mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 23:27:33 +02:00
0xMarcio
40 lines
1.7 KiB
Markdown
40 lines
1.7 KiB
Markdown
### [CVE-2016-3087](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3087)
|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via vectors related to an ! (exclamation mark) operator to the REST Plugin.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- https://www.exploit-db.com/exploits/39919/
|
|
|
|
#### Github
|
|
- https://github.com/20142995/pocsuite3
|
|
- https://github.com/ACIC-Africa/metasploitable3
|
|
- https://github.com/ARPSyndicate/cvemon
|
|
- https://github.com/CrackerCat/myhktools
|
|
- https://github.com/GhostTroops/myhktools
|
|
- https://github.com/Karma47/Cybersecurity_base_project_2
|
|
- https://github.com/SexyBeast233/SecBooks
|
|
- https://github.com/SunatP/FortiSIEM-Incapsula-Parser
|
|
- https://github.com/ahm3dhany/IDS-Evasion
|
|
- https://github.com/bharathkanne/csb-2
|
|
- https://github.com/do0dl3/myhktools
|
|
- https://github.com/hktalent/myhktools
|
|
- https://github.com/iqrok/myhktools
|
|
- https://github.com/lnick2023/nicenice
|
|
- https://github.com/maasikai/cybersecuritybase-project-2
|
|
- https://github.com/nixawk/labs
|
|
- https://github.com/oneplus-x/MS17-010
|
|
- https://github.com/qazbnm456/awesome-cve-poc
|
|
- https://github.com/superlink996/chunqiuyunjingbachang
|
|
- https://github.com/touchmycrazyredhat/myhktools
|
|
- https://github.com/trhacknon/myhktools
|
|
- https://github.com/woods-sega/woodswiki
|
|
- https://github.com/xbl3/awesome-cve-poc_qazbnm456
|
|
|