289 matches found
CVE-2020-17530
CVE-2020-17530 Struts2 S2-061 Удаленное выполнение команд CVE-2020-17530 Инструкция по использованию: python CVE-2020-17530.py -u url python CVE-2020-17530.py -f file.txt python CVE-2020-17530.py -f file.txt -o outfile.txt python CVE-2020-17530.py -f file.txt -p socks5://127.0.0.1:7890 python...
CVE-2019-0230
De quoi s'agit-il Ceci est un projet de test simple pour S2-059 qui peut être utilisé pour analyser les détails de cette vulnérabilité. Comment utiliser Étape 1 : Utilisez IDEA pour importer ce projet Étape 2 : Configurez le serveur Tomcat Étape 3 : Utilisez un navigateur pour accéder à...
CVE-2020-17530
Qu'est-ce que c'est Ceci est un projet de test simple pour S2-061 qui peut être utilisé pour analyser les détails de cette vulnérabilité. Comment utiliser Étape 1 : Utilisez IDEA pour importer ce projet Étape 2 : Configurez le serveur Tomcat Étape 3 : Accédez via le navigateur à...
CVE-2020-17530
S2-061 스크립트는 모두 vulhub의 struts2-059/061 취약점 테스트 환경을 기준으로 작성되었으며, 일반적이지 않으니 고수분들의 많은 조언 부탁드립니다. struts2-061-poc.py 간단한 시스템 명령 실행 가능 사용법: python struts2-061-poc.py http://ip:port command 예시: python struts2-061-poc.py http://192.168.0.7:8080 whoami S2-061-shell.py 리버스 셸 가능 사용법: 1. 먼저 머신 A에서 지정된 포트를...
CVE-2020-17530
Exploit d'injection OGNL Résumé Script Python simple pour exploiter les vulnérabilités d'injection OGNL dans Apache Struts2/Tomcat et exécuter des commandes système. Utilisation pip install requests colorama python3 exploit.py -u http://target/index.action -c "id"...
Struts2-045-Exp
Outils d'exploitation Struts2 S2-045 CVE-2017-5638 Fonction de l'exploit: Exécution de commande Obtenir le chemin physique du site cible Téléchargement de fichier Obtenir un shell Webshell par défaut pour Chopper Support HTTP/HTTPS Support des URL avec n'importe quel port Remarque : le mot de pas...
freemarker_RCE_struts2_s2-061
freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE тестовый скрипт python freemarkerRCEstruts2s2-061.py...
Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638
Modded-Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638-AUTO-EXPLOITER...
vulhub-struts2
Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Aperçu Ce projet illustre la vulnérabilité d'exécution de code à distance RCE dans Apache Struts2 CVE-2017-5638. Les attaquants peuvent exploiter un en-tête HTTP Content-Type malveillant pour exécuter des commandes système arbitraires sur les serveurs...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the endpoint that collects Content Security Policy violation reports. An attacker can cause excessive memory consumption and disrupt service availability by submitting a large,...
Allocation of Resources Without Limits or Throttling
Overview org.apache.struts:struts2-core is a popular open-source framework for developing web applications in the Java programming language. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the handling of the localized-text cache. An...
Unsynchronized Access to Shared Data in a Multithreaded Context
Overview Affected versions of this package are vulnerable to Unsynchronized Access to Shared Data in a Multithreaded Context in the JSON plugin due to shared parsing state across concurrent requests. An attacker can access data associated with another user's request or bypass configured parsing...
Unsynchronized Access to Shared Data in a Multithreaded Context
Overview Affected versions of this package are vulnerable to Unsynchronized Access to Shared Data in a Multithreaded Context in the JSON plugin's SMD/JSON-RPC handling. An attacker can access response content intended for another user's session by making concurrent requests, potentially exposing...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JSON plugin when handling JSON request bodies. An attacker can cause excessive memory consumption by sending a large JSON payload, potentially leading to service disruption for...
CVE-2026-44668
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invoke without checking for a valid session. Four action methods in BoilerPlateConfig perform no local...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Overview This...
nanshihui__PocCollect.e13e1379
PocCollect !Build Statushttp://nanshihui.github.io/public...
br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +272 more potentially affected by CVE-2025-68493 via org.apache.struts.xwork:xwork-core (>=2.2.1, <=2.3.37)
org.apache.struts.xwork:xwork-core MAVEN version =2.2.1, =2.0.0, =1.2.4, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =2.0.0, =2.2.1 and more Source cves: CVE-2025-68493 Source advisory: OSV:GHSA-QCFC-HMRC-59X7...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +58 more potentially affected by CVE-2025-68493 via com.opensymphony:xwork (>=2.0.4, <=2.1.3)
com.opensymphony:xwork MAVEN version =2.0.4, =1.2.1, =4.0.1, =0.9.2, =1.1.5, =1.3.3, =1.3.1, =2.0.5-incubating, =2.0.9, =2.0.11, =2.0.9, =2.0.9, =2.0.9, =2.1.6 - org.apache.struts:struts2-convention-plugin 2.1.6 and more Source cves: CVE-2025-68493 Source advisory: OSV:GHSA-QCFC-HMRC-59X7...