CVE-2022-45047

CVE-2022-45047 POC,EXP,chatGPT为我生成 代码 root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding": "gzip...

CVE-2019-0604

1. Analysis of k8gege's cve-2019-0604-exp.py k8gege's script https://github.com/k8gege/CVE-2019-0604 Honestly, k8gege's Python script is a bit fancy, with a large number of hexadecimal strings split into payload1, 2, 3. Devious. The Python script sends a remote POST payload, which after...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 payload builder & exploit Info / Help root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | |...

CVE-2021-42237

CVE-2021-42237 Este es un exploit/PoC para CVE-2021-42237 tomado de: Este informe de Assetnote DESCARGO DE RESPONSABILIDAD: No estoy asociado con Assetnote de ninguna manera. Este contenido se proporciona únicamente con fines educativos. Asegúrate de reemplazar CMD-COMMAND-HERE, así como el Host,...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – Deserialización XML RCE Reverse Shell Un PoC enfocado para explotar WSUS CVE-2025-59287 mediante deserialización XML para lograr una reverse shell de Windows. Este script solo admite un payload de reverse shell sin fallback de calc. Objetivo: Windows Server co...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Vulnerability Description In the early days, hackers exploited the WLS component vulnerability of WebLogic to launch large-scale remote attacks against enterprise servers. A large number of enterprise servers were compromised, an...

BIT-JENKINS-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

struts-rce-cve-2017-9805

Description Apache Struts RCE tool for CVE 2017-9805 Options u: the target url; c: the command that'll be executed on a vulnerable target; f: automatically checks for RCE using a list of targets one target per line; p: specify the port for a local listener - used with f option - default: 8080 Usa...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE Proof of Concept Assignment: SSP Assignment 3 Team: RCE You Later Members: Banica Horia Alexandru, Comarlau Vlad-Constantin Video link of using the repo to do the PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Overview This repository contains a fully...

struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 RCE por Deserialización de XML Este repositorio demuestra la explotación de Apache Struts S2-052 CVE-2017-9805 mediante deserialización maliciosa de XML. El exploit fue desarrollado mientras se resolvía el laboratorio INE eWPTX Practice Range – Struts XML Deserialization RCE...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-84646

Jenkins (versions 2.579 and earlier, LTS 2.568.2 and earlier) is affected by a lack of type restriction in XML deserialization , allowing an attacker with Overall/Read permission to create user objects by submitting crafted XML. The root cause is that user objects can appear as nested field value...

EUVD-2026-70112

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

PT-2026-84769

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

RHCOS 4 : OpenShift Container Platform 4.6.17 (RHSA-2021:0423)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0423 advisory. - ant: insecure temporary file vulnerability CVE-2020-1945 - ant: insecure temporary file CVE-2020-11979 - jenkins: Arbitrary file...

RHCOS 4 : OpenShift Container Platform 4.5.33 (RHSA-2021:0429)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0429 advisory. - ant: insecure temporary file vulnerability CVE-2020-1945 - ant: insecure temporary file CVE-2020-11979 - jenkins: Arbitrary file...

Exploit for Deserialization of Untrusted Data in Apache Struts

Apache Struts S2-052 XML Deserialization RCE This repository...

Bosch Rexroth IndraWorks UA.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Bosch Rexroth IndraWorks OPC.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...