80 matches found
tc_hack
Этот инструмент использует уязвимость в Apache Tomcat, известную как CVE-2017-12617, для получения удаленного доступа к любому серверу с включенным методом PUT. Его можно скачать здесь вам потребуется запустить его из командной строки Использование: tchack target IP target port...
CVE-2016-3088
Apache ActiveMQ PUT RCE одним кликом getshell usage:python3 CVE-2016-3088.py -u https://tartget.com/...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 は、Apache Tomcat においてリモートコード実行 RCE を引き起こす重大な脆弱性です。 この脆弱性は、バージョン 9.0.0.M1 - 9.0.0、8.5.0-8.5.22、8.0.0.RC1 - 8.0.46、7.0.0 - 7.0.81 に影響します。 検証は 8.0.24 でのみ実施しました。この脆弱性は、アプリケーションまたは Tomcat インスタンス自体で誤設定された PUT オプションを利用します。 PUT を使用してリバースシェルのペイロードをサーバーに送信して実行し、その間 netcat...
put2win
put2win Скрипт для автоматизации эксплуатации HTTP-метода PUT для получения оболочки. Установка root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Использование root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t...
CVE-2017-12615
Chia Junyuan을 기리며 https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 Windows에서 실행되는 Apache Tomcat 7.0.07.0.79용 POC 익스플로잇; CVE-2017-12615 PUT JSP 취약점. 설명: 기본적으로 Apache Tomcat 서버에서는 PUT 메서드를 통해 JSP 파일을 업로드할 수 없습니다. 이는 공격자가 JSP 셸을 업로드하여 서버에서 원격 코드 실행을 획득하는 것을 방지하기 위한 보안 조치로 보입니다...
Tomcat-CVE-2017-12615
Уязвимость произвольной записи файлов в Tomcat через метод PUT CVE-2017-12615 中文版本Chinese version Версия Tomcat: 8.5.19 Настройка окружения root@kitploit: docker-compose build docker-compose up -d После успешного выполнения указанных выше команд вы увидите пример страницы Tomcat, перейдя по адрес...
CVE-2017-12615
CVE-2017-12615 Использование: CVE-2017-12615.py http://targetip:port Когда ops по-дурацки включают метод put в web.xml на Apache Tomcat 7.0.0 - 7.0.79, этот EXP должен сработать...
Apache-GOExploiter
🛠 ApacheGoExploiter – Toolkit di Exploit per il Metodo PUT CVE-2025-24813 ApacheGoExploiter è uno strumento proof-of-concept basato su Go per scansionare e sfruttare server Apache Tomcat vulnerabili a CVE-2025-24813. Verifica il supporto HTTP PUT esposto sulla porta 8080 e tenta di caricare file ...
CVE-2026-55163 Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership
Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermissionroleid, which allowed either an administrator or any existing member of the target role. The handler passed data"users" and data"name" to service.updat...
GO-2026-5625 goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs
goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS in github.com/patrickhener/goshs...
CVE-2026-39901 monetr: Protected Transactions Deletable via PUT
monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw allows an authenticated tenant user to soft-delete synced non-manual transactions through the transaction update endpoint, despite the application explicitly blocking deleti...
Juju has a resource poisoning vulnerability
Summary Any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This one is very straightforward to just read in the code: Step 1: The authorisation mechanism for the resource handler is defined here. One is on...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
CVE-2026-23939 Path Traversal in Local File Store Backend
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Store.Local' module allows Relative Path Traversal. This vulnerability is associated with program files lib/hexpm/store/local.ex and program routines...
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...
PT-2025-49017
Name of the Vulnerable Software and Affected Versions Seafile version 12.0.10 Description A stored Cross-Site Scripting XSS issue exists in Seafile. This allows an attacker to execute arbitrary code in a victim’s browser. The issue is caused by storing malicious payloads with the name parameter i...
Mageia: Security Advisory (MGASA-2025-0250)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2020-29733
Malware in sbrugna...