CVE-2026-58415 Apache HTTP Server: mod_dav_fs property database read access

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

CVE-2026-58415

The Apache HTTP Server is vulnerable to an information disclosure flaw in the mod_dav_fs module (versions 2.4.0 through 2.4.68 ) on all platforms. A remote attacker can perform a GET request directly to the internal .DAV state directory to read internal state files. This allows unauthorized acces...

CVE-2026-58415 Apache HTTP Server: mod_dav_fs property database read access

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

EUVD-2026-90897

Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

CVE-2020-10257

/ \ \ / /|| \ / |/ | | | \ V /| | / / / / || | / /| \ / / | / | | / / / || /| /// by darkcast CVE-2020-10257: WordPress TRX Addons プラグイン 未認証リモートコード実行 RCE 脆弱性 影響を受けるプラグイン: TRX Addons 脆弱性の種類: 未認証リモートコード実行 RCE CVSS スコア: 9.8 Critical 脆弱なバージョン: バージョン 2.5.1 より前 修正プログラム: あり バージョン 2.5.1 以降に更新 説明:...

CVE-2026-33340

CVE-2026-33340: lollms-webui의 SSRF 취약점 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-33340 취약점| 서버 측 요청 위조 SSRF 영향받는 제품| ParisNeo/lollms-webui LoLLMs WEBUI 심각도| Critical — CVSS 9.1 CVSS 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-918: 서버 측 요청 위조 SSRF 영향받는 구성 요소|...

S2-046_S2-045_POC

S2-046POC 사용법: ./s2046.sh url ./s2045.sh url 예시: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action 출력: ================HTTP GET Method================ uid=0root gid=0root groups=0root context=unconfinedu:unconfinedr:unconfinedjavat:s0-s0:c0.c1023 uid=0root gid=0root...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 - D-Link 원격 코드 실행 RCE 💥 CVE-2024-3273으로 분류된 치명적인 취약점이 20240403 기준 여러 D-Link NAS 장치DNS-320L, DNS-325, DNS-327L, DNS-340L 포함에서 발견되었습니다. 이 취약점은 HTTP GET 요청 처리기 구성 요소의 /cgi-bin/nassharing.cgi 파일에 있는 알려지지 않은 함수에 영향을 미칩니다. system 인수를 조작하여 명령 주입이 가능하며, 이는 심각한 보안 위험을 초래합니다. 이 악용은 원격으로 시작될 수...

CVE-2020-14882

CVE-2020-14882 이 스크립트는 인증되지 않은 GET 요청을 사용하여 Oracle WebLogic Server에서 원격 코드 실행RCE을 가능하게 합니다. CVE-2020-14882 취약점을 악용합니다. 임의의 명령어를 실행하여 공격자가 서버에 무단으로 액세스할 수 있습니다. 익스플로잇 세부 정보 Exploit Title: Oracle WebLogic Server, GET 요청을 통한 인증되지 않은 RCE Exploit Author: Danny Safaya CVE: CVE-2020-14882 Vendor Homepag...

Zur-Go-GET-RCE-Solution

CVE-2018-6574-해결책...

CVE-2022-41544

CVE-2022-41544 CVE-2022-41544용 익스플로잇 스크립트 - get-simple CMS의 RCE 사용법 Usage: python3 CVE-2022-41544.py 예제...

go-get-rce

go-get-rce CVE-2018-6574...

CVE-2020-14882

CVE-2020-14882 CVE-2020–14882 - Jangによる調査 @s1kr10sによるコード Poc: 投稿レビュー / 動画: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 개념 증명PoC 제가 CVE-2015-2231 'Get Super Serial'을를 시연하기 위해 사용한 PoC입니다. 이 취약점이 있는 다른 ADUPS 펌웨어 기반 기기에서도 비슷한 방식으로 사용할 수 있도록 게시해 달라는 요청을 몇몇 사람들로부터 받았습니다. 노트북을 정리하면서 이 자료가 유실되기 전에 게시합니다. 사용법 이 애플리케이션은 클릭 가능한 버튼 하나만 생성하며, 클릭하면 sh /data/local/tmp/yay/shell.sh이가 system...

CVE-2026-34189

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

BIT-RABBITMQ-2026-61837 RabbitMQ: AMQP 1.0 management `GET /bindings` exposes full binding topology to any authenticated AMQP user without resource/management permission checks

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, AMQP 1.0 management GET /bindings exposes full binding topology to any authenticated AMQP user without resource/management permission checks. the AMQP 1.0 HTTP-over-AMQP management endpoint GET...

EUVD-2026-90592

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-34189 CSRF in Event Response Deletion

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

EUVD-2026-90591

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-34189

A Cross-Site Request Forgery (CSRF) vulnerability exists in Pandora FMS (version 777 onwards). This flaw allows an attacker to trigger the unauthorized deletion of event responses by tricking an authenticated administrator into visiting a malicious page, which then executes a forged GET request ....