rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 Este repositorio contiene una explicación detallada y un PoC funcional para la ejecución remota de comandos en Rejetto HTTP File Server HFS 2.3.x. Configuración: Crea un listener con netcat. nc -lnvp 1234 Cambia la IP del atacante por tu IP...

CVE-2024-23692

POC - Vulnerabilidad de RCE no autenticada en Rejetto HTTP File Server - CVE-2024-23692 Resumen POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 es una vulnerabilidad crítica en Rejetto HTTP File Server HFS versión 2.3m, que permi...

CVE-2024-23692

CVE-2024-23692 - Ejecución Remota de Código RCE en Rejetto HFS Una documentación táctica y guía de explotación para CVE-2024-23692 , una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada que afecta a las versiones de Rejetto HTTP File Server HFS anteriores a la 2.3m. Esta gu...

sccm-http-looter

SCCM HTTP Looter Cómo funciona Los puntos de distribución DP de SCCM son los servidores que Microsoft SCCM utiliza para alojar todos los archivos usados en instalaciones de software, parches, implementaciones de scripts, etc. Por defecto, estos servidores permiten el acceso mediante SMB TCP/445 y...

CVE-2024-23692

Rejetto HTTP File Server HFS Reproducción de la vulnerabilidad RCE no autenticada CVE-2024-23692 Introducción Rejetto HTTP File Server HFS es un servidor de archivos HTTP ligero, ampliamente utilizado para compartir y transferir archivos. La vulnerabilidad CVE-2024-23692 es una vulnerabilidad de...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Un SSTI sin autenticación en el Rejetto HTTP File Server HFS. PoC del descubridor original: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Probado contra las versiones: 2.4.0 RC7, 2.3m Ejemplo de uso: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload...

CVE-2024-23692-RCE

TG Únete a nosotros https://t.me/WanLiChangChengWanLiChang Únete a nosotros para recibir periódicamente EXP y POC de diversas vulnerabilidades CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS servidor RCE FOFA "HttpFileServer" Precauciones El alcance afectado es HFS 2.3 y versiones anterior...

CVE-2024-23692

Vulnerabilidad CVE-2024-23692 en Rejetto HFS HTTP File Server Resumen Rejetto HFS HTTP File Server es un servidor simple de archivos web que facilita el intercambio de archivos a través de una red o internet. A pesar de su facilidad de uso y simplicidad, se ha descubierto una vulnerabilidad críti...

hfs-cve-2014-6287-exploit

Herramienta de Explotación HFS CVE-2014-6287 Resumen Este repositorio contiene una herramienta de explotación basada en Python diseñada para aprovechar la vulnerabilidad CVE-2014-6287 en HTTP File Server HFS versiones 2.3.x. Esta vulnerabilidad permite a un atacante ejecutar comandos arbitrarios ...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

Este repositorio no tiene un README...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090061 advisory. In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names coul...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...

The vulnerability of the getDiskSpaceSync module, which is used to determine free disk space in the HTTP File Server 3 file server, allows a hacker to execute arbitrary commands.

The vulnerability of the getDiskSpaceSync function, which is responsible for determining free disk space on the HTTP File Server 3 file server, is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2026-11841 CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

PT-2026-65545

TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured web root in HttpBuilder::buildResponse without normalization, dot-segment...

EUVD-2026-43506

Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a crafted username that is written to the error log and executes JavaScript in an administrator's browser when the logs ar...

Exploit for Code Injection in Rejetto Http_File_Server

!BobXploit Cybersecurityhttps://img.shields.io/badge/BobXplo...

EUVD-2026-26753

A security flaw has been discovered in JeecgBoot up to 3.9.1. This vulnerability affects the function CommonController.uploadImgByHttp/HttpFileToMultipartFileUtil.httpFileToMultipartFile/HttpFileToMultipartFileUtil.downloadImageData of the file CommonController.java of the component...