CVE-2022-42889-Analysis

CVE-2022-42889 Text4Shell Report A repository that organizes an analysis report for Apache Commons Text CVE-2022-42889 and attack demonstration materials based on a closed test environment. Documents CVE-2022-42889 - Vulnerability Analysis Report Repository Structure CVE-2022-42889-Report/ ├─...

text4shell-poc

CVE-2022-42889 PoC Test Application This is a vulnerable application developed as a Proof of Concept for the vulnerability CVE-2022-42889. Maven Installation In order to run this you will need: JDK 17 or above Maven 1. Clone the git repo git clone https://github.com/securekomodo/text4shell-poc.gi...

CVE-2022-22909

CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...

riskootext4shell

riskootext4shell text4shell script for Apache Commons Text =1.10 CVE-2022-33980 The Apache Commons Text library is an alternative to the native functionalities of the Java JDK. Versions prior to version 1.10.0 of Apache Commons Similar to CVE-2022-33980 python3 text4shell.py -u...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

Exploit for CVE-2026-112866

CVE-2026-112866 - Product Filter by WBW Unauthenticated SQL In...

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

CVE-2022-42889-RCE

CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote code execution exploit Text4Shell Vulnerability. Give a ⭐ for support ❤️ About this vulnerability CVE-2022-42889 is a new critical vulnerability similar to Spring4Shell and Log4Shell. Its a RCE Remote Code Execution vulnerability with...

CVE-2022-42889-PoC

CVE-2022-42889 PoC This is Proof of Concept for the vulnerability CVE-2022-42889. This code will run the JavaScript code 195 + 324. If vulnerable the output should be: PoC Output: 519 In order to run this you will need: JDK 11 or above Maven When prompted for an exploit string, you can either...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

Text4shell--Automated-exploit---CVE-2022-42889

Install maven - maven-linux //For automated hacking: 1../install.sh 2../exploit.sh 3.To remove the application use ./stopapp.sh //For manual hacking: 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080...

CVE-2026-42208_lab

LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduction environment for the SQL injection vulnerability in LiteLLM Proxy's API key authentication flow. Vulnerability Summary Item| Detail ---|--- Advisory| GHSA-r75f-5x8p-qvmc Type| SQL Injection CWE-89 Severity| Critical Affected| litellm...

text4shell-exploit

text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions Example python3 text4shell.py 127.0.0.1 192.168.1.2 4444 Make sure to set up a lsitener on your attacking...

pfsense-ovpn-learn-cn

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ovpn-learn-cn pfsense-ovpn-learn-cn Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org openvpn.learn-address.sh interpolates CN into su -m unbound -c "... localdata $CN.$DOMAIN ..."...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: OS command injection via runnmapscan The runnmapscan MCP tool builds its command by string interpolation of the target and additionalFlags parameters and runs it through childprocess.exec, i.e. /bin/sh -c. ⚠ Read this first — duplicate identifier This vulnerabili...

CVE-2022-42889-POC

CVE-2022-42889-POC Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889. What's the Issue : Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefi...

alaniz-cipher

The Alaniz Cipher v3 Sheaf-Based Post-Quantum Encryption via Vector-Valued Finite Field Permutations A cryptographic primitive based on the Nonlinear Sheaf Morphism Inversion Problem NL-SMIP: a polynomial system with secret coefficients coupled by sheaf cohomology over graphs. Paper v3 : L. Alani...

EXPLOIT-CVE-2021-44228

CVE-2021-44228 — Log4Shell PoC Lab DISCLAIMER This lab was created exclusively for educational and security research purposes. All traffic occurs within an isolated Docker network. Do not use this material on real systems or without explicit authorization. Misuse may be a crime. Use responsibly...

ICT287-CVE-2022-42889

ICT287-CVE-2022-42889 To find full exploit setup and recreation report please find the CVE-2022-42889-Project Vulnerability Exploitation Report file. VM that was used to build and run the exploit isn't included in this repository. Setup and exploit recreation for CVE-2022-42889 Text4Shell...

CVE-2022-42889

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...