http-nio-8080-exec-5...

CVE-2021-42013

CVE-2021-42013 Vulnerabilidad de Apache 2.4.50...

CVE-2021-44228-Log4j-PoC-RCE

Apache Log4j CVE-2021-44228 GK7 PoC Steps 1. Compile Log4jRCE.java and move the .class file to a web server e.g., local PHP 1. cd src/main/java 2. javac Log4jRCE.java 3. Move the .class file to a web server or start a local PHP server, for example: php -S 127.0.0.1:8888 2. Start LDAP Server 1. gi...

Poc_for_CVE-2025-24813

!/usr/bin/env python3 """ .----------------. .----------------. .----------------. | | | | | | | | \ | | | | .' | | | | | | | | | | / .' | | | | '. | | | | | | | | | | | | | | | \ . | | | |/ | | || | | ..' | '----------------' '----------------' '----------------' """ CVE-2025-24813 Vulnerability...

Log4j-_Vulnerability

The Web Is Vulnerable to CVE-2021-44228 This web application is vulnerable to CVE-2021-44228, a critical security flaw in Apache Log4j 2 known as Log4Shell. This vulnerability allows unauthenticated attackers to remotely execute malicious code by sending specific input that is logged by the syste...

CVE-2024-40898-SSL-Bypass-Detection

CVE-2024-40898 SSL Certificate Validation Bypass Scanner This repository contains a Python-based proof-of-concept PoC script to detect CVE-2024-40898, a vulnerability in Apache HTTP Server that allows attackers to bypass SSL certificate verification. Overview CVE-2024-40898 is a security issue in...

CVE-2017-5638

LAB 1 — Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045 I. SYSTEM ANALYSIS Attack Surface Analysis After starting the container, Struts2 logs show that the application loads familiar configuration files such as struts-default.xml , struts-plugin.xml , and struts.xml. This confirms that the...

CVE-2022-33891

CVE-2022-33891 Apache Spark Vulnerability Exploit . Created By : Dr.Linux This Exploit Run With Python Version 3.7 and Newer Version Of Python...

Log4Shell-CVE-2021-44228

Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demonstration Lab Log4Shell CVE-2021-44228 is one of the most impactful remote code execution vulnerabilities ever disclosed. It affects Apache Log4j 2 , a widely used Java logging framework, and allows attackers to execute arbitrary code by...

CVE-2024-53677-POC

CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...

CVE-2022-24112

CVE-2022-24112 Apache APISIX apisix/batch-requests RCE...

Log4j-Rec-CVE-2021-44228

Log4j2 Replication Notes, For Learning Only Reference: https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce Create Executable File com/example/template javac Log4jRCE.java Start Python Built-in HTTP Server com/example/template python -m http.server 8888 Start LDAP Server tools java -c...

CVE-2021-41773

CVE-2021-41773 Fast python tool to test apache path traversal CVE-2021-41773 in a List of url Usage :- create a live urls file and use the flag "-l" python3 apachepathtraversal.py -l urls-list.txt...

cve-2021-42013

Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...

cve-2023-51467

Go-Exploit for CVE-2023-51467 This repository contains a go-exploit for Apache OFBiz CVE-2023-51467. The implementation contains target verification, a version scanner, and an in-memory Nashorn reverse shell as the payload requires the Java in use supports Nashorn. The weaponization process is...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

ofbiz-poc

ofbiz-poc CVE-2020-9496 and CVE20209496 using dnslog batch vulnerability verification PoC and exp OFBizCVE20209496.py and OFBizCVE202126295.py are for single vulnerability verification ofbizpoc.py is for batch verification of both vulnerabilities, save the websites to be batch-verified to urls.tx...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

k8s-CVE-2021-43557-poc

Installation install minikube install apisix: helm repo add apisix https://charts.apiseven.com helm repo add bitnami https://charts.bitnami.com/bitnami helm repo update kubectl create ns ingress-apisix helm install apisix apisix/apisix \ --set gateway.type=NodePort \ --set...