Lucene search
K

2549 matches found

Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.2 views

PT-2025-47032

CVE-2025-12703 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-12703 Published : Nov. 12, 2025, 11:15 p.m. | 3 hours, 44 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link fo...

6.4AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.3 views

PT-2025-48488

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 6.7.0 Apache Struts versions 7.0.0 through 7.0.3 Description A denial of service issue exists in Apache Struts due to incomplete cleanup of temporary or auxiliary resources during the processing of multipar...

7.8CVSS7.3AI score0.01431EPSS
Exploits0References26
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45571

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 through 5.5.2-156 Description An authenticated regular user can create a photo collection with a collection name containing HTML/JavaScript payloads. This makes the Manage Photos feature susceptible to Stored Cross-Si...

9CVSS5.6AI score0.00396EPSS
Exploits1References7
GithubExploit
GithubExploit
added 2025/10/29 12:38 p.m.187 views

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Web Vulnerability to POC Generator Web Vulnerability to POC G...

10CVSS7.5AI score0.99999EPSS
Exploits44
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.1 views

PT-2025-43744

CVE-2025-62830 - Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-62830 Published : Oct. 24, 2025, 3:15 a.m. | 4 hours, 2 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

6.3AI score
Exploits0References1
CNVD
CNVD
added 2025/10/17 12:0 a.m.6 views

ZTE ZXCDN Struts Remote Code Execution Vulnerability

ZTE ZXCDN is a unified network management platform from China's ZTE Corporation ZTE. ZTE ZXCDN suffers from a Struts remote code execution vulnerability, which can be exploited by an attacker to remotely execute commands with non-root privileges...

9.8CVSS6.5AI score0.00731EPSS
Exploits0
GithubExploit
GithubExploit
added 2025/10/15 4:2 p.m.111 views

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts

PoC exploit for CVE-2024-53677, a vulnerability in Apache Struts...

9.8CVSS8.1AI score0.78198EPSS
Exploits15
RedhatCVE
RedhatCVE
added 2025/10/15 1:45 p.m.7 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.5AI score0.00731EPSS
Exploits0References1
NVD
NVD
added 2025/10/14 9:15 a.m.3 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00731EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 8:54 a.m.6 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00731EPSS
Exploits0References1
CVE
CVE
added 2025/10/14 8:54 a.m.12 views

CVE-2025-46581

CVE-2025-46581 affects ZTE ZXCDN, with an Apache Struts remote code execution vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges. Several connected sources corroborate a Struts-based RCE affecting ZXCDN, but none provide concrete product version(s) o...

9.8CVSS8.2AI score0.00731EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 8:54 a.m.5 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.2AI score0.00731EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.3 views

ZTE ZXCDN 安全漏洞

ZTE ZXCDN is a unified network management platform from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCDN, which originates from an Apache Struts remote code execution vulnerability that could lead to remote command execution with non-root privileges...

9.8CVSS8AI score0.00731EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.3 views

PT-2025-41861

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN product affected versions not specified Description The ZTE ZXCDN product is susceptible to a remote code execution RCE issue stemming from a flaw in the Struts framework. An attacker who does not need to be authenticated can execute...

9.8CVSS7.7AI score0.00731EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2025/10/13 12:0 a.m.18 views

VulnCheck KEV: CVE-2013-2134

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135...

9.3CVSS7.6AI score0.70211EPSS
In wildExploits1References184
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.1 views

PT-2025-41533

CVE-2025-6046 - CVE-2019-25033: Apache Struts Unauthenticated Remote Code Execution Vulnerability CVE ID : CVE-2025-6046 Published : Oct. 7, 2025, 11:15 p.m. | 3 hours, 24 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severit...

9.8CVSS6.4AI score0.01783EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.1 views

PT-2025-41498

CVE-2025-10904 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-10904 Published : Oct. 7, 2025, 11:15 p.m. | 3 hours, 24 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

6.4AI score
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-6090

Malware in sbrugna...

9.6CVSS9.3AI score0.01873EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-0486

Malware in sbrugna...

7.5CVSS7.6AI score0.09224EPSS
Exploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-0714

Malware in sbrugna...

6.2CVSS6.5AI score0.04889EPSS
Exploits2References10
Rows per page
Query Builder