Apache Struts setup in Debug-Mode Detection

Apache Struts debug mode is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts debug mode is enabled.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts setup in Debug-Mode Detection',...

Apache Struts - OGNL Console Detection

This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution !/usr/bin/env python3 -- coding: utf-8 -- """This development console allows the evaluation of OGNL expressions that could lead to Remote Command Execution.""" from kittysploit import fr...

Apache Struts Dev Mode - Detect

Multiple Apache Struts applications were detected in dev-mode. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple Apache Struts applications were detected in dev-mode.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

Apache S2-032 Struts - Remote Code Execution Detection

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when dynamic method invocation is enabled, allows remote attackers to execute arbitrary code via method: prefix related to chained expressions. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts 2.""" import re fr...

Apache Struts - ShowCase Application Exposure Detection

Apache Structs ShowCase Application is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Structs ShowCase Application is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Struts - ShowCase...

Apache Struts - Multiple Open Redirection Vulnerabilities Detection

Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly ."...

Apache Struts2 S2-053 - Remote Code Execution Detection

Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1 uses an unintentional expression in a Freemarker tag instead of string literals, which makes it susceptible to remote code execution attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts 2.""" import re from kittysploit...

Apache Struts 2 - Remote Command Execution Detection

Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...

Apache Struts 2.0.0-2.5.25 - Remote Code Execution Detection

Apache Struts 2.0.0 through Struts 2.5.25 is susceptible to remote code execution because forced OGNL evaluation, when evaluated on raw user input in tag attributes, may allow it. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts 2.""" import re from kittysploit import from...

VulnCheck KEV: CVE-2016-3081

Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled...

VulnCheck KEV: CVE-2025-68493

Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue...

Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution

In Struts 2 before 2.3.15.1 the information following "action:", "redirect:", or "redirectAction:" is not properly sanitized and will be evaluated as an OGNL expression against the value stack. This introduces the possibility to inject server side code. id: CVE-2013-2251 info: name: Apache Struts...

Exploit-Development

Exploit Development What does this repository Contain? This...

com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

org.springframework:spring-webmvc-portlet (2.5.3), org.springframework:spring-webmvc-struts (2.5.3) potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.5.3)

org.springframework:spring-webmvc MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-webmvc-portlet 2.5.3 - org.springframework:spring-webmvc-struts...

com.payneteasy.superfly:superfly-web (>=1.1-1, <=1.1-2), org.grails:grails-webflow (>=2.2.0.rc2, <=2.2.4) +9 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.5.6.sec01)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.1-1, =2.2.0.rc2, =2.0.2, =1.0.0.release,...

org.springframework:spring-webmvc-portlet (2.5.3), org.springframework:spring-webmvc-struts (2.5.3) potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.5.3)

org.springframework:spring-webmvc MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-webmvc-portlet 2.5.3 - org.springframework:spring-webmvc-struts...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...

com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...