CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 説明 この脆弱性は、MVEL式言語インジェクションを悪用して、Apache Unomi バージョン 1.5.1 を実行しているシステム上で任意のコマンド実行を可能にします。 プロジェクトページ GitHub - Vulhub - Unomi CVE-2020-13942 環境設定 Docker Compose ファイル docker-compose.yml root@kitploit: version: '2'...

CVE-2020-10199

Nexus Repository Manager 3 脆弱性 影響バージョン：= 3.21.2 CVE-2020-10199、CVE-2020-10204、CVE-2020-11444 CVE-2020-10199 リモートコードコマンド実行 エコーバックありのPoC エコーバックなしのPoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' 一般ユーザー権限 root@kitploit:...

CVE-2026-2586

認証済みGlassFish ELインジェクション RCE CVE-2026-2586 GlassFish管理コンソールにおけるExpression Language（EL）インジェクションの脆弱性により、認証済みユーザーが管理用Webインターフェースで処理されるパラメータに悪意のあるEL式を注入できる可能性があります。悪用に成功すると、影響を受けるサーバー上でリモートコード実行につながる可能性があります。 この脆弱性は、アプリケーションがユーザー制御のパラメータを安全でない方法で解釈する、サーバーの仮想構成編集フローにおいて確認されました。 この脆弱性が発生する理由は次のとおりです。...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Confluence OGNL インジェクション...

Adobe Experience Manager - Expression Language Injection

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 has an expression language injection vulnerability. id: CVE-2019-16469 info: name: Adobe Experience Manager - Expression Language Injection author: DomenicoVeneziano severity: high description: | Adobe Experience Manager versions...

CVE-2026-77939

Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passing unsanitized user-supplied input to the Symfony ExpressionLanguage engine via the POST /api/v1/query endpoint...

CVE-2026-77939 Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint

Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passing unsanitized user-supplied input to the Symfony ExpressionLanguage engine via the POST /api/v1/query endpoint...

CVE-2026-77939 Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint

Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passing unsanitized user-supplied input to the Symfony ExpressionLanguage engine via the POST /api/v1/query endpoint...

CVE-2026-77939

Flextype CMS through v1.0.0-dev is affected by an expression language injection in its Symfony ExpressionLanguage engine , reachable via the POST /api/v1/query endpoint. Unsanitized, user-supplied input is passed to the engine, exposing application objects such as filesystem() and serializers() w...

EUVD-2026-67837

Flextype CMS through v1.0.0-dev contains an expression language injection vulnerability that allows authenticated attackers with a valid API token to read arbitrary files by passing unsanitized user-supplied input to the Symfony ExpressionLanguage engine via the POST /api/v1/query endpoint...

CVE-2017-8046-DEMO

Test demo di spring data rest CVE-2017-8046 per favore AGGIORNA spring data rest ORA. passaggi Avvia questa applicazione Crea un'istanza di test root@kitploit: POST /entityPersons/ HTTP/1.1 Host: localhost:8080 Content-Type: application/json Cache-Control: no-cache "firstName":"f2" Utilizzando...

cve-2022-42889-text4shell

Installa maven - maven-linux 1. Installazione di Maven per creare il fat jar root@kitploit: mvn clean install 2. Build Docker root@kitploit: docker build --tag=text4shell . 3. Esegui Docker root@kitploit: docker run -p 80:8080 text4shell 4. Testa l'applicazione root@kitploit:...

PT-2026-83281

Name of the Vulnerable Software and Affected Versions Flextype CMS versions prior to 1.0.0-dev Description An expression language injection exists that allows authenticated attackers with a valid API token to read arbitrary files. This occurs when unsanitized user input is passed to the Symfony...

CVE-2025-4427-CVE-2025-4428

CVE-2025-4428 e CVE-2025-4427 CVE-2025-4428 è una vulnerabilità di esecuzione remota di codice post-autenticazione in DeviceFeatureUsageReportQueryRequestValidator di EPMM. Deriva dalla gestione non sicura dell'input fornito dall'utente all'interno dei messaggi di errore elaborati tramite...

EUVD-2026-66854

Applications that evaluate user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack when the power operator ^ is used with a BigDecimal or BigInteger operand and a large exponent value. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 -...

CVE-2026-22738

Ambiente di riproduzione CVE-2026-22738 Descrizione della vulnerabilità CVE-2026-22738 è una vulnerabilità di iniezione SpEL Spring Expression Language in Spring AI SimpleVectorStore che può portare all'esecuzione remota di codice RCE non autenticata. Versioni interessate...

pwnfaces

😛 pwnfaces Exploit di iniezione EL in PrimeFaces 5.X 🕵️ Cos'è pwnfaces? 🕵️ pwnfaces è uno strumento Golang creato per sfruttare la vulnerabilità definita come CVE-2017-1000486 iniezione EL in PrimeFaces 5.X ⚡ Installazione / Per iniziare Una guida rapida su come installare e usare pwnfaces...

CVE-2026-41849

CVE-2026-41849...

Expression Language Injection

Spring Web Flow is vulnerable to Expression Language Injection. The vulnerability is due to malicious Unified EL expressions being processed by WebFlowELExpressionParser, allowing an attacker to execute arbitrary expressions in affected applications...

Security Bulletin:Vulnerability in spring affects IBM Netezza Appliance

Summary The spring package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-41850, CVE-2026-41851, CVE-2026-41852 Vulnerability Details CVEID:CVE-2026-41850 DESCRIPTION: Applications that evaluate user-supplied Spring Expression Language SpEL...