Apache Struts security vulnerabilities

Apache Struts is an open source project of the Apache USA Foundation, a set of open source MVC frameworks for creating enterprise Java web applications, offering two main versions of the framework product, Struts 1 and Struts 2. A security vulnerability exists in Apache Struts versions 2.0.0...

PT-2025-48328

CVE-2025-66232 - Apache Struts Cross-Site Request Forgery CVE ID : CVE-2025-66232 Published : Nov. 26, 2025, 4:15 a.m. | 2 hours, 49 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-47892

CVE-2025-12541 - "Apache Struts Remote Code Execution Vulnerability" CVE ID : CVE-2025-12541 Published : Nov. 22, 2025, 11:15 p.m. | 3 hours, 26 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link...

PT-2025-47117

CVE-2025-65072 - Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-65072 Published : Nov. 15, 2025, 4:15 a.m. | 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-47100

CVE-2025-65068 - Apache Struts Command Injection CVE ID : CVE-2025-65068 Published : Nov. 15, 2025, 4:15 a.m. | 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-47032

CVE-2025-12703 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-12703 Published : Nov. 12, 2025, 11:15 p.m. | 3 hours, 44 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link fo...

PT-2025-48488

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 6.7.0 Apache Struts versions 7.0.0 through 7.0.3 Description A denial of service issue exists in Apache Struts due to incomplete cleanup of temporary or auxiliary resources during the processing of multipar...

PT-2025-45571

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 through 5.5.2-156 Description An authenticated regular user can create a photo collection with a collection name containing HTML/JavaScript payloads. This makes the Manage Photos feature susceptible to Stored Cross-Si...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Web Vulnerability to POC Generator Web Vulnerability to POC G...

PT-2025-43744

CVE-2025-62830 - Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-62830 Published : Oct. 24, 2025, 3:15 a.m. | 4 hours, 2 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts

PoC exploit for CVE-2024-53677, a vulnerability in Apache Struts...

ZTE ZXCDN security vulnerability

ZTE ZXCDN is a unified network management platform from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCDN, which originates from an Apache Struts remote code execution vulnerability that could lead to remote command execution with non-root privileges...

VulnCheck KEV: CVE-2013-2134

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135...

PT-2025-41498

CVE-2025-10904 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-10904 Published : Oct. 7, 2025, 11:15 p.m. | 3 hours, 24 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

PT-2025-41533

CVE-2025-6046 - CVE-2019-25033: Apache Struts Unauthenticated Remote Code Execution Vulnerability CVE ID : CVE-2025-6046 Published : Oct. 7, 2025, 11:15 p.m. | 3 hours, 24 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severit...

EUVD-2018-0714

Malware in sbrugna...

EUVD-2018-0486

Malware in sbrugna...

EUVD-2018-0563

Malware in sbrugna...

EUVD-2016-5450

Malware in sbrugna...

PT-2025-40832

CVE-2025-61891 - Apache Struts Command Execution CVE ID : CVE-2025-61891 Published : Oct. 4, 2025, 3:15 a.m. | 4 hours, 13 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...