377 matches found
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Introduction to CVE-2022-22947 The Spring C...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
PoC exploit for CVE-2022-22947, an arbitrary file upload vulnera...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expres...
VMware Spring Cloud Gateway Code Injection Vulnerability
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured...
VulnCheck KEV: CVE-2022-22947
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured...
Google Android Information Disclosure Vulnerability (CNVD-2022-44588)
Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information leak in actuatordriver.cc's HandleTransactionIoEvent due to a heap buffer overflow, which may be out-of-bounds read. An attacker could exploit this vulnerability to cause ...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
Spring Cloud Gateway Actuator API SpEL Code Injection CVE-202...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
SpringCloud-Gateway Command Execution Vulnerability CVE-2022...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
SpringCloud-Gateway Command Execution Vulnerability CVE-2022...
The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library allows a attacker to execute arbitrary code.
The vulnerability of the Gateway Actuator component in the Spring Cloud Gateway API gateway library is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
漏洞简介 Spring Cloud Gateway 是 Spring Cloud 的一个全新项目，该项目是基于 Spring 5.0，Spring Boot 2.0 和 Project Reactor 等技术开发的网关，它旨在为微服务架构提供一种简单有效的统一的API路由管理方式。 前段时间springCloud Gateway被爆致命RCE CVE ,cve信息显示当应用程序启用和暴露Spring Cloud Gateway的Gateway Actuator endpoint时，会受到远程代码注入攻击，攻击者发送恶意请求从而可远程执行任意代码。目前受影响的版本如下： 3.1.0 3.0...
Spring Boot Actuator Logview < 0.2.13 Directory Traversal
Spring Boot Actuator Logview is a library that adds a simple logfile viewer as Spring Boot Actuator endpoint. In Spring Boot Actuator Logview before version 0.2.13 there is a directory traversal vulnerability. The nature of this library is to expose a log file directory via admin Spring Boot...
Spring Boot Actuator Sensitive Endpoints Detected
Spring Boot Actuator endpoints let you monitor and interact with your application. Spring Boot includes a number of built-in endpoints and lets you add your own. For example, the 'health' endpoint provides basic application health information. But some of these endpoints are considered sensitive...
Spring Boot Actuator Detected
This is an informational notice that the scanner was able to detect an accessible Spring Actuator. Actuator endpoints let you monitor and interact with your application. Spring Boot includes a number of built-in endpoints and lets you add your own. For example, the 'health' endpoint provides basi...
Spring Boot Actuator HikariCP Remote Code Execution
The Spring Boot framework is one of the most popular Java-based microservice frameworks that helps developers quickly and easily deploy Java applications. When the endpoint actuator is accessible with the env and restart methods, it is possible for an unauthenticated remote attacker to obtain a...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Vulnerability Profile Spring Cloud Gateway is a brand new pro...
VMware Spring Cloud Gateway < 3.0.7, 3.1.x < 3.1.1 RCE Vulnerability - Active Check
VMware Spring Cloud Gateway is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...