Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions 7.6.17, 7.17.10, 7.21.4...

CVE-2022-36804

CVE-2022-36804 The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

CVE-2022-26134

CVE-2022-26134 A pre-authenticated RCE vulnerability in Atlassian Confluence Summary of the CVE In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data...

CVE-2021-26086

CVE-2021-26084 Existe una vulnerabilidad de inyección OGNL que permitiría a un usuario autenticado y, en algunos casos, a un usuario no autenticado, ejecutar código arbitrario en un servidor Confluence o instancia de centro de datos. Solicitud de parámetro QueryString: Uso: $ python3...

CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

CVE-2023-22518

CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has warned administrators about a critical vulnerability in Confluence. Exploitation of this vulnerability could lead to data loss, therefore the developer recommends you install the patch...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 This repository talks about Zero-Day Exploitation of Atlassian Confluence, it's defense and analysis point of view from a SecOps or Blue Team perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Mitigation Plans References About Over...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

CVE-2022-26133

CVE-2022-26133 Information Description SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated...

CVE-2022-26134

CVE-2022-26134 El 30 de mayo de 2022, una organización llamada Volexity identificó una vulnerabilidad de RCE sin autenticación con una puntuación de 9.8 en NIST en las ediciones Confluence Server y Data Center de Atlassian versión vulnerable 7.18.1 Ejecutar root@kitploit: python -m venv venv sour...

CVE-2023-22515

CVE-2023-22515 Confluence Data Center & Server privilege escalation vulnerability Exploit Usage root@kitploit: python3 CVE-2023-22515.py url username password Disclaimer This detection tool is only for security testing by security testers of major security companies. Do not perform intrusion...

CVE-2023-22515

Red Team Tool - Confluence Unauthorized Add Admin User CVE-2023-22515 Exploit Tool Vulnerability Scope root@kitploit: 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server =...

CVE-2022-26134

CVE-2022-26134 PoC !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. The developer of this tool assum...

monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

CVE-2022-36804

CVE-2022-36804 Bitbucket RCE 2022 This repo is part of the hgrab-framework dork title: "Public Repositories - Bitbucket" Affected product root@kitploit: - Bitbucket Server and Data Center 7.6 prior to 7.6.17 - Bitbucket Server and Data Center 7.17 prior to 7.17.10 - Bitbucket Server and Data Cent...

CVE-2022-26134

CVE-2022-26134 - Vulnerabilidad de inyección OGNL. En las versiones afectadas de Confluence Server y Data Center, existe una vulnerabilidad de inyección OGNL que permitiría a un atacante no autenticado ejecutar código arbitrario en una instancia de Confluence Server o Data Center. PoC:...

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE Usage: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 VulnVersion Donwload https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Powered by Atlassian Crowd Version: 2.11.0 Build:725 -...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability: Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...