CVE-2019-17558_Solr_Vul_Tool

Solr Velocity模板注入漏洞检测工具 Описание инструмента В конце октября 2019 года была обнаружена уязвимость удаленного выполнения команд через инъекцию Velocity-шаблонов в Solr. Ручное обнаружение этой уязвимости требует многократного перехвата и изменения запросов в Burp, что неэффективно. Был написан это...

CVE-2026-44825-Apache-Solr-Scanner

CVE-2026-44825 Apache Solr Scanner Этот репозиторий содержит сканер на Go для обнаружения и тестирования экземпляров Apache Solr, которые могут быть затронуты CVE-2026-44825, связанным с удалённым выполнением кода через шаблоны Velocity Velocity Template Remote Code Execution, RCE. Инструмент мож...

CVE-2024-5082

Обзор Этот репозиторий содержит Python-доказательство концепции для CVE-2024-5082 , уязвимости удаленного выполнения кода в Sonatype Nexus Repository Manager 2. Уязвимость позволяет пользователю с достаточными правами опубликовать специально сформированный Maven-артефакт и пометить его для...

CVE-2021-26084

CVE-2021-26084 Затронутые версии Версии 6.13.23 6.14.0 ≤ Версии 7.4.11 7.5.0 ≤ Версии 7.11.6 7.12.0 ≤ Версии 7.12.5 Причина и способ эксплуатации Confluence использует фреймворк для сопоставления URL с Java-классами, создавая то, что называется «action». URL-адреса action заканчиваются на «.actio...

solr_rce

Apache Solr RCE через Velocity-шаблон использование python: python solrrce.py http://x.x.x.x:8983 command закодированный payload для getshell http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Кратко о Solr Solr — это открытая корпоративная...

CVE-2020-13957

Apache Solr RCE CVE-2020-13957 Демо в Docker Демо на Mac Описание NVD CVE-2020-13957 NVD CVE-2020-13957 root@kitploit: Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous which could be used for remote code execution to be configured ...

XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)

XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...

CVE-2026-49833 DSpace: Path Traversal possible in LDN message generation

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

CVE-2026-49833 DSpace: Path Traversal possible in LDN message generation

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - CTF 라이트업 Apache Solr에서 Velocity Template Injection 취약점을 실제로 탐구하며, 자동화 도구Metasploit의 오류에서 성공적인 수동 익스플로잇으로 발전시킨 내용입니다. 이 라이트업은 도구 오류의 진단과 수동 익스플로잇으로의 전환pivot에 초점을 맞춰, 실습의 전체 추론 과정을 문서화합니다. 시나리오 항목| 설명 ---|--- 대상| 8983 포트에서 Apache Solr를 실행 중인 Linux 서버 목표| 민감한...

DSpace: Path Traversal is possible through LDN message generation

Overview A path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. This vulnerability impacts DSpace versions 8.0 = 8.3, 9.0 = 9.2. The attacker MUST already have DSpace administrator credentials in order to perform the attack. When reading a file input stream of an...

Exploit for Insecure Default Initialization of Resource in Apache Solr

CVE-2026-44825 Apache Solr Scanner This repository contains a...

CVE-2026-41258 OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange

OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria method in OpenMRS Core evaluates database-stored criteria strings as Apache Velocity templates without any sandbox configuration. The...

Prototype Pollution

Overview velocityjs is a Velocity Template LanguageVTL for JavaScript Affected versions of this package are vulnerable to Prototype Pollution through the processing of set directives in templates. An attacker can modify the global object prototype by supplying specially crafted template content,...

CVE-2025-12107

Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin privilege may inject and execute arbitrary template syntax within server-side templates. Successful exploitation of this vulnerability could allow a malicious actor with admin privilege to inject and...

CVE-2025-12107

The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Successful exploitation enables an attacker...

CVE-2025-12107

Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin privilege may inject and execute arbitrary template syntax within server-side templates. Successful exploitation of this vulnerability could allow a malicious actor with admin privilege to inject and...

CVE-2025-12107

CVE-2025-12107 is linked to a server-side template injection (SSTI) vulnerability in a vulnerable third-party Velocity template engine used by WSO2 Identity Server. An attacker with administrative privileges can inject and execute arbitrary template code on the server, potentially leading to remo...

CVE-2025-12107 Server-Side Template Injection via Velocity Template Engine in Multiple WSO2 Products Allows Remote Code Execution

The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Successful exploitation enables an attacker...

CVE-2025-12107 Server-Side Template Injection via Velocity Template Engine in Multiple WSO2 Products Allows Remote Code Execution

The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Successful exploitation enables an attacker...