CVE-2019-0193

This repository contains a Python-based exploit for CVE-2019-0193, a remote code execution vulnerability in Apache Solr's DataImport Handler. The exploit automates the discovery of Solr cores and injects a malicious script via the URLDataSource configuration to achieve RCE.

This repository provides a proof-of-concept exploit for CVE-2019-0193, an Apache Solr remote code execution vulnerability. It includes two exploit methods: one using URLDataSource (requires outbound network access) and another using ContentStreamDataSource (no outbound access required). Both methods leverage Solr's DataImportHandler to execute arbitrary commands via crafted XML configurations.

This PoC exploits CVE-2019-0193, a remote code execution vulnerability in Oracle WebLogic Server. It manipulates the work directory path to upload a JSP webshell, leveraging improper input validation in the administrative console.

This repository contains a proof-of-concept exploit for CVE-2019-0193, targeting Apache Solr's DataImportHandler. The exploit leverages a script transformer to execute arbitrary commands, resulting in a reverse shell to a specified IP and port.

This repository contains a functional exploit for CVE-2019-0193, targeting Apache Solr RCE via DataImportHandler misconfiguration. It automates the process of enabling remote streaming, executing arbitrary code, and writing a webshell.