265 matches found
cloudgoat
CloudGoat ☁️🐐...
CVE-2023-21939
JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK + Apache XML...
CVE-2024-46506
CVE-2024-46506 This is a standalone Python implementation for CVE-2024-46506. I created this script because I could only find the Metasploit module and needed a lightweight, portable version that doesn't require the full Metasploit Framework. Disclaimer This tool is intended for educational...
CVEs
Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...
CVE-2021-34371.jar
CVE-2021-34371.jar CVE-2021-34371.jar from https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371/rhinogadget USE EXP...
CVE-2026-103093
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...
CVE-2026-103093 Sandbox Escape via Table Rotation in ServiceNow AI Platform
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...
EUVD-2026-113362
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potential...
CVE-2026-103093
A sandbox escape security issue exists in the ServiceNow AI Platform . This vulnerability allows an authenticated user with the admin role to bypass Rhino sandbox restrictions , enabling the execution of arbitrary code on the underlying host operating system. Such an exploit could lead to further...
CVE-2026-84858
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...
CVE-2026-84858 Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...
CVE-2026-84858 Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...
CVE-2026-84858
ScadaLTS 2.8.1-release-candidate build 0 is vulnerable to Authenticated Remote Code Execution via a scripting sandbox bypass. The DWR "DataSourceEditDwr" class exposes the "validateScript" method, which compiles and executes attacker-supplied JavaScript through the Rhino scripting engine without ...
EUVD-2026-80825
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...
CVE-2026-84858: Improper Control of Generation of Code
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no...
PT-2026-93804
Name of the Vulnerable Software and Affected Versions ScadaLTS version 2.8.1-release-candidate build 0 Description An authenticated remote code execution issue exists due to a scripting sandbox bypass. The DWR "DataSourceEditDwr" class exposes the validateScript function, which compiles and...
SAP Solution Manager EEM RCE (CVE-2020-6207)
Exploits CVE-2020-6207 missing authentication on /EemAdminService/EemAdmin to upload an AssignJS EEM script and execute self.payload on a connected SAP Diagnostics Agent via Rhino/Java Runtime. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Solution Manager EEM servlet RCE CVE-2020-6207 — rever...
PaperCut NG/MF Auth Bypass RCE (CVE-2023-27350)
Exploits CVE-2023-27350 in PaperCut NG/MF before 20.1.7, 21.2.11, and 22.0.9. Unauthenticated access to SetupCompleted grants an admin session, then Rhino print scripting runs self.payload via java.lang.ProcessBuilder. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2023-27350 — PaperCut NG/MF...
CLSA-2026-1771459787 TuxCare security update for org.mozilla:rhino (1 CVE)
TuxCare rebuilt org.mozilla:rhino to address 1 CVE. Fixed in 1.7.10-tuxcare.1...
com.github.jknack:handlebars-guava-cache (2.3.1), com.github.jknack:handlebars-helpers (2.3.1) +8 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.3.1)
com.github.jknack:handlebars MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.3.1 - com.github.jknack:handlebars-helpers 2.3.1 -...