CVE-2024-48887
None
Github link:
https://github.com/cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit
None
Github link:
https://github.com/cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit
GitHub
GitHub - cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit: a lightweight JavaScript snippet showcasing how unauthorized password…
a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints. - cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit
CVE-2024-25600
Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
Github link:
https://github.com/ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM
Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.
Github link:
https://github.com/ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM
GitHub
GitHub - ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM: OD&H's scanner for CVE-2024-25600 vulnerability in the Bricks Builder…
OD&H's scanner for CVE-2024-25600 vulnerability in the Bricks Builder WordPress plugin. For use in Try Hack Me (THM) environments. - ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM
CVE-2024-4577
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.
Github link:
https://github.com/deadlybangle/CVE-2024-4577-PHP-RCE
In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.
Github link:
https://github.com/deadlybangle/CVE-2024-4577-PHP-RCE
CVE-2019-15107
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
Github link:
https://github.com/Mattb709/CVE-2019-15107-Webmin-RCE-PoC
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
Github link:
https://github.com/Mattb709/CVE-2019-15107-Webmin-RCE-PoC
GitHub
GitHub - Mattb709/CVE-2019-15107-Webmin-RCE-PoC: A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote…
A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote code execution vulnerability in Webmin versions 1.890 through 1.920. - Mattb709/CVE-2019-15107-Webmin-RCE-PoC
CVE-2024-36401
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.
The GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGrap
Github link:
https://github.com/bmth666/GeoServer-Tools-CVE-2024-36401
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.
The GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGrap
Github link:
https://github.com/bmth666/GeoServer-Tools-CVE-2024-36401
GitHub
GitHub - bmth666/GeoServer-Tools-CVE-2024-36401: CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现
CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现. Contribute to bmth666/GeoServer-Tools-CVE-2024-36401 development by creating an account on GitHub.