CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 概念実証 このリポジトリは、Apache2 を使用して Ubuntu 上に WebDAV サーバーを自動的に展開 し、フィッシング、レッドチーム演習、または横展開シミュレーションで使用するための悪意のある.url ショートカットファイルを生成するスクリプトを提供します。 📁 内容 setupwebdav.sh – Apache2 + WebDAV を設定する Bash スクリプト。 setupwebdav.py – 上記の Python 版。 genurl.py – UNC/WebDAV パスを含む .url ショートカットファイルを生成する Python...

CVE-2017-7269

CVE-2017-7269 - IIS 6.0 WebDAV バッファオーバーフロー CVE-2017-7269のPOCのRust実装で、Microsoft Internet Information Services IIS 6.0のWebDAVサービスを標的としています。 脆弱性の概要 CVE-2017-7269は、Windows Server 2003 R2に同梱されたMicrosoft IIS...

PT-2026-103923

A memory calculation bug in mod dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue...

PT-2026-103931

Internal state files accessible to external parties in mod dav fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation 自動的に脆弱なdavfs2 CVE-2013-4362 を持つシステムを悪用します これは何のためのものですか？ 脆弱なバージョンのdavfs2の悪用を簡略化するための2つの.shスクリプトです。 前提条件 モジュール'fuse'または'coda'の少なくとも1つがカーネルにロードされていない必要があります（PoCはデフォルトではロードされないcodaで動作します） リモートのwebdavサーバーをマウントできるユーザーである必要があります 確認方法: cat /etc/gro...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra CVE-2024-21412 を介したマルウェア配信 使用方法 サービスを順番に起動し、Webサーバーにアクセスします Webサーバー フォルダ内でWebサーバーを起動します: python -m http.server Initial Access: Windows 詳細クエリ構文（AQS）を使用してWebDAV共有にリンクするJPEGトロイの木馬 Initial Access: search: プロトコルを使用してWindowsエクスプローラーウィンドウをカスタマイズ search:...

IIS_6.0_WebDAV_Ruby

IIS6.0WebDAVRuby IIS 6.0 バッファオーバーフロー用 Ruby エクスプロイト CVE-2017-7269 このエクスプロイトは、Zhiniang Peng と Chen Wu によって発見された ScStoragePathFromUrl バッファオーバーフローを悪用します。 使い方: ruby exploit.rb エンコードオプション は必須オプションを示します。...

CVE-2019-19033

CVE-2019-19033：Jalios JCMS 10 后门账户 / 认证绕过 I. 漏洞 Jalios JCMS 10 允许攻击者通过一个后门账户（可使用任意用户名和特定密码）以管理权限访问网站的任何部分以及 WebDAV 服务器。 II. CVE 参考 CVE-2019-19033 III. 供应商 Jalios https://www.jalios.com/jcms/j6/en/home IV. 时间线 2019年11月8日 - 发现漏洞 2019年11月9日 - 联系供应商 2019年11月14日 - 供应商修复漏洞 V. 描述...

BIT-RCLONE-2026-79779 rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP Redirect

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to...

BIT-RCLONE-2026-79778 rclone before v1.75.0 Denial of Service via TUS nil-response panic

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...

Windows Server 2003 & IIS 6.0 - Remote Code Execution

Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...

PT-2026-99018

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to...

PT-2026-99017

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...

PT-2026-95840

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclonelink objects, and fs.RangeOption.Decode can pass an unchecked positive Range start through...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

CVE-2026-82980

Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The DAV plugin resolves files from the absolute request URI without verifying that the path segment matches the authenticated session user. This enables: Cross-user manual locks :...

CVE-2026-82980

Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The DAV plugin resolves files from the absolute request URI without verifying that the path segment matches the authenticated session user. This enables: Cross-user manual locks :...

EUVD-2026-82617

Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The DAV plugin resolves files from the absolute request URI without verifying that the path segment matches the authenticated session user. This enables: Cross-user manual locks :...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...

tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

In Apache Tomcat, no limit was enforced on the request body for WebDAV LOCK or PROPFIND requests which were available to unauthenticated users. This allows a remote attacker to consume excessive resources, leading to Denial of Service DoS, making the affected system unavailable to legitimate user...