Naramsim/Offensive

PoC

Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904

view exploit source poc_in_githubauthor Naramsimpublished 2016-10-13catalog poc_in_github

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-1240US	high7.8	9.78% (96th)	Exploit	2016-10-03
The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before…
CVE-2014-2064US	medium5.0	2.95% (87th)	Exploit	2014-10-17
The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a use…
CVE-2008-2938US	medium4.3	99.7% (100th)	Exploit	2008-08-13
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote atta…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.