A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads.
☆96Dec 20, 2024Updated last year
Alternatives and similar repositories for CVE-2024-53677-S2-067
Users that are interested in CVE-2024-53677-S2-067 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- （0day）DBSyncer后台自定义插件上传-注入内存马☆15Sep 5, 2024Updated 2 years ago
- ☆65Jan 16, 2025Updated last year
- CVE-2023-34992: Fortinet FortiSIEM Command Injection Proof of Concept Exploit☆27May 21, 2024Updated 2 years ago
- 一款简单的qvm管理工具☆24Aug 5, 2023Updated 3 years ago
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆181Aug 13, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- JDumpSpiderGUI 是一个用于 Java 堆转储文件分析的工具，支持命令行和 JavaFX 图形界面两种模式。该工具主要是在原工具上添加了图形化的界面☆182May 5, 2025Updated last year
- CyberPanel 2.3.6 pre-auth RCE☆40Oct 27, 2024Updated 2 years ago
- Nacos Derby命令执行漏洞利用脚本☆154Apr 7, 2025Updated last year
- 基于协程并发的Web敏感文件扫描器，精准探测备份文件、配置泄露及版本控制目录暴露风险，为渗透测试与安全防护提供专业级资产测绘方案。☆12Mar 6, 2025Updated last year
- PAN-OS auth bypass + RCE☆45Nov 19, 2024Updated last year
- RCE through a race condition in Apache Tomcat☆57Dec 21, 2024Updated last year
- 分享极梦C团队写的一些使用工具☆57Nov 6, 2023Updated 3 years ago
- BurpSuite extensions -Bypass Suite☆27Jul 19, 2024Updated 2 years ago
- Nacos 综合漏洞利用工具☆696Sep 8, 2026Updated last month
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆23May 1, 2026Updated 6 months ago
- 读取dump向日葵&Todesk进程的文件获得连接信息☆16Sep 27, 2024Updated 2 years ago
- Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled☆48Dec 23, 2024Updated last year
- Exploit for the vulnerability CVE-2024-43044 in Jenkins☆184Oct 2, 2024Updated 2 years ago
- Cleo Unrestricted file upload and download PoC (CVE-2024-50623)☆25Dec 11, 2024Updated last year
- Zimbra - Remote Command Execution (CVE-2024-45519)☆140Apr 6, 2025Updated last year
- ☆11Oct 17, 2024Updated 2 years ago
- DockerRemoteAPI未 授权访问(2375端口)利用工具，支持容器逃逸☆70Dec 29, 2024Updated last year
- DockerApiRCE☆242Oct 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。☆163Apr 3, 2025Updated last year
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆183Apr 17, 2024Updated 2 years ago
- 基于Agent技术实现的Java内存马查杀、防护工具。☆95Jul 25, 2024Updated 2 years ago
- 面向渗透测试的多跳SOCKS5代理工具☆41Jan 5, 2026Updated 10 months ago
- 一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具。☆100Mar 26, 2025Updated last year
- ☆39Dec 14, 2024Updated last year
- NacosExploit 命令执行 内存马等利用☆221Jul 18, 2024Updated 2 years ago
- CVE-2025-49844 (RediShell)☆345Oct 7, 2025Updated last year
- dahua综合漏洞利用工具☆293Aug 6, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆125Aug 9, 2024Updated 2 years ago
- zip slip☆39Apr 7, 2023Updated 3 years ago
- xxl-job漏洞综合利用工具☆159Jun 3, 2025Updated last year
- Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575☆97Nov 14, 2024Updated last year
- 内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描☆479Nov 20, 2024Updated last year
- Pre-Auth Exploit for CVE-2024-40711☆55Sep 15, 2024Updated 2 years ago
- JeecgBoot综合漏洞利用工具版本更新☆17Feb 18, 2025Updated last year