Auto Update Nuclei [Fri Dec 27 18:26:29 UTC 2024] :robot:

plugins/adobe/experience_manager/CVE-2019-16469.yaml

@@ -57,4 +57,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4b0a00483046022100dbed2a2bbccddcc88b0666cd0af616e4629593fd09c5ca06b64d4c06e496a3220221008a45a3ff65463ec517d8dc1a68fec000208cfaf9ddf09b0a1cc086dede6de1b1:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022049eb2022ef3db91723fa5a18dc82b989b892abee59347428f106de14f6f3f0c9022037a54c3d4d0ab885324291137eaa6992af4b19b56f954d40873f6d7f7b80dc2e:922c64590222798bb761d5b6d8e72950

plugins/apache/solr/CVE-2024-45216.yaml

@@ -51,4 +51,4 @@ http:
       - type: status
         status:
           - 200
-# digest: 4a0a00473045022100f2381a3322e70329843ccc329956a2997c1af26faf1858134956a561914917cd022001ee3db271c4ddf9ed5633c04fe9a187a7bb8aa799a80d24faf450f78e98804e:922c64590222798bb761d5b6d8e72950
+# digest: 490a0046304402204e88fa14c1d4726248d4b0209f7a7e6483a3750f71a80a9777b11a7565970d5f0220128d98ded2e63e905a64db10145f03faf36f33850f8df3c214c131acc40eb150:922c64590222798bb761d5b6d8e72950

plugins/jolokia/jolokia/jolokia-acceslogvalve-rce.yaml

@@ -0,0 +1,28 @@
+id: jolokia-acceslogvalve-rce
+
+info:
+  name: Jolokia write to RCE valve
+  author: pathtaga
+  severity: critical
+  description: RCE in Jolokia < 1.7.1 using AccesLogValve
+  tags: jolokia,rce
+  reference:
+    - https://github.com/laluka/jolokia-exploitation-toolkit
+    - https://therealcoiffeur.github.io/c11011
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/jolokia/list"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: body
+        words:
+          - "\"host=localhost,name=AccessLogValve,type=Valve\""
+# digest: 490a00463044022013493c4e73d11b0e0c2b524e351deefa650d70bf598672e1267d9e6c9b1c0bc802203372a223b1af40733b5871cad530b43c3e312216d2349760348b705df8ebc50d:922c64590222798bb761d5b6d8e72950

plugins/jolokia/jolokia/jolokia-createstandardhost-rce.yaml

@@ -0,0 +1,30 @@
+id: jolokia-createstandardhost-rce
+
+info:
+  name: Jolokia file write to RCE jfr
+  author: laluka,pathtaga
+  severity: critical
+  description: File read and file write to RCE by deploying a vhost with MBeanFactory/createStandardHost and DiagnosticCommand/jfrStart
+  tags: jolokia,rce
+  reference:
+    - https://github.com/laluka/jolokia-exploitation-toolkit
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/jolokia/list"
+      - "{{BaseURL}}/jolokia/list"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: body
+        words:
+          - "\"desc\":\"Create a new StandardHost\""
+          - "\"desc\":\"Array of Diagnostic Commands Arguments and Options\""
+        condition: and
+# digest: 490a00463044022006051a0fd2abbde24ad4d186f9131edbb1b9ed1e5124ba4dc97968928ddfe03002200b899b725f66ddb6088044321e8586642f42142a7ecb8c1db4ff148688ceabfb:922c64590222798bb761d5b6d8e72950