CVE-2025-3639

CVE-2025-3639 PoC - Bypass di Login Liferay Portal/DXP Questo repository contiene un Proof of Concept PoC per CVE-2025-3639 , una vulnerabilità di bypass del login in Liferay Portal versioni 7.3.0–7.4.3.132 e Liferay DXP varie versioni da 2024.Q1 a 2025.Q1.6. Il PoC dimostra come un utente non...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...