CVE-2021-26084

CVE-2021-26084 إثبات المفهوم لـ CVE-2021-26084. حقن OGNL في Confluence Server Webwork RCE بدون مصادقة إخلاء مسؤولية هذا للأغراض التعليمية فقط. لست مسؤولاً عن أفعالك. استخدمه على مسؤوليتك الخاصة. قيود الأوامر بسبب الحمولة، لا يمكن تمرير بعض الأحرف. القائمة أدناه هي ما وجدته أثناء اختباري. علامات...

CVE-2021-26084_Confluence

CVE-2021-26084 - OGNL инъекция в Confluence Server Webwork Существует уязвимость OGNL инъекции, которая позволит аутентифицированному, а в некоторых случаях и неаутентифицированному пользователю выполнить произвольный код на экземпляре Confluence Server или Data Center. ВАЖНО Этот эксплойт...

CVE-2021-26084_PoC

CVE-2021-26084 PoC | Injection OGNL dans Webwork de Confluence Server Une vulnérabilité d'injection OGNL existe qui permettrait à un utilisateur authentifié, et dans certains cas à un utilisateur non authentifié, d'exécuter du code arbitraire sur une instance Confluence Server ou Data Center. Mon...

CVE-2021-26084

Confluence Server Webwork Injection OGNL pré-authentification CVE-2021-26084 Confluence est un wiki d'entreprise basé sur le web développé par la société australienne Atlassian. Une vulnérabilité d'injection OGNL existe, permettant à un attaquant non authentifié d'exécuter du code arbitraire sur...

CVE-2021-26084

CVE-2021-26084 Introduction Ce write-up donne un aperçu de CVE-2021-26084 - injection OGNL Webwork dans Confluence Server 1 qui permettrait à un utilisateur authentifié d'exécuter du code arbitraire sur une instance Confluence Server ou Data Center. En bref Confluence Server / Data Center utilise...

CVE-2021-26084

CVE-2021-26084 حقن OGNL في Confluence CVE-2021-26084 هي ثغرة حقن في لغة التنقل في الرسم البياني للكائنات Object-Graph Navigation Language - OGNL في تطبيق Webwork الخاص بـ Atlassian Confluence. يمكن لمهاجم بعيد غير مصادق عليه استغلال هذا الخلل عن طريق إرسال طلب مُصمم خصيصًا إلى نقاط النهاية المعرض...

EUVD-2008-6498

Malware in sbrugna...

EUVD-2006-0453

Malware in sbrugna...

EUVD-2006-6612

Malware in sbrugna...

EUVD-2006-2836

Malware in sbrugna...

EUVD-2025-27136

Malicious code in bioql PyPI...

CVE-2025-40642

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642 Reflected Cross-Site Scripting (XSS) in WebWork

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642 Reflected Cross-Site Scripting (XSS) in WebWork

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642

CVE-2025-40642 is a reflected Cross-Site Scripting (XSS) vulnerability in WebWork exploited via the q and engine parameters in /search. Affected software is WebWork; the vulnerability stems from improper handling of user-supplied input in the search query, enabling remote code execution in the co...

PT-2025-36458

Name of the Vulnerable Software and Affected Versions: WebWork affected versions not specified Description: A Reflected Cross-Site Scripting XSS issue exists in WebWork, potentially enabling remote attackers to execute arbitrary code. The vulnerability is triggered through the q and engine reques...

Codester WebWork - PHP Search Engine Script 跨站脚本漏洞

Codester WebWork - PHP Search Engine Script is an open source search engine script from Codester. A cross-site scripting vulnerability exists in Codester WebWork - PHP Search Engine Script, which stems from the fact that incorrect manipulation of the parameters q and engine can lead to reflective...

Atlassian Jira Service Management 4.14.0 < 4.20.6 Seraph Authentication Bypass

According to its self-reported version number, the Atlassian Jira Service Management application running on the remote host is version 4.14.0 prior to 4.20.6 or 4.21.0 prior to 4.22.6. It is, therefore, affected by a authentication bypass vulnerability in Jira Seraph which may allow remote,...

Atlassian Jira Service Management 4.21.0 < 4.22.6 Seraph Authentication Bypass

According to its self-reported version number, the Atlassian Jira Service Management application running on the remote host is version 4.14.0 prior to 4.20.6 or 4.21.0 prior to 4.22.6. It is, therefore, affected by a authentication bypass vulnerability in Jira Seraph which may allow remote,...