CVE-2022-42889

CVE-2022-42889 Тестовое приложение Этот репозиторий содержит простое приложение, использующее Apache Commons Text 1.10, которое уязвимо к CVE-2022-42889. Запуск приложения Замените команду nc в DemoApplication.java на IP-адрес вашего хоста. Прослушивание с помощью netcat: $ nc -l -p 30000 Сборка ...

CVE-2022-42889

Тестовое приложение CVE-2022-42889 Этот репозиторий содержит простое приложение, использующее Apache Commons Text 1.9, которое уязвимо к CVE-2022-42889. Запуск приложения Соберите и запустите приложение через docker: docker build . -t vulnerable-app docker run vulnerable-app $ docker ps CONTAINER...

Log4NetSolarWindsSNMP-

Log4NetSolarWindsSNMP- Тестовое приложение для оповещения CVE-2018-1285 для DLL SolarWinds...

CVE-2022-42889

Тестовое приложение CVE-2022-42889 Этот репозиторий содержит простое приложение, использующее Apache Commons Text 1.9, которое уязвимо для CVE-2022-42889. Шаги для воспроизведения эксплойта Шаги для воспроизведения эксплойта в репозитории Скопируйте DemoApplication.java в ваш репозиторий. Запусти...

rails-cve-2012-5664-test

Демонстрация уязвимости Rails CVE-2012-5664 Это демонстрационное приложение показывает, как работает уязвимость Rails CVE-2013-5664. Подробнее: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts...

EUVD-2014-5565

Malware in sbrugna...

EUVD-2017-7405

Malware in sbrugna...

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

Apache Tiles: Unvalidated input may lead to path traversal and XXE

The value set as the DefaultLocaleResolver.LOCALEKEY attribute on the session was not validated while resolving XML definition files, leading to possible path traversal and eventually SSRF/XXE when passing user-controlled data to this key. Passing user-controlled data to this key may be relativel...

CVE-2020-6371

User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP POWL test application versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure...

CVE-2020-6371: Undefined Security Weakness

User enumeration vulnerability can be exploited to get a list of user accounts and personal user information can be exposed in SAP NetWeaver Application Server ABAP POWL test application versions - 710, 711, 730, 731, 740, 750, leading to Information Disclosure...

CVE-2020-6324

SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...

CVE-2020-6324

The CVE-2020-6324 entry affects SAP NetWeaver AS ABAP (BSP Test Application sbspext_table) across SAP NetWeaver ABAP versions 700–755. The vulnerability is a Reflected Cross-Site Scripting issue triggered by an unauthenticated user sending a polluted URL; when the victim clicks, the attacker can ...

PT-2020-19098 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP Netweaver AS ABAP versions 700 through 755 Description: The issue allows an unauthenticated attacker to send a polluted URL to the victim. When the victim clicks on this URL, the attacker can read and modify the information available in t...

CVE-2020-6246: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTTABLE, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6213: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

SAP NetWeaver AS ABAP Business Server Input Validation Error Vulnerability

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. An input validation error vulnerability exists in SAP NetWeaver AS ABAP Business Server Pages Test Application IT00. The vulnerability stems from the network system...

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6217

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-6217

The CVE-2020-6217 entry concerns SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, affected in versions 700–754, with a reflected XSS due to insufficient encoding of user-controlled inputs in the Web UI. The issue is documented across multiple sources (e.g., Red Hat, CNVD, CVE re...