444 matches found
strutt-cve-2014-0114
CVE-2014-0114 - Struts 1 漏洞 POST 或 GET 请求中的参数会被当作属性（properties）来处理，并以表单为起点进行设置。参数可以是嵌套对象的路径。 Apache Struts 1.x 可被操纵以在 Form Beans 上调用 getClass。例如，可以直接操纵表单 classloader 上的属性：https://example.com/?class.classLoader.defaultAssertionStatus=true。 底层上，Apache Struts 1.x 使用 commons-beanutils，而 1.8（及更早）版本并未排...
CVE-2025-48734
CVE-2025-48734：Apache Commons BeanUtils – 枚举 declaringClass 信息泄露与 RCE 链 仅用于教育和授权的安全研究目的。 该仓库提供了一个受控的实验室环境，用于重现 Apache Commons BeanUtils 中的 CVE-2025-48734 漏洞，并探索攻击者在特定条件下如何升级到远程代码执行（RCE）。 📖 漏洞描述 CVE-2025-48734 影响 Apache Commons BeanUtils 1.11.0 之前的版本（以及 2.x 分支 2.0.0-M2 之前的版本）。问题在于 PropertyUtilsBea...
CVE-2025-24813-noPoC
CVE-2025-24813-noPoC 经过无数小时，我未能想出任何真正的PoC。 虽然上传文件的反序列化 可能 构成威胁，但我测试的所有payload链都失败了。 在Apache Tomcat 9.0.90和10.1.15版本上测试过。 这里没什么好看的！ SEVERE http-nio-8080-exec-5 org.apache.catalina.core.StandardHostValve.invoke Exception Processing / java.lang.RuntimeException: IllegalAccessException:...
ROOT-APP-MAVEN-CVE-2025-48734 CVE-2025-48734 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2025-48734 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2019-10086 CVE-2019-10086 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2019-10086 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2014-0114 CVE-2014-0114 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2014-0114 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...
CVE-2026-86218
CVE-2026-86218 CVE-2026-86218 - N-able N-central Struts BeanUtils RCE no autenticado | ---|--- CVE| CVE-2026-86218 CVSS| 10.0 Crítico Afectado| N-central on-premises 2026.3.1.14 incluyendo Hotfix 3 Corregido| 2026.3 Hotfix 4 build 2026.3.1.14 Divulgado| 2026-09-05 CWE| CWE-96 Inyección de código...
Astra Linux – Vulnerability in Commons-BeanUtils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added, which enables suppressing the ability for an attacker to access the classloader through the class property available on all Java objects. However, we did not use this feature by default, as it is a characteristic of...
Astra Linux – Vulnerability in Commons-BeanUtils
Apache Commons has a vulnerability related to improper access control. A special BeanIntrospector class was added in version 1.9.2. This can be used to prevent attackers from using the declared class property of Java enum objects to gain access to the classloader. However, this protection was not...
CLSA-2026-1788757915 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.10.0-tuxcare.1...
CLSA-2026-1788757862 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.9.2-tuxcare.1...
GHSA-H84G-69H7-MW6V mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI ObjectFactory implementation com.mchange.v2.naming.JavaBeanObjectFactory willing to construct objects of arbitrary classes and initialize "JavaBean"-style properties. There are classes for which this kind of initialization is...
CLSA-2026-1784077478 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.10.1-tuxcare.1...
CLSA-2026-1782435541 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.8.0-tuxcare.2...
CLSA-2026-1780361388 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.8.3-tuxcare.2...
CLSA-2026-1779756520 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.8.0-tuxcare.1...
CLSA-2026-1777336746 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.6-tuxcare.2...
CLSA-2026-1776991051 TuxCare security update for commons-beanutils:commons-beanutils (2 CVEs)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 2 CVEs. Fixed in 1.8.3-tuxcare.1...