CVE-2022-26134

CVE-2022-26134 - Confluence OGNL injection vulnerability Script Usage Install Python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scanning python3 CVE-2022-26134check.py -f url.txt -c whoami Affected Versions Confluence...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 Usage: -t http://vuldomain.com // single IP -f urls.txt // read file for batch scan, multi-threaded, fast -c command // custom command,...

cve-2022-22947

cve-2022-22947 Spring Cloud Gateway is an API gateway in Spring. Versions 3.1.0 and 3.0.6 inclusive and earlier contain a SpEL expression injection vulnerability. When an attacker can access the Actuator API, they can exploit this vulnerability to execute arbitrary commands. Usage: ➜...

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

octoscan

:octocat: octoscan Octoscan is a static vulnerability scanner for GitHub action workflows. Table of Contents Table of Contents Installation Usage download remote workflows analyze GitHub action Rules dangerous-checkout dangerous-action dangerous-write expression-injection runner-label repo-jackin...

CVE-2022-26134

CVE-2022-26134 Confluence OGNL expression injected RCECVE-2022-26134 poc and exp Update Add sandbox bypass, high version supported. Usage Usage: python Confluencecve202226134RCE.py http://example.com/ The script will auto check target is vulnerable, and enter a pseudo-interactive shell if it's...

n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

n8n God Mode Ultimate - CVE-2025-68613 Scanner & Exploitation Framework Advanced n8n Workflow Automation RCE Scanner & Exploitation Tool 🎯 Overview n8n God Mode Ultimate is a comprehensive security testing framework designed to detect and validate CVE-2025-68613 in n8n workflow automation...

octoscan

:octocat: octoscan Octoscan 是一个用于 GitHub Actions 工作流的静态漏洞扫描器。 目录 目录 安装 用法 下载远程工作流 分析 GitHub Action 规则 dangerous-checkout dangerous-action dangerous-write expression-injection runner-label repo-jacking unsecure-commands bot-check known-vulnerability dangerous-artefact credentials shellcheck...

CVE-2018-1273

CVE-2018-1273 Environment for CVE-2018-1273 CVE-2018-1273: RCE with Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Build $ docker build -t cve-2018-1273 . Run $ docker run -d -p 8080:8080...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613

n8n Authenticated Expression Injection RCE – CVE-2025-68613 Critical Remote Code Execution CVSS 9.9 in n8n Workflow Automation Tool Proof of Concept – For educational and authorized security research use only ⚠️ Important Legal Warning This code is provided STRICTLY for educational purposes and...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — 脆弱性ラボ & PoC レポート Ni8mare 脆弱性チェーンの実践環境（Vulnerable Lab）と詳細なエクスプロイト分析レポートです。n8n プラットフォーム上で、Arbitrary File Read （CVE-2026-21858）から Remote Code Execution （CVE-2025-68613）まで、認証なしで攻撃可能です。 詳細な分析・エクスプロイトレポート 完全な分析資料と、各ステップを図解した PoC...

CVE-2020-17531

CVE-2020-17530 Apache Struts2 framework is a web framework for developing Java EE web applications. Apache Struts disclosed S2-061 Struts remote code execution vulnerability CVE-2020-17530 on December 08, 2020. When using certain tags and other cases, there may be an OGNL expression injection...

n8n-CVE-2025-68613

🔥 n8n CVE-2025-68613 — Remote Code Execution Research This repository contains full vulnerability research, exploitation methodology, detection engineering, and TryHackMe walkthrough for CVE-2025-68613 , a critical Remote Code Execution vulnerability in the n8n workflow automation platform. 📌 CVE...

cve-2022-26134

cve-2022-26134 cve-2022-26134 atlassia Confluence Data Center2016 server OGNL %...

CVE-2025-68613

CVE-2025-68613 — n8n RCE via Expression Injection For educational and authorized security research purposes only. Overview Critical RCE vulnerability CVSS 9.9 in n8n workflow automation platform. Authenticated users can execute arbitrary OS commands via the executeCommand node, bypassing sandbox...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n RCE Exploit Unauthenticated RCE chain for n8n 1.121.0 CVSS 10.0 Attack Chain 1. CVE-2026-21858 - Content-Type confusion → read /home/node/.n8n/config and database.sqlite 2. Extract encryption key and admin credentials from files 3. Forge admin JWT token 4...

CVE-2026-39842

CVE-2026-39842: OpenRemote ルールエンジンにおける式インジェクションによるRCE TL;DR OpenRemoteのルールエンジンにおける重大なリモートコード実行の脆弱性により、write:rules ロールを持つ認証済みユーザーがサーバー上でroot権限を持つ任意のコードを実行できます。 CVSSスコア : 10.0（Critical） CVSSベクター : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 影響を受けるバージョン : OpenRemote = 1.22.0 認証の必要性 : あり（write:rules...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE Full unauthenticated RCE chain on n8n: 1. CVE-2026-21858 - Content-Type confusion → Arbitrary File Read 2. Read config + database → forge admin JWT 3. CVE-2025-68613 -...