236 matches found
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084, vulnerabilidad de inyección OGNL en Atlassian Confluence Atlassian Confluence es un sistema wiki ampliamente utilizado en empresas. En algunas de sus versiones existe una vulnerabilidad de inyección de expresiones OGNL. Un atacante puede explotar esta vulnerabilidad...
patch-CVE-2026-10520
补丁：CVE-2026-10520 漏洞详情 CVE ：CVE-2026-10520 产品 ：Apache Struts 描述 ：OGNL 注入 严重性 ：严重 补丁状态：审核中 字段| 值 ---|--- 补丁日期| 2026-04-15 状态| 审核中 部署位置| 生产环境 验证方| SecOps 团队 参考资料 NVD CISA KEV...
CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day
CVE-2025-54253: Adobe AEM-Formsのゼロデイの内部 — ペネトレーションテスターと防御担当者がすべきこと TL;DR: JEE上のAdobe Experience Manager AEM Forms（≤ 6.5.23.0）には、誤用されたStruts/OGNLエンドポイントを介して認証なしのリモートコード実行を可能にする深刻なネットワークアクセス可能な脆弱性（CVE-2025-54253）が存在しました。関連するXXE（CVE-2025-54254）は任意のファイル読み取りを可能にします。これらは影響の大きいエンタープライズ問題です —...
CVE-Confluence
Atlassian Confluence CVE Vulnerability Reproduction Sandbox...
Confluence Server - Remote Code Execution
Confluence Server and Data Center contain an OGNL injection vulnerability that could allow an authenticated user, and in some instances an unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version...
PT-2026-45412
🔒 CyberSecurity CVE-2026-37890: Atlassian Confluence OGNL Injection — Detection and Emergency P… "Critical OGNL injection flaw CVE-2026-37890 in Atlassian Confluence…" 🔗 https://t.co/RLZcRST2d3 CyberSecurity ThreatIntel penetrationtesting redteam offensivesecurity...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 — OGNL Injection in Atlassian Confluence Te...
CVE-2018-25159
Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...
CVE-2018-25159 Epross AVCON6 OGNL Remote Code Execution via login.action
Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...
CVE-2018-25159
Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...
CVE-2018-25159 Epross AVCON6 OGNL Remote Code Execution via login.action
Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE Docker Lab A collection of Docker-based reproduction envi...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
╔═══════════════════════════════════════════════════════════...
EUVD-2021-25550
Malware in sbrugna...
Exploit for CVE-2025-54253
!Explo...
Exploit for CVE-2025-54253
🔥 CVE-2025-54253 — Critical RCE Vulnerability in Adobe AEM For...
CVE-2024-51771 Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating...
CVE-2024-51771 Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating...