Lucene search
+L

1334 matches found

BDU FSTEC
BDU FSTEC
•added 2022/06/23 12:00 a.m.•18 views

The vulnerability of software for unifying and simplifying access to Spring Data MongoDB databases, related to errors in processing SpEL expressions, allows a perpetrator to execute arbitrary code.

The vulnerability of the software for unifying and simplifying access to Spring Data MongoDB databases is related to errors in processing SpEL expressions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SpEL query...

10CVSS7.9AI score0.17836EPSS
SaveExploits3References3Affected Software1
GithubExploit
GithubExploit
•added 2022/06/21 11:39 a.m.•553 views

Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb

CVE-2022-22980 A local based poc of CVE-2022-22980, for the d...

9.8CVSS8.5AI score0.17836EPSS
SaveExploits3
Spring Security Advisories
Spring Security Advisories
•added 2022/06/20 12:00 a.m.•23 views

Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...

9CVSS7.2AI score0.17836EPSS
SaveExploits3References1
GithubExploit
GithubExploit
•added 2022/06/19 1:50 p.m.•423 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

「💥」CVE-2022-26134 Description In affected versions of Con...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/13 11:01 p.m.•505 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 - Confluence Pre-Auth Remote Code Execution...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
IBM Security Bulletins
IBM Security Bulletins
•added 2022/06/13 5:43 p.m.•36 views

Security Bulletin: IBM Sterling Control Center is vulnerable to remote attacker security restrictions bypass due to Eclipse EE4J Jakarta Expression Language (CVE-2021-28170)

Summary Eclipse EE4J Jakarta Expression Language is used by IBM Sterling Control Center. Eclipse EE4J Jakarta Expression Language could allow a remote attacker to bypass security restrictions, and the issue has been addressed. Vulnerability Details CVEID: CVE-2021-28170 DESCRIPTION: Eclipse EE4J...

5.3CVSS2.2AI score0.02132EPSS
SaveExploits1Affected Software1
GithubExploit
GithubExploit
•added 2022/06/10 8:57 a.m.•417 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...

9.8CVSS8.9AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/09 2:11 a.m.•372 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/09 2:11 a.m.•428 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/08 9:52 a.m.•423 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...

10CVSS8.5AI score0.98253EPSS
SaveExploits54
GithubExploit
GithubExploit
•added 2022/06/08 4:53 a.m.•97 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

ConfluentPwn Confluence pre-auth ONGL injection remote code ex...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/08 1:09 a.m.•162 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

CVE-2021-44228...

10CVSS8.6AI score0.99999EPSS
SaveExploits379
GithubExploit
GithubExploit
•added 2022/06/07 4:42 p.m.•8 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence-CVE-2022-26134 dork en shodan https://www...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/07 8:58 a.m.•414 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 Implementation of CVE-2022-26134 This reposito...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/06 3:44 p.m.•322 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

confluencePot ConfluencePot is a simple honeypot for the Atla...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/05 8:35 p.m.•46 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 1 First run the shodan scripts to grabs all t...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/05 6:23 p.m.•365 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-202...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/05 1:41 p.m.•323 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

PoC exploit for CVE-2022-26134, an arbitrary file read vulnerabi...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/04 11:16 a.m.•356 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 Confluence OGNL expression injected RCECVE-202...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/04 10:44 a.m.•528 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 PoC Confluence Server and Data Center - CVE-20...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits77
Rows per page
Query Builder