Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/01 11:29 p.m.•9 views

CVE-2020-17530

CVE-2020-17530 Prueba de concepto rápida para CVE-2020-17530. En Apache Struts versiones 2.0.0 - 2.5.25, una evaluación forzada del Lenguaje de Navegación de Grafos de Objetos OGNL sobre la entrada de usuario sin procesar en atributos de etiquetas puede conducir a la ejecución remota de código RC...

9.8CVSS7.9AI score0.95931EPSS
SaveExploits14
NVD
NVD
•added 2026/08/05 8:17 p.m.•13 views

CVE-2026-66298

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

8.8CVSS0.00267EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/05 7:44 p.m.•50 views

CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

8.6CVSS0.00267EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•3 views

CVE-2026-66298: Origin Validation Error

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...

8.8CVSS6AI score0.00267EPSS
SaveExploits0References8
OSV
OSV
•added 2022/02/09 10:51 p.m.•18 views

GHSA-JC35-Q369-45PV Remote code execution in Apache Struts

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution...

9.8CVSS7.8AI score0.95931EPSS
SaveExploits14References14
OpenVAS
OpenVAS
•added 2021/04/06 12:00 a.m.•45 views

Apache Struts Security Update (S2-036)

Apache Struts is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

9CVSS8.9AI score0.08085EPSS
SaveExploits0References3
Rows per page
Query Builder