CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Resumen Este código es el POC en Python de CVE-2023-32315, utilizado para ejecutar una serie de operaciones con el fin de verificar si el sitio web objetivo está afectado por la vulnerabilidad CVE-2023-32315 e intentar realizar algunas acciones...

CVE-2023-27350

CVE-2023-27350 影响 PaperCut MF/NG 的 CVE-2023-27350 概念验证代码 技术分析 关于漏洞的技术根本原因分析、入侵指标以及互联网暴露情况，可查阅我们的博客： https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise 摘要 该概念验证代码利用认证绕过漏洞，并结合滥用内置脚本功能来执行代码。 使用方法 python3 CVE-2023-27350.py --url 'http://10.0.40.56:9191' --command...

CVE-2025-24813-Scanner

CVE-2025-24813 扫描器 一个多线程漏洞扫描器，用于检测存在 CVE-2025-24813 漏洞的 Apache Tomcat 服务器（任意文件上传导致远程代码执行）。 描述 此扫描器通过以下方式检查存在 CVE-2025-24813 漏洞的 Apache Tomcat 服务器： 1. 通过 HTTP PUT 尝试上传序列化的 Java 对象 2. 验证上传的文件是否可以通过 jsessionid 参数执行 特性： 多线程扫描（可调整线程数） 支持 CSV 输入/输出 彩色编码的终端输出 详细的漏洞验证 优雅的中断处理 安装 git clone...

CVE-2020-9484

Apache Tomcat 反序列化漏洞 CVE-2020-9484 漏洞目标环境搭建 克隆此仓库 运行 docker-compose up -d 搞定！ 漏洞利用 POC 运行 curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx 名为 coldfx 的文件会在 tmp 目录中创建...

CVE-2020-9484

CVE-2020-9484 Tomcat Solo con fines educativos. Consulte la Referencia para los detalles. Ejecución $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy Verificación limpio $ docker...

CVE-2020-5421

Spring 安全漏洞 CVE-2020-5421复现 漏洞概述 CVE-2020-5421 可通过jsessionid路径参数，绕过防御RFD攻击的保护。先前针对RFD的防护是为应对 CVE-2015-5211 添加的。 什么是RFD 反射型文件下载漏洞RFD是一种攻击技术，通过从受信任的域虚拟下载文件，攻击者可以获得对受害者计算机的完全访问权限。 影响版本 Spring Framework 5.2.0 - 5.2.8 Spring Framework 5.1.0 - 5.1.17 Spring Framework 5.0.0 - 5.0.18 Spring Framework 4.3...

CVE-2025-24813

CVE-2025-24813 Tomcat PoC 用于授权 CTF/实验室环境的 PoC。它通过部分 PUT 写入 Tomcat 会话文件来利用 CVE-2025-24813，然后使用 JSESSIONID 触发反序列化。 先决条件 Python 3 Python 模块 requests Java JDK（java 和 javac） 本目录中包含的文件 commons-collections-3.2.1.jar 不需要 ysoserial。 文件 poccve202524813.py：Python 包装脚本，自动完成生成、上传和触发。...

Session Fixation

Overview org.opencastproject:base is a free and open source solution for automated video capture and distribution at scale. Affected versions of this package are vulnerable to Session Fixation via URL-based jsessionid handling in the Spring Security HTTP configuration in...

CVE-2026-77614

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614 Opencast: Session fixation in login enables account takeover via crafted link

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

EUVD-2026-81625

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614

Opencast , an open-source platform for managing educational audio and video content, is vulnerable to session fixation prior to versions 19.7 and 20.2. The default security configuration in etc/security/mh_default_org.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path paramet...

CVE-2026-77614 Opencast: Session fixation in login enables account takeover via crafted link

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614 Opencast: Session fixation in login enables account takeover via crafted link

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2026-77614: Session Fixation

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to versions 19.7 and 20.2, the default security configuration in etc/security/mhdefaultorg.xml accepts a client-selected JSESSIONID from the ;jsessionid= URL path parameter and does no...

CVE-2023-32315-java7-

CVE-2023-32315 0x01 Die zurückgegebene JSESSIONID und csrftoken abrufen und ein Anforderungspaket zum Hinzufügen eines Benutzers erstellen JSESSIONID und csrftoken ersetzen img.png root@kitploit: cd CVE-2023-32315-Openfire-Bypass/scanall go mod tidy go run main.go -u http://openfire.com:9090 0x02...

BIT-KEYCLOAK-2024-7341 Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured. This flaw allows an attacker who hijacks the current session before authenticati...

CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

CVE-2026-43828 Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

EUVD-2026-31734

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...