// Disclaimer //
Hacking without permission is illegal. This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing & bug hunting so that we can protect ourselves against the real hackers..
//LINKS: t.me/mr0rh
GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions
POC for CVE-2024-36401 GeoServer Remote Code Execution | Bug bounty poc
music:
credit by @𝙇𝙤𝙨𝙩𝙨𝙚𝙘
#CVE202436401 #CVE202436404
GeoServer
CVE-2024-36401
GeoServer Remote Code Execution