CVE-2018-20062

CVE-2018-20062 thinkphp 5.0.23 Подходит для уязвимости vulhub thinkphp Я слишком слаб, в будущем постепенно оптимизирую, прошу не критиковать, уважаемые мастера...

POC_CVE-2023-21839

CVE-2023-21839 Translated the GO version of @4ra1n into Python based on specific needs, thanks again! Disclaimer This program should only be used for authorized security testing and research purposes. Users should comply with the Cybersecurity Law and use it reasonably. Any illegal attacks or oth...

vulhub

Vulhub est une collection open-source d’environnements Docker vulnérables pré-construits et prêts à l’emploi. Avec une seule commande, vous pouvez lancer un environnement vulnérable pour la recherche en sécurité, l’apprentissage ou la démonstration, sans aucune connaissance préalable de Docker...

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub POC-скрипт для среды vulhub CVE-2025-24813 Поскольку у многих коллег возникли вопросы по эксплуатации этой уязвимости, я написал этот скрипт, чтобы помочь всем провести эксплуатацию в vulhub. Подробнее: vulhub/tomcat/CVE-2025-24813 В среде vulhub нет напрямую используемой...

ElasticSearch v1.1.1/1.2 RCE

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to search. Be aware this only violates the vendor's intended security policy if the user does not run...

Ruby On Rails - Local File Inclusion

Ruby On Rails is vulnerable to local file inclusion caused by secondary decoding in Sprockets 3.7.1 and lower versions. An attacker can use %252e%252e/ to access the root directory and read or execute any file on the target server. id: CVE-2018-3760 info: name: Ruby On Rails - Local File Inclusio...

Apache APISIX - Insufficiently Protected Credentials

Apache APISIX 1.2, 1.3, 1.4, and 1.5 is susceptible to insufficiently protected credentials. An attacker can enable the Admin API and delete the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. id: CVE-2020-13945 info: name: Apache...

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...

Gogs (Go Git Service) 0.11.66 - Remote Code Execution

Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron. id: CVE-2018-18925 info: name: Go...

St2-057

St2-057 онлайн-тренировочная среда, Enjoy! 0x01 Создание среды Docker https://github.com/vulhub/vulhub/tree/master/struts2/s2-048 docker-compose up -d 0x02 Создание уязвимой среды st2-057 docker exec -i -t 88fd8d560155 /bin/bash Запустите в фоновом режиме и войдите в docker Согласно объявлению:...

Jboss Application Server - Remote Code Execution

Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptible to a remote code execution vulnerability because the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization, thus allowing a...

Rocket.Chat <=3.13 - NoSQL Injection

Rocket.Chat 3.11, 3.12 and 3.13 contains a NoSQL injection vulnerability which allows unauthenticated access to an API endpoint. An attacker can possibly obtain sensitive information from a database, modify data, and/or execute unauthorized administrative operations in the context of the affected...

Apache httpd <=2.4.29 - Arbitrary File Upload

Apache httpd 2.4.0 to 2.4.29 is susceptible to arbitrary file upload vulnerabilities via the expression specified in , which could match '$' to a newline character in a malicious filename rather than matching only the end of the filename. This could be exploited in environments where uploads of...

GitList < 0.6.0 Remote Code Execution

klaussilveira GitList version = 0.6 contains a passing incorrectly sanitized input via the searchTree function that can result in remote code execution. id: CVE-2018-1000533 info: name: GitList 0.6.0 Remote Code Execution author: pikpikcu severity: critical description: klaussilveira GitList...

Log4Shell-Vulnerability-Replication

CVE-2021-44228 Log4Shell Vulnerability Complete Replication Record This record is based on the Apache Solr 8.11.0 target environment provided by Vulhub, fully replicating the Log4j2 JNDI injection vulnerability, and successfully verifying the vulnerability's existence through DNSLog and local LDA...

ElasticSearch <1.6.1 - Local File Inclusion

ElasticSearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls. id: CVE-2015-5531 info: name: ElasticSearch 1.6.1 - Local File Inclusion author: princechaddha severity: medium description: ElasticSearch before 1.6.1 allows remote...

vulhub-apache

В этом репозитории нет README...

Sub-folderFetcher

Sub-folder Fetcher 🐣 A script to download specific Vulhub repository folder kibana/CVE-2018-17246 from GitHub. 🚀 Requirements curl unzip 🛠️ Usage chmod +x subfetcher.sh ./subfetcher.sh...

CVE-2024-9264

CVE-2024-9264 Document de référence https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. Résumé de la vulnérabilité Élément| Description ---|--- CVE| CVE-2024-9264 Cible| Grafana SQL Expressions Impact| Local File Inclusion LFI, Remote Code Execution RCE Sévérité| Critical CVSS...

Jenkins - Remote Command Injection

Jenkins 2.153 and earlier and LTS 2.138.3 and earlier are susceptible to a remote command injection via stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this wa...