Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

45 matches found

CVE
CVE•added 2024/05/31 9:36 a.m.•429 views

CVE-2024-23692

CVE-2024-23692 affects Rejetto HTTP File Server (HFS) versions up to 2.3m. The vulnerability is a server‑side template injection in the search parameter that is reflected into HFS templates, allowing an unauthenticated attacker to execute arbitrary commands (remote code execution). Exploitation c...

9.8CVSS9.9AI score0.99471EPSS
SaveIn wildExploits21References7Affected Software1
Cvelist
Cvelist•added 2024/05/31 9:36 a.m.•75 views

CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS10AI score0.99471EPSS
SaveExploits21References3
Vulnrichment
Vulnrichment•added 2024/05/31 9:36 a.m.•36 views

CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS9.9AI score0.99471EPSS
SaveExploits21References3
ATTACKERKB
ATTACKERKB•added 2024/05/31 12:00 a.m.•73 views

CVE-2024-23692

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS10AI score0.99471EPSS
SaveIn wildExploits21References4
Metasploit
Metasploit•added 2024/05/25 12:00 a.m.•617 views

Rejetto HTTP File Server (HFS) Unauthenticated Remote Code Execution

The Rejetto HTTP File Server HFS version 2.x is vulnerable to an unauthenticated server side template injection SSTI vulnerability. A remote unauthenticated attacker can execute code with the privileges of the user account running the HFS.exe server process. This exploit has been tested to work...

9.8CVSS8.9AI score0.99471EPSS
SaveExploits21
Positive Technologies
Positive Technologies•added 2023/08/18 12:00 a.m.•14 views

PT-2023-9232

Name of the Vulnerable Software and Affected Versions Rejetto HTTP File Server versions 2.3m and earlier Description The vulnerability is related to the improper neutralization of special elements used in a template engine, allowing a remote, unauthenticated attacker to execute arbitrary commands...

10CVSS7.6AI score0.99471EPSS
SaveExploits21References100
CISA KEV Catalog
CISA KEV Catalog•added 2022/03/25 12:00 a.m.•122 views

Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server HFS or HttpFileServer allows remote attackers to execute arbitrary programs...

10CVSS9.4AI score0.99323EPSS
SaveIn wildExploits23
Check Point Advisories
Check Point Advisories•added 2019/06/17 12:00 a.m.•35 views

Rejetto HTTP File Server Remote Code Execution (CVE-2014-6287)

A remote code execution vulnerability exists in Rejetto HTTP File Server. This vulnerability is due to a regular expression that fails to handle null bytes. A remote unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to a target server...

10CVSS1.3AI score0.99323EPSS
SaveExploits23
Packet Storm
Packet Storm•added 2016/01/04 12:00 a.m.•110 views

Rejetto HTTP File Server 2.3.x Remote Code Execution

!/usr/bin/python Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 04-01-2016 Remote: Yes Exploit Author: Avinash Kumar Thapa aka "-Acid" Vendor Homepage: http://rejetto.com/ Software Link: http://sourceforge.net/projects/hfs/ Version: 2.3...

7.5CVSS0.99323EPSS
SaveExploits23
Exploit DB
Exploit DB•added 2016/01/04 12:00 a.m.•1366 views

Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (2)

!/usr/bin/python Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 04-01-2016 Remote: Yes Exploit Author: Avinash Kumar Thapa aka "-Acid" Vendor Homepage: http://rejetto.com/ Software Link: http://sourceforge.net/projects/hfs/ Version: 2.3...

10CVSS8.2AI score0.99323EPSS
SaveExploits23
Prion
Prion•added 2014/10/10 1:55 a.m.•28 views

Design/Logic Flaw

The file comment feature in Rejetto HTTP File Server hfs 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executable macro symbols...

7.5CVSS8.2AI score0.09185EPSS
SaveExploits5References4Affected Software1
CVE
CVE•added 2014/10/10 1:00 a.m.•135 views

CVE-2014-7226

The CVE-2014-7226 entry concerns Rejetto HTTP File Server (HFS) versions 2.3c and earlier, where the file comment feature allows remote code execution. The root cause is improper handling/validation of certain invalid UTF-8 byte sequences that are interpreted as executable macro symbols when the ...

7.5CVSS7.7AI score0.09185EPSS
SaveExploits5References4Affected Software1
NVD
NVD•added 2014/10/07 10:55 a.m.•40 views

CVE-2014-6287

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server aks HFS or HttpFileServer 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action...

10CVSS9.6AI score0.99323EPSS
SaveExploits23References8
Prion
Prion•added 2014/10/07 10:55 a.m.•32 views

Design/Logic Flaw

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server aks HFS or HttpFileServer 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action...

10CVSS7.6AI score0.99323EPSS
SaveExploits23References7Affected Software1
CVE
CVE•added 2014/10/07 10:00 a.m.•1541 views

CVE-2014-6287

The vulnerability CVE-2014-6287 affects Rejetto HTTP File Server (HFS) 2.3x prior to 2.3c. It stems from the findMacroMarker function in parserLib.pas, where a null-byte sequence (%00) in a search action allows remote attackers to execute arbitrary code. Public exploits and Metasploit modules exi...

10CVSS9.4AI score0.99323EPSS
SaveIn wildExploits23References8Affected Software1
Vulnrichment
Vulnrichment•added 2014/10/07 10:00 a.m.•14 views

CVE-2014-6287

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server aks HFS or HttpFileServer 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action...

9.6AI score0.99323EPSS
SaveExploits23References7
ATTACKERKB
ATTACKERKB•added 2014/10/07 12:00 a.m.•64 views

CVE-2014-6287

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server aks HFS or HttpFileServer 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

10CVSS9.2AI score0.99323EPSS
SaveIn wildExploits23References10
Exploit DB
Exploit DB•added 2014/10/02 12:00 a.m.•71 views

Rejetto HTTP File Server (HFS) 2.3a/2.3b/2.3c - Remote Command Execution

========================================================== HTTP File Server 2.3a - 2.3b - 2.3c Remote Command Execution Author : Daniele Linguaglossa Date: 30/09/2014 Remote: Yes Vendor Homepage: http://rejetto.com/ Software Link: http://downloads.sourceforge.net/hfs/hfs2.3c.src.zip CVE:...

7.5CVSS5.2AI score0.09185EPSS
SaveExploits5
exploitpack
exploitpack•added 2014/10/02 12:00 a.m.•50 views

Rejetto HTTP File Server (HFS) 2.3a2.3b2.3c - Remote Command Execution

Rejetto HTTP File Server HFS 2.3a2.3b2.3c - Remote Command Execution ========================================================== HTTP File Server 2.3a - 2.3b - 2.3c Remote Command Execution Author : Daniele Linguaglossa Date: 30/09/2014 Remote: Yes Vendor Homepage: http://rejetto.com/ Software Lin...

7.5CVSS0.4AI score0.09185EPSS
SaveExploits5
exploitpack
exploitpack•added 2014/09/15 12:00 a.m.•132 views

Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (1)

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution 1 Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 11-09-2014 Remote: Yes Exploit Author: Daniele Linguaglossa Vendor Homepage: http://rejetto.com/ Software Link:...

7.5CVSS0.99323EPSS
SaveExploits23
Rows per page
Query Builder