audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2022-33980

CVE-2022-33980 CVE Apache Commons RCE can use url,dns,script key-words to connect any server...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool introduces a...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache MyFace (CVE-2026-68536, CVE-2026-76646)

Summary There are vulnerabilities in the Apache MyFace library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty when jsf-2.0, jsf-2.2, jsf-2.3, faces-3.0, faces-4.0 or faces-4.1 is enabled. Vulnerability Details CVEID:CVE-2026-76646 DESCRIPTION: A remote...

apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...

S2-046_S2-045_POC

S2-046POC Usage: ./s2046.sh url ./s2045.sh url Sample: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action OUTPUT: ================HTTP GET Method================ uid=0root gid=0root groups=0root context=unconfinedu:unconfinedr:unconfinedjavat:s0-s0:c0.c1023 uid=0root gid=0roo...

CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData Arbitrary File Read Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized attacks on websites are prohibited. Online reading of...

CVE-2023-34468

CVE-2023-34468 Exploit Overview This repository provides a Python-based exploit tool for CVE-2023-34468 , a critical remote code execution vulnerability CVSS 9.8 in Apache NiFi versions 0.0.2 through 1.21.0. It allows authenticated users to execute arbitrary code by manipulating H2 database...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 Apache Dubbo deserialization RCE video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...

CVE-2023-51467

CVE-2023-51467 exp.py changed to command execution Post.txt Serialization vulnerability exploitation bypassauth.txt Authentication bypass test Vulnerability cause Due to the incorrect use of empty values during authentication checks, this method did not take effect, leading to authentication...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 : Apache Dubbo Deserialization Remote Code Execution...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

drupal-check

drupal-check This is a script for performing log diving in Cpanel Apache, and Default Apache configurations. It will look for signs of a potential compromise, not guarenteed evidence, just looking to make analysis easier for the investigator...

Solr-SSRF

Solr-SSRF Apache Solr SSRF Usage - Apache Solr SSRF vulnerability CVE-2021-27905 - Options: -h or --help : Description -u or --url : Site URL address -d or --dnslog : DnsLog Example python3 CVE-2021-27905.py -u URL -d dnslog...

CVE-2025-24813-noPoC

CVE-2025-24813-noPoC After countless hours I was unable to come up with any real PoC. While the deserialization of uploaded files could pose a threat, all payload-chains I tested failed. Tested on versions 9.0.90 and 10.1.15 of Apache Tomcat Nothing else to see here! SEVERE http-nio-8080-exec-5...

Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus WebGUI

Summary IBM Tivoli Netcool/OMNIbus WebGUI has addressed multiple vulnerabilities in version 8.1.0 Fix Pack 42. Vulnerability Details CVEID:CVE-2026-84939 DESCRIPTION: Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed...

CVE-2021-42013

CVE-2021-42013 Apache 2.4.50 vulnerability...

CVE-2021-44228-Log4j-PoC-RCE

Apache Log4j CVE-2021-44228 GK7 PoC Steps 1. Compile Log4jRCE.java and move the .class file to a web server e.g., local PHP 1. cd src/main/java 2. javac Log4jRCE.java 3. Move the .class file to a web server or start a local PHP server, for example: php -S 127.0.0.1:8888 2. Start LDAP Server 1. gi...

Poc_for_CVE-2025-24813

!/usr/bin/env python3 """ .----------------. .----------------. .----------------. | | | | | | | | \ | | | | .' | | | | | | | | | | / .' | | | | '. | | | | | | | | | | | | | | | \ . | | | |/ | | || | | ..' | '----------------' '----------------' '----------------' """ CVE-2025-24813 Vulnerability...

CVE-2021-42013-LAB

CVE-2021-42013-LAB Apache HTTP Server 2.4.50 - RCE Lab exploit.sh :- https://github.com/jas9reet/CVE-2021-42013-LAB/blob/main/exploit.sh Usage docker pull jas9reet/cve-2021-42013-lab docker run -dit -p 8088:80 jas9reet/cve-2021-42013-lab Vulnerable Application Access VICTIM-IP-ADDRESS :8088...