CVE-2025-3639

CVE-2025-3639 PoC - Liferay Portal/DXP 登录绕过 该仓库包含 CVE-2025-3639 的概念验证 PoC，这是 Liferay Portal（版本 7.3.0–7.4.3.132）和 Liferay DXP（从 2024.Q1 到 2025.Q1.6 的多个版本）中的一个登录绕过漏洞。该 PoC 演示了拥有有效凭据的未认证用户如何通过将 POST 请求修改为 GET 请求来绕过多因素认证 MFA，从而可能获得对用户帐户的未授权访问。 警告 ：此 PoC 仅用于教育目的...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...