83667 matches found
Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment
Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...
CVE-2022-22965
Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...
ExploitScript-CVE-2023-46604
ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...
CVE-2026-23918-poc
CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...
CVE-2023-46604-RCE
CVE-2023-46604-RCE Python implementation of Apache ActiveMQ Unauthenticated Remote Code Execution Setup & Exploit nc -lvnp 4444 - Start Listener python3 -m http.server 8080 - Host poc.xml that contain your payload python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - Start exploit...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...
CVE-2019-0211-exploit
CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation CARPE DIEM Description CVE-2019-0211 is a local privilege escalation vulnerability affecting Apache HTTP Server between versions 2.4.17 and 2.4.38 using modprefork and modphp or PHP-FPM. The vulnerability allows an attacker with a shel...
CVE-2019-10092_Docker
CVE-2019-10092 Docker - Apache HTTP Server Using $ docker-compose up Using from Docker Hub $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...
cve-2021-42013L
cve-2021-42013 Apache 2.4.50 Path traversal vulnerability Follow Youtube Twitter Telegram Vulnmachines.com...
cve-2021-42013.get
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
apache-struts-cve-2017-5638-project
apache-struts-cve-2017-5638-project Attack and Defense course project focused on CVE-2017-5638 analysis, exploitation, and mitigation...
CVE-2024-34693
CVE-2024-34693: Server Arbitrary File Read in Apache Superset Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. By enabling localinfile in the Superset MySQL/MariaDB client and pointing the...
CVE-2023-34212
CVE-2023-34212: Java Deserialization via JNDI Components in Apache NiFi The JndiJmsConnectionFactoryProvider Controller Service along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properti...
CVE-2019-10092
CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...
CVE-2017-5638-Apache-Struts2
CVE-2017-5638 Apache Struts2 Example PoC Exploit PHP Code for CVE-2017-5638 Usage php exploit.php "http://127.0.0.1:8080/example/index.action" "command" USE AT YOUR OWN RISK...
shiro
CVE-2026-49268 — Analysis and Remediation of an LDAP Injection Authentication Bypass Vulnerability | ---|--- Branch| 1.13-CVE-2026-49268 Author| Jinwoo Hwang https://JinwooHwang.com This branch 1.13-CVE-2026-49268 contains a comprehensive security remediation of an LDAP Injection Authentication...
Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Apache ZooKeeper
Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Apache ZooKeeper. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-59739 DESCRIPTION: Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An...
pulsar-docker-images-patch-CVE-2021-44228
Patch pulsar images with Apache Log4J 2.17.1 upgrade Covers CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 See Log4J Security Vulnerabilities and upgrades for more information. see the Dockerfile for the solution Building and pushing patched docker images example usage: build and t...