CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introducción: Apache Struts 2 es un framework de aplicaciones web de código abierto para desarrollar aplicaciones Java EE. Es la segunda generación del framework Struts, lanzado por primera vez el 10 de octubre de 2006. El framework Struts está diseñado para ayudar a...

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 发布时间 2017-03-07 危害级别 高 AV:N/AC:L/Au:N/C:C/I:C/A:C 影响产品 Apache struts =2.3.5，=2.5， CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then use...

apache__myfaces_CVE-2011-4367_2-0-11

Implementación de Apache de la especificación JavaServer Faces JSF y Jakarta Faces Ramas main Implementación de Jakarta Faces 5.0 4.1.x Implementación de Jakarta Faces 4.1 4.0.x...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 和 CVE-2025-48976 关于 本项目运行一个简单的文件上传端点，使用 Tomcat 10.1.41 和 Jakarta Servlet。 默认情况下，该漏洞利用程序会从 50 个工作节点并发发送 1000 个并行化的多部分请求，每个请求包含 1000 个部分和每个部分 50 个头。 运行 POC 构建并运行 Docker 容器： docker build -t poc-cve-2025-48988 . docker run -p 8080:8080 poc-cve-2025-48988 启动漏洞利用程序： python3...

payara__Payara_CVE-2022-37422_5-2022-2

Payara Platform Community Edition Crea. Innova. Eleva. Payara Platform Community Edition incluye runtimes de servidor de código abierto para proyectos de desarrollo y aplicaciones Jakarta EE y MicroProfile contenerizadas. Payara Server Community es una plataforma de middleware de código abierto,...

PoC-CVE-2017-5638

PoC：Apache Struts2 CVE-2017-5638（安全教学演示） 📌 概述 本项目是 CVE-2017-5638 的概念验证（PoC），这是一个著名的 Apache Struts2 漏洞，允许攻击者在受影响服务器上执行任意代码。 ⚠️ 本仓库包含一个安全的、非攻击性的演示 ，仅供教育目的 。它不执行任何恶意操作。 🔎 关于该漏洞 CVE ID ：CVE-2017-5638 类型 ：远程代码执行（RCE） 组件 ：Apache Struts2（Jakarta Multipart 解析器） 根本原因 ：Content-Type 头部中的用户输入被不当传递给 OGNL...

CVE-2017-5638

实验1 — Apache Struts2 OGNL注入 CVE-2017-5638 / S2-045 一、系统分析 攻击面分析 启动容器后，Struts2日志显示应用程序加载了熟悉的配置文件，如struts-default.xml 、struts-plugin.xml 和struts.xml 。这确认了所使用的框架是Apache Struts2 。 一个值得注意的点出现在这一行： Choosing bean jakarta for org.apache.struts2.dispatcher.multipart.MultiPartRequest...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Vulnerabilidad de Bypass de Autenticación en Apache Tomcat Resumen CVE-2024-52316 es una vulnerabilidad de bypass de autenticación identificada en Apache Tomcat. Este problema surge cuando Tomcat está configurado con un componente ServerAuthContext...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Ejemplo:...

Jakarta Tomcat 3.1 and 3.0 - Information Disclosure

Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access. id: CVE-2000-0760 info: name: Jakarta Tomcat 3.1 and 3.0 -...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 Script de prueba de vulnerabilidad RCE XworkStruts El analizador Jakarta Multipart en Apache Struts 2 2.3.x anteriores a 2.3.32 y 2.5.x anteriores a 2.5.10.1 tiene un manejo incorrecto de excepciones y generación de mensajes de error durante los intentos de carga de...

Security Bulletin: IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection (CVE-2026-12351)

Summary IBM MQ has addressed a JNDI injection vulnerability in the Jakarta Resource Adapter IVT servlet that could allow an unauthenticated remote attacker to execute arbitrary code on the hosting application server Vulnerability Details CVEID:CVE-2026-12351 DESCRIPTION: IBM MQ Jakarta Resource...

CVE-2017-5638

CVE-2017-5638 Vulnerabilidad RCE en Apache Struts 2.0 Este es un script para explotar CVE-2017-5638 - Permite a un atacante inyectar comandos del sistema operativo en una aplicación web a través del encabezado content-type Apache Struts 2 es un framework de aplicaciones web de código abierto para...

struts2-jakarta-inject

CVE-2017-5638 的 POC 漏洞利用 仅在你拥有或拥有明确测试权限的系统上使用此漏洞利用工具 安装 如果你的计算机上已经安装了 Go，那么使用 go get 是最简单的方法 go get github.com/Greynad/struts2-jakarta-inject 使用方法 单命令执行 struts2-jakarta-inject -u -c 'id' 伪交互式 Shell struts2-jakarta-inject -u -i...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 版本 2.3.x（低于 2.3.32）和 2.5.x（低于 2.5.10.1）的 Jakarta Multipart 解析器存在一个缺陷。该缺陷导致在尝试上传文件时异常处理不当并生成错误消息。因此，攻击者可以通过利用精心构造的 HTTP 头部（如 Content-Type、Content-Disposition 或 Content-Length）远程执行任意命令。 执行 python exploit.py -r -c 参考 NIST NVD MITRE Corporation...

BIT-TOMCAT-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

CVE-2026-58301

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

UBUNTU-CVE-2026-58301

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

EUVD-2026-68391

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

CVE-2026-58301 Apache Shiro: Server-side POST request may be steered to an alternate host

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...