CVE-2024-44760: Incorrect Default Permissions

Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allows attackers to access sensitive information regarding the server...

PT-2019-9674

Name of the Vulnerable Software and Affected Versions Netscape Enterprise version 3.63 Description The issue concerns a reflected XSS vulnerability in the servlet/SnoopServlet, which is installed by default. This allows a remote unauthenticated attacker to potentially exploit the vulnerability by...

SnoopServlet Cross Site Scripting

SnoopServlet simply echos back the request line and the headers that were sent by the client, plus any HTTPS information. Search Google for: j2ee/servlet/snoopservlet to find a lot of vuln sites. PoC:...