83658 matches found
CVE-2022-25813
CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz By inserting malicious content in a message’s “Subject” field, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote...
activemq-ids-ips-lab
IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...
CVE-2023-46604
CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...
Axis1.4-CVE-2019-0227
Axis1.4 CVE-2019-0227 Remote Command Execution Exploit Tool 📖 Vulnerability Description Apache Axis1.4 contains a remote command execution vulnerability CVE-2019-0227. When the enableRemoteAdmin property is set to true, an attacker can deploy a malicious service through the AdminService interface...
CVE-2026-33453
camel-coap Header Injection → RCE Vulnerability Reproducer CVE-2026-33453 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-coap component, tracked as CVE-2026-33453. An unauthenticated attacker who can send a single CoAP UDP packet can inject...
patch-CVE-2026-10520
Patch: CVE-2026-10520 Vulnerability Details CVE : CVE-2026-10520 Product : Apache Struts Description : OGNL injection Severity : Critical Patch Status: IN-REVIEW Field| Value ---|--- Patch Date| 2026-04-15 Status| in-review Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...
CVE-2021-42013
CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi patch bypass For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate CVE-2021-42013 , present in Apache HTTP Server 2.4.50. This CVE is the bypass of the patch...
CTF_WRITEUPS-TryHackMe-CVE-2021-41773-
CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 A small explanation of an Apache path traversal bug and an incomplete fix Task 1: A Bit of Background... A Brief History On the 5th of October 2021, a CVE detailing a path traversal attack on Apache...
http2-bomb-detector
http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destructive vulnerability detection tool — for Nginx / Apache httpd Vulnerability Background CVE-2026-49975 is a widespread remote denial-of-service vulnerability in the HTTP/2 protocol layer, discovered by security researcher Quang Luong. This...
apache__incubator-dubbo_CVE-2021-30181_2-6-8
Apache Dubbo Project Apache Dubbo is a powerful and user-friendly Web and RPC framework. It supports multiple language implementations such as Java, Go, Python, PHP, Erlang, Rust, and Node.js/Web. Dubbo provides solutions for communication, service discovery, traffic management, observability,...
CVE-2021-41773
CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.49. The flaw reside...
struts2-rce
Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 A realistic scenario where a reference project for a framework is deployed on a container but with terrible consequences. To familiarise yourself look at the code and compile it. Also...
Computer-Security-Equifax-2017
Educational repo demonstrating real-world software vulnerabilities: Apache Struts2 CVE-2017-5638 RCE, data exfiltration, weak encryption, and mitigation strategies sanitization, monitoring, crypto best practices. Red team vs blue team demo of OS security flaws: exploit, persistence backdoor, and...
Detection-struts-cve-2017-5638-detector
🚨 Real-Time Anomaly Detection for Apache Struts CVE-2017-5638 Zero-Day Exploit Detection Based on Streaming Analytics & Probabilistic Data Structures 📌 Project Description This project is a real-time anomaly detection system designed to detect RCE Remote Code Execution exploits on Apache Struts...
CVE-2026-40022
camel-platform-http-main Authentication Bypass on Non-Root Context Paths CVE-2026-40022 This project demonstrates an authentication bypass in Apache Camel's camel-platform-http-main component the embedded HTTP / management server of the Camel main runtime, tracked as CVE-2026-40022. When...
CVE-2021-41773
masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...
CVE-2023-34468-POC
CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Remote Code Execution via H2 Database RUNSCRIPT in Apache NiFi = 1.21.0 Vulnerability Apache NiFi ships with an H2 database JAR bundled by default. The DBCPConnectionPool controller service can be configured to use this H2 driver. H2 supports a RUNSCRIP...
PoC-CVE-2021-41773
CVE-2021-41773 Apache HTTP Server Path Traversal Exploit A Python exploit for CVE-2021-41773, a path traversal vulnerability in Apache HTTP Server 2.4.49 that allows reading arbitrary files from the server. Vulnerability Details CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Serv...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...