CVE-2021-46361

CVE-2021-46361: Bypass delle restrizioni FreeMarker in Magnolia CMS Un problema nel filtro FreeMarker di Magnolia CMS v6.2.11 e versioni precedenti consente agli attaccanti di aggirare le restrizioni di sicurezza ed eseguire codice arbitrario tramite un payload FreeMarker appositamente costruito...

VMware-CVE-2022-22954-Command-Injector

VMware-CVE-2022-22954-Command-Injector Proof of Concept per lo sfruttamento di VMware CVE-2022-22954 Come funziona Questo semplice script Python effettua una richiesta GET all'URL specificato con l'aggiunta di /catalog-portal/ui/oauth/verify?error=&deviceUdid= e quindi seguito da una versione...

CVE-2026-31380 Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass

Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

JFrog Artifactory FreeMarker Template Injection Vulnerability

Artifactory is a full-featured component manager from JFrog. A template injection vulnerability exists in Artifactory FreeMarker, which can be exploited by an attacker to An attacker can use this vulnerability to read or write arbitrary files and execute code on an instance of Artifactory...