Lucene search
+L

8223 matches found

Kitploit
Kitploit
added 2026/09/22 4:45 p.m.12 views

CVE-2021-21234

CVE-2021-21234 Vulnerabilidad de directory traversal en la librería spring-boot-actuator-logview https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

7.7CVSS7.6AI score0.21011EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/22 4:42 p.m.10 views

CVE-2022-22965

Spring Framework Vulnerabilities - CVE-2022-22965 List of vulnerable / non-vulnerable software https://github.com/NCSC-NL/spring4shell/blob/main/software/README.md Finding vulnerable code Prerequisites for being vulnerable to CVE-2022-22965: 1 Use of Spring Framework See PowerShell and bash scrip...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits105References2
Kitploit
Kitploit
added 2026/09/22 4:34 p.m.13 views

SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE

This project provides support for using Spring Security with OAuth 1a and OAuth2. It provides features for implementing both consumers and providers of these protocols using standard Spring and Spring Security programming models and configuration idioms. Code of Conduct This project adheres to th...

9.8CVSS8.2AI score0.08822EPSS
SaveExploits2References7
Kitploit
Kitploit
added 2026/09/22 4:30 p.m.10 views

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL Injection Batch Scan POC Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Description Original tool URL The original tool h...

9.8CVSS7AI score0.35825EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/22 4:24 p.m.14 views

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

9.8CVSS8.2AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/22 4:20 p.m.12 views

CVE-2022-22947-Rce_POC

CVE-2022-22947-RcePOC Batch URL detection of Spring Cloud Gateway CVE-2022-22947 Usage py Spring-Cloud-Gateway.py UrlsPath After execution, a gateway.log file is generated, where '+', '-', '' indicate 'vulnerable', 'not vulnerable', and 'request error' respectively...

10CVSS8.1AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/22 4:17 p.m.11 views

CVE-2022-25845-In-Spring

CVE-2022-25845-In-Spring Main Dependencies 1. jackson 2. commons-io Quick Reproduction 1. Import project into IntelliJ IDEA, build mvn install 2. Build and run Dockerfile docker build . 3. Run src/test/java/POC.java to execute the touch /tmp/pwned command Exploitation Guide Step1: Add...

9.8CVSS8.5AI score0.18743EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/22 4:16 p.m.8 views

Spring4Shell-CVE-2022-22965.py

Spring4Shell-CVE-2022-22965.py Script to check for Spring4Shell vulnerability Tested on https://github.com/lunasec-io/Spring4Shell-POC/blob/master/Dockerfile...

9.8CVSS7.9AI score0.99638EPSS
SaveExploits105References1
Kitploit
Kitploit
added 2026/09/22 4:14 p.m.15 views

Spring-CVE

Spring CVE This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell". CVE-2022-22963 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing...

9.8CVSS8.3AI score0.99938EPSS
SaveExploits137
Kitploit
Kitploit
added 2026/09/22 4:04 p.m.9 views

mi-laboratorio-log4shell

🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An automated, single-command security research laboratory designed to demonstrate and audit the Log4Shell CVE-2021-44228 Remote Code Execution RCE vulnerability. This project consolidates all necessary components vulnerable application, malicio...

10CVSS8AI score0.99999EPSS
SaveExploits375
Kitploit
Kitploit
added 2026/09/22 4:04 p.m.12 views

spring-break-cve-2017-8046

CVE-2017-8046 Spring Break Este es un programa en Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Descargo de responsabilidad Esta herramienta está destinada a ingenieros de seguridad y personal de seguridad de aplicaciones para evaluaciones de seguridad. Úsela de manera responsabl...

9.8CVSS8.2AI score0.53936EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/22 3:40 p.m.10 views

spring-cloud-gateway-rce

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution CVE-2022-22947 1. Installation root@kitploit: pip3 install -r requirements.txt 2. Usage root@kitploit: $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ \ / / /\ || | | |...

10CVSS8.3AI score0.98253EPSS
SaveExploits54
OSV
OSV
added 2026/09/22 3:30 p.m.2 views

ROOT-APP-MAVEN-AIKIDO-2024-10351 AIKIDO-2024-10351 in org.springframework:spring-webmvc - Patched by Root

Root has patched AIKIDO-2024-10351 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

SaveExploits0
OSV
OSV
added 2026/09/22 3:30 p.m.33 views

ROOT-APP-MAVEN-CVE-2024-38816 CVE-2024-38816 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38816 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

7.5CVSS6.9AI score0.14718EPSS
SaveExploits1
OSV
OSV
added 2026/09/22 3:30 p.m.29 views

ROOT-APP-MAVEN-CVE-2026-41845 CVE-2026-41845 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41845 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

7.1CVSS6.4AI score0.00161EPSS
SaveExploits0
OSV
OSV
added 2026/09/22 3:30 p.m.16 views

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

7.5CVSS6.7AI score0.00399EPSS
SaveExploits0
OSV
OSV
added 2026/09/22 3:30 p.m.24 views

ROOT-APP-MAVEN-CVE-2024-38819 CVE-2024-38819 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38819 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

7.5CVSS6.2AI score0.54862EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/22 3:17 p.m.8 views

CVE-2022-22947_Rce_Exp

CVE-2022-22947RceExp Spring Cloud Gateway Remote Code Execution Vulnerability Exp SpringCloudGatewayRCEExp-CVE-2022-22947...

10CVSS8.2AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/22 3:12 p.m.12 views

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

9.8CVSS8.4AI score0.02643EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 3:10 p.m.11 views

CVE-2022-22947

CVE-2022-22947 Run: CVE-2022-22947.exe ip command Affected versions: Spring Cloud Gateway 3.1.1 Spring Cloud Gateway 3.0.7 Spring Cloud Gateway other no longer updated versions...

10CVSS8.2AI score0.98253EPSS
SaveExploits54
Rows per page
Query Builder