Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution

Atlassian Crowd and Crowd Data Center is susceptible to a remote code execution vulnerability because the pdkinstall development plugin is incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit...

CVE-2023-22515-joaoviictorti

CVE-2023-22515 Resumen Compilación Uso Ejecutar CVE-2023-22515 Resumen Confluence es una wiki empresarial basada en web desarrollada por la empresa australiana de software Atlassian. Atlassian ha sido informada de un problema reportado por algunos clientes donde atacantes externos pueden haber...

CVE-2021-26084

CVE-2021-26084 Descripción - POC de CVE-2021-26084, que es una vulnerabilidad de inyección RCE Pre-Auth OGNL Object-Graph Navigation Language en Atlassian Confluence Server. - creado por antx el 13-01-2022. Detalle - En las versiones afectadas de Confluence Server y Data Center, existe una...

CVE-2023-22527

CVE-2023-22527 Una herramienta de explotación para explotar el servidor de Confluence que es vulnerable a CVE-2023-22527, lo que conduce a RCE, probada y con POC verificado en instancias vulnerables de Confluence Data Center y servidores. Con esto, un atacante puede ejecutar código arbitrario en ...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E Descripción Una vulnerabilidad de inyección de plantillas en versiones antiguas de Confluence Data Center y Server permite a un atacante no autenticado lograr RCE en una instancia afectada. Los clientes que utilicen una versión afectada deben tomar medidas...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 Un exploit de script bash simple para CVE-2023-22515. Información Las instancias de Confluence Data Center y Server tienen una vulnerabilidad de control de acceso roto CVE-2023-22515, que permite a los atacantes crear cuentas de administrador de Confluence no autorizadas y...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - Vulnerabilidad de RCE Ejecución Remota de Código en Confluence Data Center y Confluence Server PoC Referencias CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2023-22527-POC

CVE-2023-22527: Vulnerabilidad de Atlassian Confluence Introducción La vulnerabilidad CVE-2023-22527 es una falla de seguridad crítica en Atlassian Confluence, una plataforma de colaboración y documentación ampliamente utilizada. Esta vulnerabilidad existe tanto en Confluence Data Center como en...

CVE-2023-22515-check

Descargo de responsabilidad Este script es solo para fines educativos y de prueba. Úsalo de forma responsable y asegúrate de tener permiso para probar la instancia de Confluence objetivo. Las pruebas no autorizadas son ilegales y poco éticas. Script de Detección de Vulnerabilidad CVE-2023-22515 e...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-Confluence数据中心和服务器中的远程代码执行漏洞 此漏洞允许未认证的攻击者在易受攻击的Confluence服务器上远程执行任意代码。该漏洞源于Confluence REST API对用户提供的输入验证不当，使得攻击者能够将恶意代码注入Confluence服务器并由服务器执行。 受影响版本 Confluence Data Center = 8.9.0 8.8.0 = Confluence Data Center = 8.8.1 8.7.1 = Confluence Data Center = 8.7.2 8.6.0 = Confluence Data...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server 和 Data Center 命令注入漏洞 CVE-2022-36804 在受影响的 Atlassian Bitbucket Server 和 Data Center 版本中，多个 API 端点存在命令注入漏洞，攻击者若能访问公共仓库或拥有私有 Bitbucket 仓库的读取权限，可通过发送恶意 HTTP 请求执行任意代码。 漏洞目标搭建 root@kitploit: docker pull atlassian/bitbucket-server:7.2.5-ubuntu-jdk11 docker run -...

CVE-2023-22518

CVE-2023-22518 Vulnerabilidad de autorización inadecuada en Confluence Data Center y Server. Atlassian ha alertado a los administradores sobre una vulnerabilidad crítica en Confluence. La explotación de este problema puede provocar pérdida de datos, por lo que los desarrolladores instan a instala...

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

CVE-2022-22836

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:00+00:00| seen| https://t.me/hackingAttack/38115 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38115 2026-09-06 16:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38115 2026-09-07 01:00:10+00:00|...

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

EUVD-2026-62207

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...

CVE-2026-21584

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...

CVE-2026-21582

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

CVE-2026-21582

Crowd Data Center 7.2.1 has a Broken Authentication & Session Management flaw (CVSS 8.8) letting unauthenticated attackers act as other users; Atlassian advises upgrading to 7.2.2 or later . No exploitation details are provided in the documents.

CVE-2026-21580

Confluence Data Center and Server versions 7.1.1 through 10.2.0 are affected by a Critical (CVSS 9.3) Stored XSS, privilege escalation, and security misconfiguration issue exploitable by unauthenticated attackers. Atlassian recommends upgrading to 9.2.21 or 10.2.13 or later; no in-the-wild exploi...