Exploit-CVE-2024-23897

Exploit-CVE-2024-23897 Ejecutar el Contenedor docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 Verificar logs docker logs Obtener la IP de la máquina Docker: docker inspect vulnerable-jenkins | grep IPAddress Código de Explotación: python3 exploit.py --target...

Oracle-Identity-Manager-CVE-2025-61757

Oracle Identity Manager CVE-2025-61757 漏洞检测工具 v2.2 🔥 漏洞背景 近日，Oracle Identity Manager 曝出严重远程代码执行漏洞（CVE-2025-61757），该漏洞由于 SecurityFilter 对请求URI处理不当，攻击者可通过添加 ;.wadl 参数绕过身份验证，进而利用Groovy脚本在处理器编译时执行任意代码，最终获取服务器权限。 漏洞危害： CVSS 3.1评分：9.8（高危） 影响范围：全球数千台服务器 利用难度：低 危害程度：极高 🛡️ 工具介绍 为应对这一紧急安全威胁，开发了专用于检测...

CVE-2019-12180

CVE-2019-12180 安全公告与概念验证 SoapUI 和 ReadyAPI 允许您使用 Apache Groovy 语言脚本为测试用例创建或添加动态内容（例如，在运行时计算时间戳）。这些脚本的执行可以通过多种方式触发，并且在保存项目后，它们会存储在 XML“项目文件”中。 “加载脚本”功能允许创建一个 Groovy 脚本，该脚本在打开项目文件时（XML 项目文件的 con:afterLoadScript 元素）自动启动，无需任何额外的用户交互。攻击者可以利用此行为创建恶意项目文件，一旦打开，即可在受害者系统上执行任意 Groovy 代码。由于可以使用 Groovy...

magnolia-rce

Título del exploit: Magnolia DX Core 6.3.8 - Inyección de comandos Fecha: 05/16/2025 Autor del exploit: tmrswrr Versión: 6.3.8 Página principal del proveedor: https://docs.magnolia-cms.com/home/ Producto: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8...

CVE-2026-75411

JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the SecurityCheck class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely...

CVE-2026-75411

JeecgBoot v3.9.2 is vulnerable to Remote command execution via the CodeNode component of the AI Flow module. The component supports Groovy script execution , but the SecurityCheck class uses a blacklist mechanism that can be completely bypassed due to the dynamic nature of Groovy, specifically th...

PT-2026-82304

Name of the Vulnerable Software and Affected Versions JeecgBoot version 3.9.2 Description Remote command execution is possible in the CodeNode component of the AI Flow module, which supports Groovy script execution. The SecurityCheck class uses a blacklist to intercept dangerous calls; however,...

CVE-2026-75411: Improper Control of Generation of Code

JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the SecurityCheck class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely...

CVE-2026-69100 LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the scrip...

Improper Isolation or Compartmentalization

Overview org.apache.syncope.ext.flowable:syncope-ext-flowable-bpmn is an Open Source system for managing digital identities in enterprise environments, Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization through...

CVE-2026-53405

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a Groovy scriptTask is imported and started, the Groovy...

EUVD-2026-45956

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a Groovy scriptTask is imported and started, the Groovy...

PT-2026-61603

Name of the Vulnerable Software and Affected Versions Apache Syncope versions 3.0.0-M0 through 3.0.16 Apache Syncope versions 4.0.0-M0 through 4.0.6 Apache Syncope versions 4.1.0-M0 through 4.1.1 Description An improper isolation issue allows an administrator with sufficient entitlements to impor...

CVE-2026-15496

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

CVE-2026-15496

SonicCloudOrg sonic-agent (up to version 2.7.2) contains a remote os command injection in GroovyScriptImpl.evalIsFailed within Groovy Script Handler. The vulnerable function is in sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java. Exploitation is public and report...

CVE-2026-15496 SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

CVE-2026-15496 SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

EUVD-2026-43218

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

CVE-2026-15496

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

CVE-2026-15496: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...