Lucene search
+L

468 matches found

GithubExploit
GithubExploit
•added 2022/07/23 2:38 p.m.•360 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 A remote attacker can construct OGNL expressi...

9.8CVSS8.5AI score0.99999EPSS
SaveExploits77
The Hacker News
The Hacker News
•added 2022/07/21 8:41 a.m.•272 views

Atlassian Rolls Out Security Patch for Critical Confluence Vulnerability

Atlassian has rolled out fixes to remediate a critical security vulnerability pertaining to the use of hard-coded credentials affecting the Questions For Confluence app for Confluence Server and Confluence Data Center. The flaw, tracked as CVE-2022-26138, arises when the app in question is enable...

1AI score0.9817EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•22 views

Atlassian Confluence Server 信任管理问题漏洞

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server and Data Center that stems from the...

9.8CVSS8.5AI score0.9817EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•2 views

CVE-2022-26138: Use of Hard-coded Credentials

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit...

9.8CVSS8.4AI score0.9817EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2022/07/06 1:27 a.m.•369 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/10 6:07 p.m.•64 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

BotCon Attlasian Confluence Un-Authenticated Remote Code Execu...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/10 8:57 a.m.•417 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...

9.8CVSS8.9AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/09 2:11 a.m.•372 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/09 2:11 a.m.•428 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/08 4:53 a.m.•95 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

ConfluentPwn Confluence pre-auth ONGL injection remote code ex...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/07 11:55 a.m.•220 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Confluence Pre-Auth Remote Code Execution via OGNL Injection...

10CVSS9.2AI score0.99999EPSS
SaveExploits98
GithubExploit
GithubExploit
•added 2022/06/07 8:58 a.m.•414 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 Implementation of CVE-2022-26134 This reposito...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
Atlassian
Atlassian
•added 2022/06/06 6:20 a.m.•73 views

RCE in Confluence DataCenter via HazelCast(Confluence) Port

Summary A remote attacker who can connect to the Hazelcast service, running on port 5801 and potentially 5701, is able to execute arbitrary code on all the nodes in a Confluence Data Center through Java deserialization. Vulnerability Details Confluence Data Center uses the third-party software...

8.1CVSS4.6AI score0.03951EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2022/06/05 8:35 p.m.•46 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 1 First run the shodan scripts to grabs all t...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/05 1:41 p.m.•322 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

PoC exploit for CVE-2022-26134, an arbitrary file read vulnerabi...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/04 10:27 a.m.•269 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 (CVE-2022-26134)an unauthenticated and remote O...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits77
OSV
OSV
•added 2022/06/03 10:15 p.m.•6 views

CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits77References7
CVE
CVE
•added 2022/06/03 9:51 p.m.•1812 views

CVE-2022-26134

CVE-2022-26134 is an unauthenticated OGNL injection in Atlassian Confluence Server and Data Center that enables remote code execution. Affected: Confluence Server/Data Center versions from 1.3.0 up to 7.4.16, 7.13.x up to 7.13.6, 7.14.x up to 7.14.2, 7.15.x up to 7.15.1, 7.16.x up to 7.16.3, 7.17...

9.8CVSS8.6AI score0.99999EPSS
SaveIn wildExploits77References7Affected Software2
Atlassian
Atlassian
•added 2022/06/03 8:08 p.m.•92 views

Remote code execution via OGNL injection in Confluence Server & Data Center - CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7,...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits77
GithubExploit
GithubExploit
•added 2022/06/03 7:24 p.m.•376 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits77
Rows per page
Query Builder