CVE-Web-Framework

🗓️ 13 Aug 2026 11:38:23Reported by chengbochuan3Type

githubexploit

githubexploit🔗 github.com👁 5 Views

Spring Framework 5.3.x/5.2.x vulnerable to Spring4Shell RCE, CVSS 9.8, with PoC in Docker testbed.

Reporter	Title	Published	Views	Family All 1073
zdt	Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 Drupalgeddon2 Remote Code Execution Exploit	13 Apr 201800:00	–	zdt
zdt	Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 Drupalgeddon2 Remote Code Execution Exploit	17 Apr 201800:00	–	zdt
zdt	Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 - Drupalgeddon2 Remote Code Execution Exploit	18 Apr 201800:00	–	zdt
zdt	Drupal Drupalgeddon 2 Forms API Property Injection Exploit	26 Apr 201800:00	–	zdt
zdt	Oracle #Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution Exploit #RCE	1 May 201900:00	–	zdt
zdt	Oracle Weblogic Server Deserialization Remote Code Execution Exploit	7 May 201900:00	–	zdt
zdt	Oracle WebLogic Server Administration Console Handle Remote Code Execution Exploit	19 Nov 202000:00	–	zdt
zdt	Spring4Shell Spring Framework Class Property Remote Code Execution Exploit	10 May 202200:00	–	zdt
zdt	Oracle Weblogic PreAuth Remote Command Execution Exploit	12 Jun 202300:00	–	zdt
zdt	PHP < 8.3.8 - Unauthenticated Remote Code Execution (Windows) Exploit	14 Jun 202400:00	–	zdt

13 Aug 2026 11:39Current

8.7High risk

Vulners AI Score8.7

CVSS 210

CVSS 3.19.8

CVSS 39.8

EPSS0.99997

SSVC

Spring4Shell Spring Framework remote code execution RCE PoC script Docker CVSS 9.8