hfs-cve-2014-6287-exploit

HFS CVE-2014-6287 漏洞利用工具 概述 本仓库包含一个基于 Python 的漏洞利用工具，旨在利用 HTTP File Server HFS 版本 2.3.x 中的 CVE-2014-6287 漏洞。该漏洞允许攻击者在服务器上执行任意命令，可能导致未授权访问和控制。 ⚠️ 免责声明： 本工具仅用于教育目的和授权的渗透测试 。未经明确许可，针对您不拥有或无权测试的系统使用本工具是非法且不道德的。作者和贡献者不承担 因本工具被滥用或造成任何损害的责任。 目录 特点 前提条件 安装 使用 工作原理 配置 故障排除 贡献 作者 许可证 特点 命令执行： 在目标 HFS...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

An unauth SSTI in the Rejetto HTTP File Server HFS. Original finder PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Tested against versions: 2.4.0 RC7, 2.3m Example usage: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured,...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 Este repositorio contiene una explicación detallada y un PoC funcional para la ejecución remota de comandos en Rejetto HTTP File Server HFS 2.3.x. Configuración: Crea un listener con netcat. root@kitploit: nc -lnvp 1234 Cambia la IP del...

CVE-2024-23692

POC - Vulnerabilidad de RCE no autenticada en Rejetto HTTP File Server - CVE-2024-23692 Resumen POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 es una vulnerabilidad crítica en Rejetto HTTP File Server HFS versión 2.3m, que permi...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang 加入我们定时查收各类漏洞 EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS服务器 RCE FOFA "HttpFileServer" 注意事项 影响范围为 HFS2.3 及以下版本 使用方法 How To Use ulimit -n 999999; zmap -p PORT -B500M | go run hfs.go PORT CHANGE THE PORT WHICH U WANNA TO EXPLOIT TE...

CVE-2024-23692

Vulnerabilidad CVE-2024-23692 en Rejetto HFS HTTP File Server Resumen Rejetto HFS HTTP File Server es un servidor simple de archivos web que facilita el intercambio de archivos a través de una red o internet. A pesar de su facilidad de uso y simplicidad, se ha descubierto una vulnerabilidad críti...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

Este repositorio no tiene un README...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

CVE-2024-23692

CVE-2024-23692 - Ejecución Remota de Código RCE en Rejetto HFS Una documentación táctica y guía de explotación para CVE-2024-23692 , una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada que afecta a las versiones de Rejetto HTTP File Server HFS anteriores a la 2.3m. Esta gu...

CVE-2024-23692

Rejetto HTTP File Server HFS 未授权 RCE 漏洞复现 CVE-2024-23692 简介 Rejetto HTTP File Server HFS 是一个轻量级的 HTTP 文件服务器，广泛用于文件共享和文件传输。CVE-2024-23692 漏洞是一个模板注入漏洞，允许远程、未经身份验证的攻击者通过发送特制的 HTTP 请求在受影响的系统上执行任意命令。截至 CVE 分配日期，Rejetto HFS 2.3m 不再受支持。 漏洞详情 CVE 编号 : CVE-2024-23692 漏洞类型 : 模板注入漏洞，远程代码执行 RCE 影响版本 : Rejett...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...

EUVD-2026-43506

Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a crafted username that is written to the error log and executes JavaScript in an administrator's browser when the logs ar...

Exploit for Code Injection in Rejetto Http_File_Server

Optimum --- Optimum – Hack The Box Writeup Overview I...

CVE-2023-4118

A vulnerability, which was classified as problematic, was found in Cute Http File Server 2.0. This affects an unknown part of the component Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

EUVD-2008-0420

Malware in sbrugna...

EUVD-2019-0574

Malware in sbrugna...

EUVD-2014-7098

Malware in sbrugna...

EUVD-2008-0416

Malware in sbrugna...

EUVD-2008-0415

Malware in sbrugna...