10115 matches found
Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb
CVE-2022-22980 A local based poc of CVE-2022-22980, for the d...
Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
「💥」CVE-2022-26134 Description In affected versions of Con...
UBUNTU-CVE-2021-46823
python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...
CVE-2021-46823
python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...
GHSA-7V4J-8WVR-V55R `array!` macro is unsound when its length is impure constant
Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...
Inefficient Regular Expression Complexity potentially leads to Denial of Service
Description Inefficient Regular Expression Complexity of url regex could lead to a denial of service attack. This report bypasses the fix in issue 300 by a well-formed payload '//a.b' + 'c1'.repeati + 'a'. With only 36 characters payload could take 18672 ms time execution. Proof of Concept js //...
CVE-2021-21252
A flaw was found in jQuery-validate. There is an issue where it contains one or more regular expressions vulnerable to a Regular Expression Denial of Service ReDoS...
Delight Nashorn Sandbox 安全漏洞
Delight Nashorn Sandbox is a sandbox for executing JavaScript in Java using Nashorn from Java Delight A denial of service vulnerability exists in Delight Nashorn Sandbox version 0.2.0, which stems from a weak expression that can be exploited and can be used by an attacker to The vulnerability lea...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - Confluence Pre-Auth Remote Code Execution...
Security Bulletin: IBM Sterling Control Center is vulnerable to remote attacker security restrictions bypass due to Eclipse EE4J Jakarta Expression Language (CVE-2021-28170)
Summary Eclipse EE4J Jakarta Expression Language is used by IBM Sterling Control Center. Eclipse EE4J Jakarta Expression Language could allow a remote attacker to bypass security restrictions, and the issue has been addressed. Vulnerability Details CVEID: CVE-2021-28170 DESCRIPTION: Eclipse EE4J...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...
Regular Expression Denial of Service (ReDoS)
...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 -u URL, --url URL 目标url -c COMM...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 -u URL, --url URL 目标url -c COMM...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
ConfluentPwn Confluence pre-auth ONGL injection remote code ex...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228...