357 matches found
CVE-2022-22965-PoC
CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose root@kitploit: docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run th...
ARTful
Descrizione ARTful è una libreria Android nativa che consente agli sviluppatori di modificare il runtime Android ART su Android 13 e 14. Con questo strumento, puoi modificare dinamicamente l'implementazione di qualsiasi metodo statico all'interno della tua applicazione o dell'Android Framework pe...
Spring4Shell
Spring RCE CVE-2022-22965 Ambiente di vulnerabilità Informazioni sull'ambiente springboot jdk11 tomcat9.0.30 payload Configurazione dell'intestazione della richiesta root@kitploit: "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Dati d...
CVE-2014-0094
CVE-2014-0094 Para verificação. Referência: https://piyolog.hatenadiary.jp/entry/20140417/1397750197, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 reproduzir. O classLoader está funcionando, mas o log crucial está percent-encoded, então não chega até RCE Também adicionei a versão Windows embor...
java-remote-class-loader
Questo strumento ti permette di inviare bytecode Java sotto forma di file class ai tuoi client o potenziali obiettivi da caricare ed eseguire utilizzando Java ClassLoader insieme all'API Reflect. Il client riceve il file class dal server e restituisce il rispettivo output di esecuzione. I payload...
struts1-patch
struts1-patch Descrizione dettagliata e utilizzo, vedi: http://security.tencent.com/index.php/blog/msg/50 Patch della vulnerabilità CVE-2014-0114 di manipolazione del classLoader di struts1 struts.jar...
SSE4-CVE-2022-22965
Spring Boot CVE-2022-22965 Docker PoC لثغرة CVE-2022-22965 مع إصدار Spring Boot 2.6.5 البدء 1. شغّل docker compose up --build لبناء التطبيق الضعيف وتشغيله. 2. شغّل الأمر التالي curl -H "Accept: text/html;"...
Spring4Shell-PoC-exploit
Spring4Shell - PoC CVE - 2022 - 22965 Versões afetadas : Versões do Spring Framework 5.3.0 a 5.3.17, 5.2.0 a 5.2.19 e versões mais antigas Java JDK 9 Versões do Apache Tomcat abaixo de 10..0.20, 9.0.62 e 8.5.78 Aplicações que são empacotadas como um WAR tradicional com dependência spring-webmvc o...
java-remote-class-loader
This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...
Spring4Shell-POC
Spring4Shell CVE-2022-22965 - Proof of Concept di Esecuzione Remota di Codice Un Proof of Concept PoC completamente containerizzato che dimostra lo sfruttamento di Spring4Shell CVE-2022-22965 , che porta all'Esecuzione Remota di Codice RCE contro un'applicazione Spring Framework vulnerabile...
Path Traversal
org.xwiki.commons, xwiki-commons-classloader-api is vulnerable to Path Traversal. The vulnerability is due to improper validation of the resource parameter in the ssx and jsx endpoints, which allows an attacker to exploit leading slashes and directory traversal sequences to read arbitrary...
SUSE CVE-2025-48734
Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default...
CVE-2026-9498 Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine
A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. Impacted is the function GroovyClassLoader.parseClass of the component Message Template Handler. Such manipulation of the argument DefMsgTemplate.content leads to improper neutralization of special elements used in a template engin...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal via the resource parameter in the ssx and jsx endpoints when a leading slash is used. An attacker can access sensitive configuration files by crafting a URL that traverses directories. Note: This issue is due to...
TencentOS Server 2: apache-commons-beanutils (TSSA-2025:0654)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0654 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Security Bulletin: vulerability in IBM Spectrum Symphony with Apache Commons
Summary vulerability in IBM Spectrum Symphony with Apache Commons Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declare...
Security Bulletin: JAVA related vulnerabilities in IBM SP Enterprise Resource Planning (ERP) effected the ERP product dependency with BA client code.
Summary IBM Storage Protect Enterprise Resource Planning can be affected by security flaws mentioned in CVE-2025-48734. : using the "commons-beanutils-1.8.3.jar" can allow the attacker can get control on the declared class property of Java enum objects to get access to the classloader...
Exploit for Code Injection in Vmware Spring_Framework
Python Firewall for Spring4Shell CVE-2022-22965 Mitigation...
