38 matches found
CVE-2017-18349
Lab 6-CVE-2017-18349 I. SYSTEM ANALYSIS Attack Surface Identification Let's start with what is running in the environment. I list all active containers: docker ps The victim exposes only a single port:8090 Currently, I am not yet fully clear on the target. From the docker ps results, the system...
CVE-2020-1938
cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...
CVE-2019-13956
CVE-2019-13956 cd CVE-2019-13956 docker-compose up -d http://127.0.0.1:8090...
CVE-2024-51378
CVE-2024-51378 Analysis of the CVE-2024-51378 vulnerability, scripts for searching vulnerable hosts, using the exploit in single-threaded and multi-threaded mode in Python and nuclei. The use of scripts is allowed only for educational purposes on test hosts. 1-CVE-2024-51378.pdf - main file with ...
CVE-2026-52102-PoC
CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonstrating CVE-2026-52102. Usage python3 CVE-2026-52102-PoC.py Targets Add one target per line to the targets.txt file. Note: Only include systems that you own or have explicit authorization to test. Example: https://example.local:8090...
Deep Sea Electronics DSE 855 Generator Controller - Detect
Deep Sea Electronics DSE 855 is a generator/mains automatic transfer switch ATS controller with a built-in HTTP web server for remote monitoring and configuration of generator control systems. The interface is commonly exposed on port 8090 and requires no authentication by default. !/usr/bin/env...
CVE-2026-22103
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22096
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22095
The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22103 Command injection in NPC start web endpoint
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22103 Command injection in NPC start web endpoint
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22103
CVE-2026-22103 : The NPC start endpoint on the web server listening at port 8090 is vulnerable to command injection. The public CVSS v4.0 metrics indicate a base score of 9.3 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and no user interaction. Impacts are...
EUVD-2026-43333
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...
CVE-2026-22096
CVE-2026-22096 concerns a webserver running on port 8090 that does not require authentication, enabling sensitive information leakage (e.g., configured passwords) and file uploads via multiple endpoints. The Connected documents provide the same description across NVD and CVE records, with no vend...
EUVD-2026-43328
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22096 Missing authentication for webserver endpoints
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
CVE-2026-22096 Missing authentication for webserver endpoints
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...
EUVD-2026-43326
The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...