414 matches found
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
SpringAllReachable A graphical tool for rapid exploitati...
Spring Cloud Gateway 3.1.0 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Spring Cloud Gateway Remote Code Execution', 'Description' = %q This module exploits an unauthenticated remote code execution vulnerability in...
CVE-2022-23726
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
CVE-2022-23726
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
Information disclosure
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
CVE-2022-23726
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
CVE-2022-23726
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
CVE-2022-23726: Exposure of Sensitive Information to an Unauthorized Actor
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information...
PT-2022-16230 · Unknown · Spring Boot +1
Name of the Vulnerable Software and Affected Versions: PingCentral versions prior to listed versions Description: The issue exposes Spring Boot actuator endpoints, which can return large amounts of sensitive environmental and application information when accessed with administrative authenticatio...
U.S. Dept Of Defense: springboot actuator is leaking internals at ██████████
Proof of Concept If you go to https://█████████/actuator you'll get a complete overview of all the endpoints that are accessable Suggestion: Use a Firefox Browser if possible, its json representation is well formed and the links are clickable ██████████ Impact Information Disclosure...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Introduction to CVE-2022-22947 The Spring C...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
PoC exploit for CVE-2022-22947, an arbitrary file upload vulnera...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expres...
VMware Spring Cloud Gateway Code Injection Vulnerability
Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured...
VulnCheck KEV: CVE-2022-22947
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the...
Google Android Information Disclosure Vulnerability (CNVD-2022-44588)
Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an information leak in actuatordriver.cc's HandleTransactionIoEvent due to a heap buffer overflow, which may be out-of-bounds read. An attacker could exploit this vulnerability to cause ...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
Spring Cloud Gateway Actuator API SpEL Code Injection CVE-202...