CVE-2022-22965

Spring4Shell भेद्यता - CVE-2022-22965 📕 परिचय spring4shell भेद्यता का यह नाम 2022 की शुरुआत में पाए गए और हमलावरों द्वारा व्यापक रूप से शोषित दो भेद्यताओं के कारण रखा गया था। इनमें से एक भेद्यता 'Spring Cloud Functions' नामक फ्रेमवर्क घटक में है कम गंभीर और दूसरी अधिक गंभीर घटक फ्रेमवर्क के मूल म...

spring-RCE-CVE-2022-22965

भेद्यता परिचय हाल ही में Spring में एक बड़ा CVE भेद्यता सामने आया है। CVE जानकारी के अनुसार, "JDK 9+ पर चलने वाला Spring MVC या Spring WebFlux एप्लिकेशन डेटा बाइंडिंग के माध्यम से रिमोट कोड एक्ज़ीक्यूशन RCE के लिए संवेदनशील हो सकता है। विशिष्ट एक्सप्लॉइट के लिए एप्लिकेशन को Tomcat पर WAR...

name_reverser

== Benvenuto in Rails Rails è un framework per applicazioni web che include tutto il necessario per creare applicazioni web basate su database secondo il pattern Model-View-Control. Questo pattern divide la view chiamata anche presentazione in template "stupidi" che sono principalmente responsabi...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

apache-struts-cve-2017-9805

Das Apache-Struts-Web-Framework Das Apache-Struts-Web-Framework ist eine kostenlose Open-Source-Lösung zur Erstellung von Java-Webanwendungen. Webanwendungen unterscheiden sich von herkömmlichen Websites dadurch, dass Webanwendungen eine dynamische Antwort erzeugen können. Viele Websites liefern...

EUVD-2026-67193

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49...

CVE-2026-59313

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE) . The issue affects Spring Framework versions 7.0.0–7.0.8 , 6.2.0–6.2.19 , 6.1.0–6.1.28 , 6.0.0–6.0.30 , and 5.3.0–5.3.49 . The underlying cause is a stream corruptio...

CVE-2026-59281

Spring Framework versions from 5.2.25.RELEASE through 7.0.8 are vulnerable to a reflected cross-site scripting (XSS) flaw in Spring MVC and WebFlux applications. The root cause involves data-binding Errors instances with HTML escaping enabled: when field errors are rendered using the no-argument ...

EUVD-2026-67170

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors.getFieldErrors or Errors.getFieldError accessors are vulnerable to arbitrary HTML/JavaScript code injection, potentially resulting in...

dawnscanner

Dawnscanner - Il crescente scanner di sicurezza per applicazioni web Ruby dawn è uno scanner di codice sorgente progettato per analizzare le tue applicazioni web alla ricerca di vulnerabilità di sicurezza. Lo strumento è in grado di scansionare applicazioni web scritte in Ruby e supporta tutti i...

PoC-CVE-2022-22965-Spring4Shell

PoC — CVE-2022-22965 Spring4Shell Haftungsausschluss: Dieses Repository ist ausschließlich für Bildungs- und Forschungszwecke gedacht. Alle Exploit-Skripte dürfen ausschließlich gegen Systeme verwendet werden, die dir gehören oder für die du eine ausdrückliche schriftliche Genehmigung zum Testen...

cve-2023-34035-mitigations

Este repositório é um conjunto de exemplos para demonstrar as configurações nas quais aplicações podem ser vulneráveis a https://spring.io/security/cve-2023-34035CVE-2023-34035. Uma aplicação é vulnerável quando todas as seguintes condições são verdadeiras: Spring MVC está no classpath...

CVE-2026-47890

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

CVE-2026-47887

A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

CVE-2026-47884

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

CVE-2026-47883

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

EUVD-2026-66858

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

CVE-2026-47890

Spring Framework versions 7.0.0–7.0.8 and 6.2.0–6.2.19 are affected by a stream corruption issue when Server-Sent Events (SSE) are used with view fragments in Spring MVC and WebFlux applications. The NVD-assigned CVSS 3.1 score is 9.8 (Critical) , while the vendor (Spring) classifies it as LOW se...

EUVD-2026-66855

A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

EUVD-2026-66852

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...