111 matches found
CVE-2018-14324-Exploit
Hacking Eclipse GlassFish - CVE-2018-14324 La descrizione di CVE-2018-14324 non spiega completamente l'impatto di questa vulnerabilità. TLDR hai accesso a Java Management Extensions JMX tramite credenziali hardcoded admin:admin. Mentre l'impatto è elencato come " potenzialmente informazioni...
CVE-2026-2587-Exploit-POC
CVE-2026-2587 Exploit PoC — Validatore RCE tramite EL Injection su Eclipse GlassFish Validatore PoC sicuro per CVE-2026-2587, una vulnerabilità critica di EL Injection / RCE che colpisce la gestione dei gadget della console amministrativa di Eclipse GlassFish tramite /common/gadgets/gadget.jsf...
Glassfish-research
Ricerca sulla sicurezza di GlassFish Ricerca di vulnerabilità sulla console di amministrazione di Eclipse GlassFish...
EUVD-2026-53925
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...
CVE-2026-12605
The CVE-2026-12605 affects Eclipse GlassFish 8.0.x before 8.0.4. A CSRF + SSRF flaw in DownloadServlet ContentSources allows leakage of the admin gfresttoken to an attacker-controlled host when the victim is authenticated in the Admin Console, enabling full unauthenticated takeover of the GlassFi...
CVE-2026-12605
In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...
Eclipse Glassfish 代码注入漏洞
Eclipse Glassfish is an application server developed by the Eclipse Foundation. Eclipse Glassfish has a code injection vulnerability. This vulnerability stems from allowing users with panel access rights to send custom requests, thereby enabling them to execute arbitrary operating system commands...
EUVD-2024-54788
Malicious code in bioql PyPI...
EUVD-2024-54789
Malicious code in bioql PyPI...
EUVD-2024-54790
Malicious code in bioql PyPI...
EUVD-2024-2827
Malicious code in bioql PyPI...
EUVD-2024-54792
Malicious code in bioql PyPI...
EUVD-2024-54793
Malicious code in bioql PyPI...
EUVD-2024-54791
Malicious code in bioql PyPI...
EUVD-2023-0320
Malicious code in bioql PyPI...
EUVD-2024-2746
Malicious code in bioql PyPI...
EUVD-2023-2849
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-2712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'...
