consul-service-rce: Consul Service RCE

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/owalid/consul-rce
• https://www.exploit-db.com/exploits/51117
• https://www.hashicorp.com/en/blog/protecting-consul-from-rce-risk-in-specific-configurations
• https://www.rapid7.com/db/modules/exploit/multi/misc/consul_service_exec/
• https://blog.pentesteracademy.com/hashicorp-consul-remote-command-execution-via-services-api-d709f8ac3960
• https://www.kernelpicnic.net/2017/05/29/Pivoting-from-blind-SSRF-to-RCE-with-Hashicorp-Consul.html
• https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8171

Related Vulnerabilities

• 畅捷通 T+ POSSyncService.asmx 接口SQL注入漏洞
• PoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File Upload
• ServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞（CVE-2026-6875）
• PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE
• 金蝶EAS /ormrpc/services/BSHService 代码执行漏洞
• 用友U8Cloud /ServiceDispatcherServlet 文件上传漏洞
• 用友 U8cloud /service/XChangeServlet SQL 注入漏洞
• 关于NC系统BapAnaRepDefService的sql注入漏洞的安全通告
• 时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞
• 广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞
• Nezha /api/v1/server/1/service 信息泄露漏洞（CVE-2026-49397）
• 广联达OA /Org/service/Service.asmx/GetChangeUsers 信息泄露漏洞
• 广联达OA /GTP/IM/Services/Group/Broadcast/MsgBroadcastContent.aspx SQL 注入漏洞