1441 matches found
PT-2024-13997 · Janitza · Gridvis
Name of the Vulnerable Software and Affected Versions: Janitza GridVis versions 9.0.66 and earlier Description: The issue allows remote authenticated administrative users to execute arbitrary Groovy code due to exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject...
Kafka UI 0.7.1 Command Injection Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kafka UI Unauthenticated Remote Command Execution via the Groovy Filter option.', 'Description' = %q A command injection vulnerability exists in...
The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the lack of measures to neutralize special elements within the platform, allowing attackers to execute arbitrary Groovy and Python code.
The XWiki platform is vulnerable because measures have not been taken to neutralize its special elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary Groovy and Python code...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to execute arbitrary Groovy, Python, or Velocity code.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability allows a malicious actor to execute arbitrary Groovy, Python, or Velocity code remotely...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to execute arbitrary Groovy, Python, or Velocity code.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability allows a malicious actor to execute arbitrary Groovy, Python, or Velocity code remotely...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
CVE-2024-23639
Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are susceptible to drive-by localhost attacks. While not typical ...
Security Bulletin: Vulnerabilities in Groovy affect IBM Cloud Pak System [CVE-2016-6814, CVE-2015-3253]
Summary Vulnerabilities in Groovy affect IBM Cloud Pak System. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2016-6814 DESCRIPTION: Apache Groovy could allow a remote attacker to execute arbitrary code on the system, caused by a...
Exploit for Code Injection in Provectus Ui
CVE-2023-52251-POC There is a Remote Code Execution vulnerabi...
Exploit for Server-Side Request Forgery in Apache Ofbiz
CVE-2023-51467 Graphical Apache Ofbiz: CVE-2023-51467 – Remo...
Denial Of Service (DoS)
org.jline, jline-groovy is vulnerable to Denial Of Service DoS. The vulnerability is due to a lack of row size limits when printing output, resulting in an out of memory error when the groovyEngine.execute method is passed with a crafted input...
CVE-2023-50572
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...
AZL-66920 CVE-2023-50572 affecting package jline 2.14.6-1
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...
AZL-66918 CVE-2023-50572 affecting package jline 2.14.6-1
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...
DEBIAN-CVE-2023-50572
An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM OutofMemory error...
