spring-framework-rce

spring-framework-rce CVE-2022-22965 Requirements 1. tomcat8 8 Usage 1. Download springframeworkrce-0.0.1-SNAPSHOT.zip, unzip, and rename to ROOT.war. 2. Replace the ROOT folder or ROOT.war in the webapps folder of tomcat. 3. Switch to the bin directory of tomcat and run .\catalina.bat run. Testin...

Juice Shop With Kubeadm and Tf

Juice Shop With Kubeadm and Tf Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

[SECURITY] Fedora 41 Update: trunk-0.21.13-1.fc41

Build, bundle & ship your Rust WASM application to the web...

CVE-2024-56799: Missing Authentication for Critical Function

Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7...

ARC Informatique PcVue (Update A)

Skip to main content Toolbar items Manage Administration menu Tools Extend Tools Content Extend Content Structure Configuration Extend Configuration Help Horizontal orientation dgloria Edit ICS Advisory ARC Informatique PcVue Update A Primary tabs View Editactive tab Delete Revisions Breadcrumb...

vaeThink v1. 0. 1 code execution vulnerability mining analysis-vulnerability warning-the black bar safety net

0x01 introduction This article is for a niche CMS（vaeThink v1. 0. 1 for analysis, code execution vulnerability discovery and audit process of the record, the CMS is based on ThinkPHP5 development. As a code audit entry rookie, also want to be able to practice and learn the process of recording an...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

TrendMicro Web-Deployment ActiveX Remote Exec 0day POC

Exploit for unknown platform in category remote exploits ====================================================== TrendMicro Web-Deployment ActiveX Remote Exec 0day POC ====================================================== Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date:...

Trend Micro Web-Deployment - ActiveX Remote Execution

Trend Micro Web-Deployment - ActiveX Remote Execution Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 Download:...

TrendMicro Web-Deployment ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 http://paper.sebug.net/2010-exploits/1001-exploits/TrendMicro Web-Deployment ActiveX...

Trend Micro Web-Deployment - ActiveX Remote Execution

Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11173.zip...

Trend Micro OfficeScan Client ActiveX Control Buffer Overflow (CVE-2007-0325)

A vulnerability has been reported in the Trend Micro OfficeScan Client ActiveX control.OfficeScan Client is an integrated client which provides security protection for the network endpoints.A remote attacker could cause the browser to crash allowing execution of arbitrary commands.The vulnerabili...

Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control buffer overflows

Overview The Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control contains multiple buffer overflows, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Description Trend Micro OfficeScan comes with a web-based administration console that makes use...

SQL Injection in Oracle Forms

SQL Injection in Oracle Forms V1.00 © 2005 by Red-Database-Security GmbH 1/5 Summary: All Oracle Forms applications are vulnerable against SQL Injection by default. Oracle Applications =11.5.9 is not affected due to the default setting value “FORMSxxRESTRICTENTERQUERY = TRUE”. About Oracle Forms:...