CVE-2025-3639

CVE-2025-3639 PoC - Обход аутентификации Liferay Portal/DXP Этот репозиторий содержит Proof of Concept PoC для CVE-2025-3639 — уязвимости обхода аутентификации в Liferay Portal версии 7.3.0–7.4.3.132 и Liferay DXP различные версии от 2024.Q1 до 2025.Q1.6. PoC демонстрирует, как...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...