ActiveMQ-RCE-Exploit

ActiveMQ-Exploit अंग्रेज़ी | सरलीकृत चीनी CVE-2023-46604 ActiveMQ RCE 5.18.3 Exploit बिना नेटवर्क शोषण JDK 1.8 पर चलने का समर्थन करता है, लक्ष्य संस्करण स्वचालित रूप से पता लगाता है कि क्या यह भेद्यता की सीमा में है। बिना नेटवर्क शोषण का समर्थन करता है, Shiro ini कॉन्फ़िगरेशन का उपयोग करके इको शो...

RuoYI-4.2-Shiro-721-Docker-PoC

RuoYI 4.2 Shiro 1.4.1 Ambiente di riproduzione della vulnerabilità Shiro-721 Utilizzato per riprodurre la vulnerabilità Shiro-721 CVE-2019-12422 su RuoYI. Attenzione: questo servizio presenta gravi vulnerabilità. Utilizzare solo per scopi di riproduzione delle vulnerabilità, non in ambienti di...

cve-2020-13933

cve-2020-13933 cve-2020-13933 vulnerabilità di bypass dei permessi di Apache Shiro Questa riproduzione è molto semplice, prima usa IDEA+shiro per impostare l'ambiente Riferimento: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Poi esegui, accedi, cattura il pacchetto...

shiro-CVE-2020-11989

Questo repository non contiene un README...

shirocrack

shirocrack Cracker di hash semplice per hash Apache Shiro scritto in Golang. Utile per sfruttare CVE-2024-4956. Facciamo breve CVE-2024-4956 è una vulnerabilità di path traversal in Sonatype Nexus Repository che permette a un utente non autenticato con accesso di rete al server di leggere file...

CVE-2021-34045

Informações Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Data do exploit：01.06.2021 Autor do exploit：Al1ex@Heptagram Página inicial do fornecedor：https://github.com/201206030/novel-plus Versão afetada：novel-plus-install-v3.5.3 Descrição：O sistema Novell plus carrega o...

shisoserial

shisoserial الوثيقة الإنجليزية ما هذا؟ أداة استغلال سريعة لثغرة إلغاء التسلسل في Shiro CVE-2016-4437 المساهمون 4nth0ny @مختبر الجمعة مرحباً بفتح القضايا / طلبات السحب : البيئة python 3.x JDK 1.8 التثبيت root@kitploit: python3 -m pip install -r requirements.txt لـ AttributeError: module...

CVE-2026-70557

diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no field or entity allowlist. The only guard, relatedDataSecurityCheck, returns true unconditionally, so any authenticated...

CVE-2026-56130

A flaw was found in Apache Shiro. When the 'Remember me' functionality is enabled, the server does not verify the age of the 'Remember me' cookie. This allows a remote attacker to intercept a valid cookie and reuse it indefinitely, potentially leading to session hijacking. Mitigation Mitigation f...

PT-2026-53934

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.3 Description Authenticated low-privilege users can perform full create, read, update, and delete operations on OpenAPI credentials. This occurs because the 'OpenApiAuthController' and...

Linux Distros Unpatched Vulnerability : CVE-2026-56130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Remember me cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the...

Linux Distros Unpatched Vulnerability : CVE-2026-56091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This...

CVE-2026-56130

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only whe...

DEBIAN-CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

DEBIAN-CVE-2026-56130

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only whe...

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

UBUNTU-CVE-2026-56130

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only whe...

CVE-2026-56130

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only whe...

UBUNTU-CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...