PT-2025-23294 · Undefined · Undefined

CVE-2022-26424 - Apache Struts Command Injection CVE ID : CVE-2022-26424 Published : May 28, 2025, 5:15 p.m. | 16 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA Visit the link for more...

PT-2025-23163 · Undefined · Undefined

CVE-2022-21138 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2022-21138 Published : May 27, 2025, 4:15 p.m. | 1 hour, 15 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 | NA...

PT-2025-22977 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a SQL injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...

PT-2025-22976 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-22978 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a deserialization vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

CVE-2023-6308

A vulnerability, which was classified as critical, has been found in Xiamen Four-Faith Video Surveillance Management System 2016/2017. Affected by this issue is some unknown functionality of the component Apache Struts. The manipulation leads to unrestricted upload. The attack may be launched...

PT-2025-21817 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a remote code execution problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-21151 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoints, vulnerable...

PT-2025-20612 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection vulnerability. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendations: At th...

PT-2025-20006 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2025-17988 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue allows an authenticated end-user to potentially run a script while the portal attempts to display a directory or some file's properties. Recommendations: At the moment, ther...

PT-2025-17995 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue is related to a deserialization vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2025-17366 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2025-17362 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue is related to command injection in Apache Struts. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this...

Security Bulletin: IBM Operational Decision Manager for April 2024 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2014-0114...

PT-2025-16034 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a remote code execution problem. No specific details about affected devices or real-world incidents are provided. Recommendations: At the moment, there is no...

PT-2025-13042

Name of the Vulnerable Software and Affected Versions Apache Struts affected versions not specified Description The issue concerns a remote code execution problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2025-11543

Name of the Vulnerable Software and Affected Versions Apache Struts affected versions not specified Description The issue is related to a deserialization vulnerability in Apache Struts. No specific details about the number of potentially affected devices or real-world incidents are provided...

Exploit for Files or Directories Accessible to External Parties in Apache Struts

Exploit CVE-2023-50164 para o Laboratório HackTheBox Descr...

Linux Distros Unpatched Vulnerability : CVE-2016-1182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct...