15575 matches found
CVE-2024-34102
CVE-2024-34102 用法 python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...
CVE-2021-26084
CVE-2021-26084 confluence远程代码执行RCE Code By:Junsheng @橘子网络安全实验室 橘子网络安全实验室 https://0range.team/ 0x00 风险概述 本工具仅限授权安全测试使用,禁止未授权非法攻击站点 在线阅读《中华人民共和国网络安全法》 0x01 工具使用 批量RCE脚本请将URL导入url.txt 单站点RCE请使用下面的命令： python confluencerce.py -u url -c cmd或python confluencerce.py --url url --command cmd...
CVE-2018-10949
Script de Enumeración de Usuarios de Zimbra Collaboration CVE-2018-10949 Cómo usar El argumento --host debe ser el nombre de host o la dirección IP de la página raíz de la aplicación web de Zimbra Collaboration, y --userlist una lista de nombres de usuario para verificar contra ella. root@kali...
CVE-2020-14295
CVE-2020-14295 漏洞详情 - https://github.com/Cacti/cacti/issues/3622 安装 pip3 install -r requirements.txt 用法 $ ./gimme-a-shell.py --help usage: gimme-a-shell.py -h -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --help show this help message and exit required...
CVE-2025-55182_RCE_Exploit
CVE-2025-55182RCEExploit REC Exploit 是一个基于 Python 的安全测试工具，可在授权环境下自动检测 Web 应用程序中潜在的 RCE 条件。它向目标发送精心构造的 POST 请求，分析服务器响应中的执行指标，并支持批量扫描，具有自定义输入、结构化的载荷处理以及清晰的 CLI 输出。 1. 安装依赖 pip install -r requirements.txt 2. 运行漏洞利用 python3 rceexploit.py target.txt "command"...
Apache OFBiz - Remote Code Execution
Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...
CVE-2026-56732 Zammad: Malicious input in Ticket Body Enables Session Termination
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanitization allows injection of specific HTML elements into ticket bodies. When another user views the crafted ticket, the injected element can trigger a logout request, terminating...
CVE-2026-75973
Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to authenticate a request would be used for all web...
tomcat: Apache Tomcat: DoS in examples web application
A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...
tomcat: Apache Tomcat: DoS in examples web application
A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...
tomcat: Apache Tomcat: DoS in examples web application
A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...
tomcat: Apache Tomcat: DoS in examples web application
A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...
tomcat: Apache Tomcat: DoS in examples web application
A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...
CVE-2026-88261
bizwell xClick is affected by an improper input validation vulnerability that allows Stored XSS in versions R2, R3, and R3.1 . The CVSS 4.0 score is 5.1 (MEDIUM) , with a network attack vector, low complexity, low privileges required, and passive user interaction, resulting in low confidentiality...
EUVD-2026-78136
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code...
CVE-2026-15634
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...
Astra Linux – Vulnerability in Zabbix
Stored or persistent cross-site scripting XSS is a type of XSS attack where the attacker first sends the malicious payload to the web application. The application then stores the payload e.g., in a database or server-side text files. Eventually, the application inadvertently executes the payload...
WebGoat v2026.3
WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...
CVE-2024-57609
Vulnerabilidad de Redirección Abierta en Kanaries Página del Proveedor: https://kanaries.net/ Video de Prueba de Concepto: https://drive.google.com/file/d/1kqfbmx1W6UgSs56gOLOsUFiGcvKrIyW9/view?usp=sharing Guía de Explotación Paso a Paso 1. Ir al Sitio Web Navegue al sitio web de Kanaries. 2...