MAGNOLIA-8348

MAGNOLIA-8348：Magnolia CMS 中的 FreeMarker 限制绕过 3 Magnolia CMS v6.2.17 及更低版本的 FreeMarker Filter 存在一个问题，允许攻击者通过精心构造的 FreeMarker 载荷绕过安全限制并执行任意代码、读取/写入/移动/复制/删除任意文件或发起 DoS 攻击。通过写入任意 JSP 文件，已成功实现任意代码执行。 协作： 此漏洞是与 Marian-Razvan Ilisanu 合作发现的。 厂商披露： 此漏洞的厂商披露与修复方案可在此处查看。 为何没有 CVE？ 我和厂商均未为这些漏洞申请 CVE。 概念验证：...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 e CVE-2025-71260 Catena di Esecuzione Remota di Codice Pre-Autenticata su BMC FootPrints Strumento Generatore di Artefatti di Rilevamento per la Catena di Esecuzione Remota di Codice Pre-Autenticata su BMC FootPrints Descrizione Questo generatore di artefatti di rilevamento verific...

CVE-2020-11531

The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. This allows an authenticated attacker to execute code in the context of the product by writing a JSP file to the webroot...

CVE-2018-18831

An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file in the position parameter to an arbitrary directory via a ../ Directory Traversal in the url parameter...