26843 matches found
CVE-2019-11581
Atlassian Jira unauthenticated template injection CVE-2019-11581 I Building 1. Bug versions 4.4.x 5.x.x 6.x.x 7.0.x 7.1.x 7.2.x 7.3.x 7.4.x 7.5.x 7.6.x before 7.6.14 the fixed version for 7.6.x 7.7.x 7.8.x 7.9.x 7.10.x 7.11.x 7.12.x 7.13.x before 7.13.5 the fixed version for 7.13.x 8.0.x before...
purify
Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo Description The goal of Purify to be an easy-in-use and efficient tool to simplify a workflow of managing vulnerabilities delivered from various even custom tools. Purify is aims to be a tool-agnostic applicatio...
jira-exploits-cve
jira-exploits-cve Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...
CVE-2019-11581
CVE-2019-11581 Atlassian JIRA Template injection vulnerability RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Vuln Version Download https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc...
CVE-2020-14179
CVE-2020-14179 Sensitive data exposure via /secure/QueryComponent!Default.jspa endpoint Priority: High Affects Version/s: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names a...
CVE-2020-14181
CVE-2020-14181 Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. This vulnerability was discovered by Mikhail Klyuchnikov of Positive Technologies. Affected...
bulwark
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...
faraday_plugins
Install pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path faraday-plugins list-plugins Test autodetect plugin from comman...
Jira-CVE-2019-8451
Jira CVE-2019-8451 POC Description Proof of concept scan to check if a Jira host is vulnerable to CVE-2019-8451 CVE-2019-8451 CVE-2019-8451 is a pre-authentication server side request forgery SSRF vulnerability found in the /plugins/servlet/gadgets/makeRequest resource. This vulnerability was...
CVE-2021-39115
CVE-2021-39115 Template Injection in Email Templates leads to code execution on Jira Service Management Server I Building I have provided a guide for deployment + debug here, you can refer to it. II Analysis The Description of this CVE already clearly states that the bug lies in the Email Templat...
watchTowr-vs-Atlassian-CVE-2026-21589
CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection in Action Detection Artifact Generator attempts to check if the target is vulnerable to CVE-2026-21589. Detection is implemented for following products: Atlassia...
CVE-2019-8451
CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...
jira-mobile-ssrf-exploit
CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...
CVE-2019-8451
CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...
SecurityRAT
OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...
CVE-2019-15053
CVE-2019-15053 FAB-2019-00156 Vulnerability discoverd by me CVE-2019-15053 Advisory: advisory.txt Basic Info Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...
DSpace__DSpace_CVE-2016-10726_4-4
Installation instructions may be found in DSpace-Manual.pdf, offered with the source archives in the SourceForge project: http://sourceforge.net/projects/dspace/files/DSpace%20Stable/VERSION/ Replace "VERSION" with the version you are installing, such as "4.0". DSpace version information can be...
xray
Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...
cve-2022-1471-jira-lab
CVE-2022-1471 — SnakeYAML RCE lab Jira / Automation for Jira context Offline, self-contained lab proving the mechanism behind CVE-2022-1471 SnakeYAML unsafe deserialization → RCE, CVSS 9.8, as used in the Jira / Jira Service Management finding against a host running 9.4.9 affected range...