nmap-CVE-2022-29464

nmap-CVE-2022-29464 nmap-CVE-2022-29464 es un script NSE para detectar la vulnerabilidad CVE-2022-29464. Vulnerabilidad de transferencia de archivos arbitraria no autorizada y sin restricciones que permite a atacantes no autenticados obtener RCE en servidores WSO2 mediante el envío de archivos JS...

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

CVE-2021-26828_ScadaBR_RCE

POC CVE-2021-26828ScadaBREjecuciónRemotaDeCódigo ScadaBR 0.9.1 en Linux y hasta 1.0 y 1.12.4CE en Windows permite a usuarios autenticados remotos cargar y ejecutar archivos JSP arbitrarios a través de 'viewedit.shtm' y Ejecución Remota de Código. Uso del Exploit Comandos: Windows: $ sudo python...

CVE-2021-22005-metasploit

CVE-2021-22005-metasploit el script de metasploit POC/EXP sobre CVE-2021-22005 VMware vCenter Server contiene una vulnerabilidad de carga arbitraria de archivos preparación POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -...

CVE-2017-12615

curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...

MAGNOLIA-8348

MAGNOLIA-8348: Magnolia CMS における FreeMarker 制限バイパス 3 Magnolia CMS v6.2.17 以前の FreeMarker フィルタにおける問題により、攻撃者はセキュリティ制限をバイパスし、細工された FreeMarker ペイロードを介して任意のコードを実行したり、任意のファイルの読み取り/書き込み/移動/コピー/削除を行ったり、DoS 攻撃を仕掛けたりすることが可能になります。任意の JSP ファイルを書き込むことで、任意のコード実行が実際に達成されました。 協力: この脆弱性は Marian-Razvan Ilisanu...

CVE-2024-50379-exp

CVE-2024-50379-exp -t время гонки условий -u домен -f запись веб-шелла В ходе тестирования было обнаружено, что при первой гонке условий существует большая вероятность неудачной записи. Для успешной записи веб-шелла требуется повторная гонка условий. Поэтому скрипт сначала выполняет фиксированную...

CVE-2022-29464

CVE-2022-29464 Exploit e writeup di WSO2 RCE CVE-2022-29464. Dettagli CVE-2022-29464 è una vulnerabilità critica su WSO2 scoperta da Orange Tsai. La vulnerabilità è un upload arbitrario di file non autenticato e senza restrizioni che consente ad attaccanti non autenticati di ottenere RCE sui serv...

CVE-2021-22005

CVE-2021-22005-metasploit lo script metasploit POC/EXP riguardante CVE-2021-22005 VMware vCenter Server contiene una vulnerabilità di upload arbitrario di file preparazione POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation und POC Dieses Repository enthält einen Proof of Concept POC für CVE-2024-50379 , eine Sicherheitslücke, die Apache Tomcat betrifft. Das Problem beinhaltet eine Time-of-Check-Time-of-Use TOCTOU Race-Condition , die zu Remote Code Execution RCE führen kann, insbesondere...

nuclei-template-cve-2025-31324-check

Controllo SAP CVE-2025-31324 Panoramica Questo template è progettato per verificare la presenza della vulnerabilità SAP NetWeaver CVE-2025-31324. Questa vulnerabilità consente a utenti non autorizzati di caricare file JSP tramite l'endpoint /developmentserver/metadatauploader, il che può portare ...

CVE-2017-12617

Primeiros passos O objetivo desta Prova de Conceito é demonstrar como é possível usar o CVE-2017-12617 para ter controle remoto em um servidor Apache Tomcat. Instruções 1. Execute este comando para iniciar o servidor. make serverup 2. Execute este comando para executar o ataque e enviar um web...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Verwendung : root@kitploit: python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit e writeup. Dettagli CVE-2022-29464 è una grave vulnerabilità in WSO2. La vulnerabilità è un caricamento arbitrario di file non autorizzato e senza restrizioni che consente a utenti non autorizzati di caricare file JSP dannosi sui server WSO2 e ottenere l'esecuzione...

CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warnung Dies ist eine Proof-of-Concept-Umgebung und ein Exploit für bekannte CVEs, ausschließlich zu Lern- und Bildungszwecken. Verwenden Sie diese Skripte oder Techniken nicht auf Systemen, die Ihnen nicht gehören oder für die Sie keine ausdrückliche...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 e CVE-2025-71260 Catena di Esecuzione Remota di Codice Pre-Autenticata su BMC FootPrints Strumento Generatore di Artefatti di Rilevamento per la Catena di Esecuzione Remota di Codice Pre-Autenticata su BMC FootPrints Descrizione Questo generatore di artefatti di rilevamento verific...

CVE-2026-15470

Technical details (affected product, versions, root cause, exploit specifics) are not publicly provided in the supplied documents. Monitor for updates.

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via insufficient validation of query parameters used in JSP file creation. An attacker can execute arbitrary code on the server by supplying crafted query parameters that cause a JSP file containing...

CVE-2026-8211

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/AdminDesignAction.java of the component JSP File Handler. The manipulation of the argument content results in code injection. The attack may...

EUVD-2026-28947

A vulnerability was detected in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/AdminDesignAction.java of the component JSP File Handler. The manipulation of the argument content results in code injection. The attack may...