CVE-2019-17558

This Metasploit module exploits CVE-2019-17558 in Apache Solr <= 8.3.0 by enabling the Velocity Response Writer's params resource loader and executing arbitrary code via a custom Velocity template. It supports multiple platforms and payload types, including Unix, Linux, and Windows targets.

This exploit leverages a Velocity template injection vulnerability in Apache Solr 8.2.0 to achieve remote code execution (RCE) by manipulating the configuration to enable arbitrary command execution via a crafted HTTP request.

The repository contains a working proof-of-concept exploit for CVE-2018-7600, a remote code execution vulnerability in Drupal. The exploit leverages the Drupalgeddon 2 vulnerability to execute arbitrary commands on vulnerable Drupal installations.

This repository contains a functional Python exploit for CVE-2019-17558, a remote code execution vulnerability in Apache Solr. The exploit leverages the VelocityResponseWriter to execute arbitrary commands by manipulating Solr's configuration and template parameters.

The repository claims to be a tool for detecting and exploiting CVE-2019-17558 (Solr Velocity template injection RCE) but provides no actual exploit code. It only includes a README with generic descriptions and screenshots, directing users to download platform-specific JAR files from an external source.

This repository provides a detailed technical writeup of exploiting CVE-2019-17558, a Velocity Template Injection vulnerability in Apache Solr, including manual exploitation steps and analysis of why automated tools like Metasploit failed.

The repository contains a vague README with no actual exploit code, only a brief description mentioning URL encoding and HTTP requests. It lacks technical details about the vulnerability or functional PoC code.

This Metasploit module exploits CVE-2019-17558 in Apache Solr <= 8.3.0 by enabling the Velocity Response Writer's params resource loader and executing arbitrary code via a crafted Velocity template. It supports multiple targets (Java, Unix, Linux, Windows) and includes authentication handling.