Lucene search
+L

2738 matches found

Lenovo
Lenovo
•added 2022/04/12 5:36 p.m.•12 views

Spring Framework Vulnerability - Lenovo Support US

No description provided...

9.8CVSS7.5AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/12 2:59 p.m.•15 views

Exploit for Code Injection in Vmware Spring_Framework

spring4shell ⭐ a python implementation of CVE-2022-22965 that...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/12 2:59 p.m.•15 views

Exploit for Code Injection in Vmware Spring_Framework

spring4shell ⭐ a python implementation of CVE-2022-22965 that...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits106
hivepro
hivepro
•added 2022/04/12 2:21 a.m.•381 views

RCE Spring Framework Zero-Day vulnerability “Spring4Shell”

THREAT LEVEL: Red For a detailed advisory, download the pdf file here A zero-day vulnerability has been discovered in the Spring framework, a Java framework that provides infrastructure support for web application development. This vulnerability came to light after a Chinese researcher made a...

7.5CVSS7.8AI score0.99638EPSS
SaveExploits106
IBM Security Bulletins
IBM Security Bulletins
•added 2022/04/11 3:17 p.m.•107 views

Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Data Risk Manager IDRM is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Sprin...

10CVSS7.8AI score0.99638EPSS
SaveExploits204Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/04/11 3:15 p.m.•68 views

Security Bulletin: IBM Maximo For Civil infrastructure is vulnerable to a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Maximo For Civil infrastructure is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast t...

9.8CVSS8.3AI score0.99638EPSS
SaveExploits106Affected Software1
RedHat Linux
RedHat Linux
•added 2022/04/11 2:07 p.m.•15 views

spring-framework: RCE via Data Binding on JDK 9+

A flaw was found in Spring Framework, specifically within two modules called Spring MVC and Spring WebFlux, transitively affected from Spring Beans, using parameter data binding. This flaw allows an attacker to pass specially-constructed malicious requests to certain parameters and possibly gain...

9.8CVSS7.3AI score0.99638EPSS
SaveExploits106References10
GithubExploit
GithubExploit
•added 2022/04/11 12:37 p.m.•69 views

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell !IMAGEImages/2022041117093...

9.8CVSS7.7AI score0.99638EPSS
SaveExploits106
IBM Security Bulletins
IBM Security Bulletins
•added 2022/04/08 12:24 p.m.•34 views

Security Bulletin: A vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2020-5421).

Summary A vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager CVE-2020-5421. Vulnerability Details CVEID:CVE-2020-5421 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote attacker to bypass security restrictions, caused by improper input...

8.7CVSS7AI score0.10736EPSS
SaveExploits1Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2022/04/08 12:00 a.m.•98 views

CVE-2022-22965: Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware

We discovered active exploitation of a vulnerability in the Spring Framework designated as CVE-2022-22965 that allows malicious actors to download the Mirai botnet malware...

7.5CVSS7.5AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/07 3:26 p.m.•31 views

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 PoC - Payara Arbitrary File Download Minimal e...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/07 9:13 a.m.•130 views

Exploit for Code Injection in Vmware Spring_Framework

Spring4ShellPoC Spring4Shell PoC CVE-2022-22965 Just playin...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/07 3:50 a.m.•50 views

Exploit for Code Injection in Vmware Spring_Framework

Spring4shellbehinder What is it? A batch exploitation too...

9.8CVSS7.7AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/07 2:30 a.m.•12 views

Exploit for Code Injection in Vmware Spring_Framework

!84ca2d3b85bd7cc7d1595b776...

9.8CVSS7.5AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/07 12:08 a.m.•259 views

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 Spring Framework RCE CVE-2022-22965 Nmap NSE...

9.8CVSS8.2AI score0.99638EPSS
SaveExploits106
GithubExploit
GithubExploit
•added 2022/04/06 2:17 a.m.•156 views

Exploit for Code Injection in Vmware Spring_Framework

irule-cve-2022-22965 This is a basic iRule to provide some mi...

9.8CVSS8.1AI score0.99638EPSS
SaveExploits106
OpenVAS
OpenVAS
•added 2022/04/06 12:00 a.m.•47 views

VMware Spring Framework < 5.2.20, 5.3.x < 5.3.17 DoS Vulnerability - Windows

The VMware Spring Framework is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS6.7AI score0.36081EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/04/06 12:00 a.m.•71 views

VMware Spring Framework < 5.2.20, 5.3.x < 5.3.17 DoS Vulnerability - Linux

The VMware Spring Framework is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS6.7AI score0.36081EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2022/04/06 12:00 a.m.•15 views

HPESBNW04271 rev.2 - HPE Aruba Networking Products, Multiple CVEs involving Spring Cloud and Spring Framework

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager none - no impact CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-22947 |...

10CVSS7.4AI score0.99938EPSS
SaveExploits188
Tenable Nessus
Tenable Nessus
•added 2022/04/06 12:00 a.m.•332 views

Spring Framework Spring4Shell (CVE-2022-22965)

Binary data spring4shell.nbin...

9.8CVSS7.5AI score0.99638EPSS
SaveExploits106References3
Rows per page
Query Builder