cve-2019-3396

cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries root@kitploit: bundle install run root@kitploit: ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahma...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Ejecución remota de código en servidores Confluence. Dork Fofa: app="ATLASSIAN-Confluence" Uso Muestra la información de ayuda. root@kitploit: python PoC.py Verificación de vulnerabilidad para sitios web individuales. root@kitploit: python PoC.py -u https://1.1.1.1...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence Remote Code Execution Vulnerability CVE-2022-26134 Usage: python CVE-2022-26134.py -u http://127.0.0.1 Batch verification: python CVE-2022-26134.py -f xxx.txt copy URL to txt...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Script de explotación multihilo para CVE-2022-36804 que afecta a la mayoría de las versiones de BitBucket 8.3.1 Consulte el aviso completo aquí https://jira.atlassian.com/browse/BSERV-13438 Todo el crédito para TheGrandPew por el descubrimiento El script detectará automáticamen...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Lectura/Inclusión remota limitada de archivos Endpoints vulnerables: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence CVE-2021-26084 one-liner mass checker cat confluenceservers.txt | while read host do; do curl --connect-timeout 10 --max-time 60 --path-as-is --silent --insecure --user-agent "Mozilla/5.1 Windows NT 6.1; Win64; x64; rv:59.0 Gecko/20100101 Firefox/59.0"...

CVE-2023-22518

CVE-2023-22518 Vulnerabilidad de autorización inadecuada en Confluence Data Center y Server. Atlassian ha alertado a los administradores sobre una vulnerabilidad crítica en Confluence. La explotación de este problema puede provocar pérdida de datos, por lo que los desarrolladores instan a instala...

Jira <8.4.0 - Server-Side Request Forgery

Jira before 8.4.0 is susceptible to server-side request forgery. The /plugins/servlet/gadgets/makeRequest resource contains a logic bug in the JiraWhitelist class, which can allow an attacker to access the content of internal network resources and thus modify data, and/or execute unauthorized...

Jira <8.4.0 - Information Disclosure

Jira before 8.4.0 is susceptible to information disclosure. The /rest/api/latest/groupuserpicker resource can allow an attacker to enumerate usernames, and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-8449 info: name: Jira 8.4...

Atlassian Confluence - Privilege Escalation

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence. id: CVE-2023-22515 info: name: Atlassian Confluence - Privilege Escalation author:...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the /ViewUserHover.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. Affected versions are before version 7.13.6, from...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the QueryComponentRendererValue!Default.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations, Affected versions are before...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server y Confluence Data Center incluyen una importante vulnerabilidad de ejecución remota de código no autenticada identificada como CVE-2022-26134, según un aviso de seguridad publicado por Atlassian el 2 de junio de 2022. La vulnerabilidad no estaba parcheada cuan...

ATLASSIAN-Confluence_rce

ATLASSIAN-Confluencerce CVE-2022-26134 Instalación root@kitploit: git clone https://github.com/xanszZZ/ATLASSIAN-Confluencerce cd ATLASSIAN-Confluencerce Uso Debido a que esta herramienta es un PoC escrito siguiendo las especificaciones de desarrollo del framework pocsuite3 Antes de usarla,...

CVE-2026-27825

CVE-2026-27825 — Path Traversal in mcp-atlassian via confluenceuploadattachment Severity : Critical CVSS 9.3 CWE : CWE-22 — Path Traversal Affected : sooperset/mcp-atlassian = 0.17.0 read-side twin of GHSA-xjgw-4wvw-rgm4 Advisory : GHSA NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-27825 TL;DR...

Atlassian Jira Limited - Local File Inclusion

Affected versions of Atlassian Jira Limited Server and Data Center are vulnerable to local file inclusion because they allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. id: CVE-2021-26086 info: name: Atlassian Jira Limited - Local...

CVE-2022-22836

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:00+00:00| seen| https://t.me/hackingAttack/38115 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38115 2026-09-06 16:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38115 2026-09-07 01:00:10+00:00|...

Atlassian Confluence - Remote Code Execution

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server...

Atlassian Confluence Server - Path Traversal

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...

Vulnerabilities present in Atlassian products

Atlassian has hidden vulnerabilities in various products such as Bamboo, Bitbucket, Confluence, Jira, Crowd, and Fisheye. These vulnerabilities exist in various third-party products for which updates have already been released. Atlassian has incorporated these updates into its own products...