4008 matches found
Intel Data Center Manager 安全漏洞
Intel Data Center Manager is a software solution from Intel Corporation USA. The Intel Data Center Manager version 5.0 or earlier has an elevation of privilege vulnerability, which stems from a failure in the protection mechanism and can be exploited by attackers to elevate privileges...
Upgrade Apache Commons-text for CVE-2022-42889
h3. BUG RE-OPENED Jira Service Management 5.4.3 which was supposed to be fixed at 9.4.3 / 5.4.3 is still generating files with common text library of 1.6 version in the /plugins/.osgi-plugins folder. Even after deleting these files, they keep generating them back again in the next restart. Due to...
CVE-2022-44724
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
Cross site scripting
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
CVE-2022-44724
CVE-2022-44724 describes a Cross-Site Scripting (XSS) vulnerability in the Handy Tip macro of Stiltsoft Handy Macros for Confluence Server/Data Center, affecting versions 3.x up to 3.5.4. The underlying issue is an XSS in the Handy Tip macro that allows remote attackers to inject arbitrary HTML o...
CVE-2022-41552
Server-Side Request Forgery SSRF vulnerability in Hitachi Infrastructure Analytics Advisor on Linux Data Center Analytics, Analytics probe components, Hitachi Ops Center Analyzer on Linux Hitachi Ops Center Analyzer detail view, Hitachi Ops Center Analyzer probe components allows Server Side...
Putting a word in quotes and having the > character in the summary allows scripts to execute
h3. Issue Summary If you have a summary with a word in double quotes, similar to "Something" and have the character. Then you can execute actions through tags in the summary This is reproducible on Data Center: Yes h3. Steps to Reproduce This can be reproduced when editing and creating an issue...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - OGNL injection vulnerability. Script proof...
Attachments that are added to drafts while collaborative editing is off are searchable when collaborative editing is turned on
h3. Issue Summary This is reproducible on Data Center: yes h3. Steps to Reproduce Turn OFF collaborative editing Create a page Add attachment to the page Do not publish the page Try searching for the draft or attachment Enable Collaborative Editing Perform Reindexing Try searching for the draft o...
Vulnerable version of xmlsec used - CVE-2021-40690 in atlassian-authentication-plugin
Recently we have identified that on top of the libraries mentioned in JRASERVER-73580, there was another libraryatlassian-authentication-plugin that has a transitive dependency of xmlsec that could be related to the vulnerability described in...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Installation Download the Python scri...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Installation git clone https://github.com/CJ-0107/cve-20...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 ATLASIAN-Confluence RCE Installa...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
PoC exploit for CVE-2022-26134, a remote code execution vulnerab...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2022-26134, an OGNL injection vuln...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
It is an offensive tool for web exploitation. The repository is...
Critical severity command injection vulnerability - CVE-2022-43781
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to gain code execution on the system. This vulnerability was introduced in Bitbucket Server and Data Center...
PT-2022-5667 · Atlassian · Bitbucket Server +1
Name of the Vulnerable Software and Affected Versions: Atlassian Bitbucket Server and Data Center affected versions not specified Description: The issue is related to a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to...
PT-2022-5616 · Microsoft · Windows Cryptoapi +1
Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows CryptoAPI, which can be exploited to bypass authentication. This vulnerability allows an attacker to conduct spoofi...