Lucene search
+L

560 matches found

Github Security Blog
Github Security Blog
added 2021/06/16 5:18 p.m.53 views

Expression Language Injection in Apache Syncope

A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java Bean Validation JSR 380 custom constraint validators. When...

9.8CVSS9.8AI score0.04821EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2020/12/10 5:42 p.m.96 views

Exploit for Expression Language Injection in Apache Struts

S2-061 The scripts are all written based on the vulhub’s struts...

9.8CVSS7AI score0.95622EPSS
SaveExploits11
CNVD
CNVD
added 2020/10/20 12:0 a.m.5 views

HPE Intelligent Management Center (iMC) devsoftsel Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center is a suite of network intelligence management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.9AI score0.03401EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.6 views

HPE Intelligent Management Center (iMC) perfselecttask Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.4 views

HPE Intelligent Management Center (iMC) reporttaskselect Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.3 views

HPE Intelligent Management Center (iMC) adddevicetoview Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.3 views

HPE Intelligent Management Center (iMC) operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.5 views

HPE Intelligent Management Center (iMC) navigationTo Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.7 views

HPE Intelligent Management Center (iMC) quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06895EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.7 views

HPE Intelligent Management Center (iMC) deployselectsoftware Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.10 views

HPE Intelligent Management Center (iMC) selviewnavcontent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.4 views

HPE Intelligent Management Center (iMC) actionSelectContent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.1AI score0.03353EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.9 views

HPE Intelligent Management Center (iMC) chooseperfview Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.8 views

HPE Intelligent Management Center (iMC) smsrulesdownload Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center is a suite of network intelligence management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.9AI score0.03353EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.7 views

HPE Intelligent Management Center (iMC) ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.1AI score0.03401EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.9 views

HPE Intelligent Management Center (iMC) powershellconfigcontent Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center is a suite of network intelligence management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.9AI score0.03353EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.3 views

HPE Intelligent Management Center (iMC) devicethresholdconfig expression language injection remote code execution vulnerability (CNVD-2020-58764)

HPE Intelligent Management Center is a suite of network intelligence management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.9AI score0.03353EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.7 views

HPE Intelligent Management Center (iMC) faultinfo_content expression language injection remote code execution vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06994EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.5 views

HPE Intelligent Management Center (iMC) ifviewselectpage Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

10CVSS7.1AI score0.06895EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/20 12:0 a.m.4 views

HPE Intelligent Management Center (iMC) iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...

9CVSS7.1AI score0.03401EPSS
SaveExploits0References1
Rows per page
Query Builder