Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. id: CVE-2017-1000029 info: name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File...

Javafaces LFI

An Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware...

Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests. id: CVE-2017-1000028 info: name: Oracle GlassFish Server Open Source Edition 4.1 - Loc...

CVE-2017-1000028

CVE-2017-1000028 GlassFish4.1.14.1.1 미포함에 대한 POC&EXP. 매개변수: -u: 단일 URL /etc/passwd 출력 없음 -ut: 단일 URL /etc/passwd 출력 포함 -f: url.txt에서 URL을 읽어 취약한지 확인 -c: 반드시 "-u" 매개변수와 함께 사용. 예: python3 CVE-2017-1000028.py -u http://xxx.xxx.xxx.xxx:4848 -c /etc/hello.txt Python3에서 실행. 코딩 실력이 너무 안 좋아서... 이걸 쓸 때 욕하...

Glassfish-research

GlassFish 보안 연구 Eclipse GlassFish 관리 콘솔에 대한 취약점 연구...

CVE-2026-2586

Аутентифицированное выполнение кода через EL-инъекцию в GlassFish CVE-2026-2586 Уязвимость инъекции выражений EL в консоли администрирования GlassFish позволяет аутентифицированному пользователю внедрять вредоносные EL-выражения в параметры, обрабатываемые административным веб-интерфейсом. Успешн...

CVE-2022-22965-PoC_Payara

CVE-2022-22965 PoC - Payara 임의 파일 다운로드 Payara/Glassfish에서 CVE-2022-22965 Spring 취약점을 재현하는 최소 예제입니다. 악의적인 사용자가 임의의 웹 루트를 설정하여 임의의 파일 다운로드를 가능하게 하는 Payara/Glassfish용 대체 페이로드입니다. Docker Compose를 사용한 실행 1. Docker Compose를 사용하여 애플리케이션 빌드 root@kitploit: docker-compose up --build 2. 앱을 테스트하려면...

CVE-2026-2587-Exploit-POC

CVE-2026-2587 Эксплойт PoC — Валидатор EL-инъекции RCE в Eclipse GlassFish Безопасный валидатор PoC для CVE-2026-2587, критической проблемы EL-инъекции / RCE, затрагивающей обработку гаджетов консоли администрирования Eclipse GlassFish через /common/gadgets/gadget.jsf. Этот инструмент помогает...

CVE-2018-14324-Exploit

Взлом Eclipse GlassFish - CVE-2018-14324 Описание CVE-2018-14324 не полностью объясняет влияние этой уязвимости. Кратко: у вас есть доступ к Java Management Extensions JMX через жестко закодированные учетные данные admin:admin. Хотя воздействие указано как «потенциально чувствительная информация,...

CVE-2026-12605

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...

CVE-2026-12605

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...

EUVD-2026-53925

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...

CVE-2026-12605

The CVE-2026-12605 affects Eclipse GlassFish 8.0.x before 8.0.4. A CSRF + SSRF flaw in DownloadServlet ContentSources allows leakage of the admin gfresttoken to an attacker-controlled host when the victim is authenticated in the Admin Console, enabling full unauthenticated takeover of the GlassFi...

CVE-2026-12605

In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin gfresttoken to attacker-controlled host if the victim is authenticated into the Admin Console -\ full unauthenticated takeover of Eclipse GlassFish domain until the token expires...

CVE-2026-2586

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...

CVE-2026-2587

A critical Remote Code Execution RCE vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language EL “expressions” are processed...

Exploit for CVE-2026-2587

CVE-2026-2587 — GlassFish EL Injection RCE...

GlassFish's Administration Console is Vulnerable to RCE

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...

GHSA-29WV-CV7P-XJC2 GlassFish's gadget handler is vulnerable to RCE

A critical Remote Code Execution RCE vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language EL “expressions” are processed...

GHSA-96V6-HQ43-X9H4 GlassFish's Administration Console is Vulnerable to RCE

An authenticated Remote Code Execution RCE vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user...