Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution

Atlassian Crowd and Crowd Data Center is susceptible to a remote code execution vulnerability because the pdkinstall development plugin is incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit...

CVE-2023-22515-joaoviictorti

CVE-2023-22515 Overview Compile Usage Running CVE-2023-22515 Overview Confluence is a web-based enterprise wiki developed by Australian software company Atlassian. Atlassian has been made aware of an issue reported by some customers where external attackers may have exploited a previously unknown...

CVE-2021-26084

CVE-2021-26084 Descripción - POC de CVE-2021-26084, que es una vulnerabilidad de inyección RCE Pre-Auth OGNL Object-Graph Navigation Language en Atlassian Confluence Server. - creado por antx el 13-01-2022. Detalle - En las versiones afectadas de Confluence Server y Data Center, existe una...

CVE-2023-22527

CVE-2023-22527 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE which tested and proven POC in vulnerable instance of confluence data center and servers. By this an attacker can execute arbitary code on vulnerable instance Installation:...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E Description A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.Most recent supported...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 A simple basch script exploit for CVE-2023-22515. Information Confluence Data Center and Server instances have a Broken Access Control Vulnerability CVE-2023-22515, allowing attackers to create unauthorized Confluence administrator accounts and access Confluence instances...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2023-22527-POC

CVE-2023-22527: Vulnerabilidad de Atlassian Confluence Introducción La vulnerabilidad CVE-2023-22527 es una falla de seguridad crítica en Atlassian Confluence, una plataforma de colaboración y documentación ampliamente utilizada. Esta vulnerabilidad existe tanto en Confluence Data Center como en...

CVE-2023-22515-check

Descargo de responsabilidad Este script es solo para fines educativos y de prueba. Úsalo de forma responsable y asegúrate de tener permiso para probar la instancia de Confluence objetivo. Las pruebas no autorizadas son ilegales y poco éticas. Script de Detección de Vulnerabilidad CVE-2023-22515 e...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-en-Confluence-Data-Center-and-Server Esta vulnerabilidad permite a un atacante no autenticado ejecutar código arbitrario de forma remota en un servidor Confluence vulnerable. La vulnerabilidad existe debido a una validación incorrecta de la entrada proporcionada por el usuario...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server y Data Center - Vulnerabilidad de Inyección de Comandos CVE-2022-36804 En las versiones afectadas de Atlassian Bitbucket Server y Data Center existe una vulnerabilidad de inyección de comandos en múltiples endpoints de API donde un atacante con acceso a u...

CVE-2023-22518

CVE-2023-22518 Vulnerabilidad de autorización inadecuada en Confluence Data Center y Server. Atlassian ha alertado a los administradores sobre una vulnerabilidad crítica en Confluence. La explotación de este problema puede provocar pérdida de datos, por lo que los desarrolladores instan a instala...

VulnCheck KEV: CVE-2023-37569

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker ...

CVE-2022-22836

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:00+00:00| seen| https://t.me/hackingAttack/38115 2026-09-02 01:02:22+00:00| seen| https://t.me/hackingAttack/38115 2026-09-06 16:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/38115 2026-09-07 01:00:10+00:00|...

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

EUVD-2026-62207

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...

CVE-2026-21584

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead...

CVE-2026-21582

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

CVE-2026-21582

Crowd Data Center 7.2.1 has a Broken Authentication & Session Management flaw (CVSS 8.8) letting unauthenticated attackers act as other users; Atlassian advises upgrading to 7.2.2 or later . No exploitation details are provided in the documents.

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...