Jira Netic Group Export <1.0.3 - Missing Authorization

Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexportdownload=true request to a...

Jira <8.4.0 - Information Disclosure

Jira before 8.4.0 is susceptible to information disclosure. The /rest/api/latest/groupuserpicker resource can allow an attacker to enumerate usernames, and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-8449 info: name: Jira 8.4...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjCustomDesignConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This...

Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery

The Atlassian Jira IconUriServlet of the OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 contains a cross-site scripting vulnerability which allows remote attackers to access the content of internal network resources and/or perform an attack via...

Atlassian Confluence Data Center and Server - Remote Code Execution

Detects a Remote Code Execution vulnerability in Confluence Data Center and Server versions prior to X.X affected versions. This issue allows authenticated attackers to execute arbitrary code. id: CVE-2024-21683 info: name: Atlassian Confluence Data Center and Server - Remote Code Execution autho...

Atlassian Confluence < 5.8.6 - Server-Side Request Forgery

Confluence Server and Data Center before 5.8.6 contain a blind server-side request forgery caused by the WidgetConnector plugin, letting remote attackers manipulate internal network resources, exploit requires network access to the server. id: CVE-2021-26072 info: name: Atlassian Confluence 5.8.6...

Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. id: CVE-2020-29453 info: name: Jira Server Pre-Auth - Arbitrary File...

Atlassian Confluence - Privilege Escalation

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence. id: CVE-2023-22515 info: name: Atlassian Confluence - Privilege Escalation author:...

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Confluence Data Center 和 Server 过时版本中的 RCE（远程代码执行）漏洞 公告发布日期 2024年1月16日 周二 01:00 EST 产品： Confluence Data Center Confluence Server 受影响版本： 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3 7.19.x LTS 版本不受此漏洞影响 参考链接：...

CVE-2022-26138

CVE-2022-26138 POC 설명 root@kitploit: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of...

through_the_wire

Through the Wire Through the Wire は、CVE-2022-26134 の Proof of Concept エクスプロイトです。この脆弱性は、Atlassian Confluence Server および Data Center のバージョン = 7.13.6 LTS と = 7.18.0 "Latest" に影響する OGNL インジェクションの脆弱性です。これは元々、実環境で悪用されたゼロデイでした。 ベンダー勧告 Volexity の「in-the-wild」に関する分析記事 Rapid7 の分析記事 Through the Wire...

CVE-2023-22515

1vere$k CVE-2023-22515 iveresk-CVE-2023-22515 2023年10月4日、AtlassianはCVE-2023-22515に関するアドバイザリを公開しました。これは、Confluence ServerおよびConfluence Data Centerのオンプレミス環境に影響を与える重大な脆弱性です。 Atlassianは当初、この脆弱性を権限昇格（Privilege Escalation）として説明していましたが、その後、アクセス制御の不備（Broken Access Control）として再分類しました。 こちらがそのソース記事です。...

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd 및 Crowd Data Center RCE 사용법: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 취약 버전 다운로드 https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Atlassian Crowd 버전 2.11.0 빌드:725 - 2017-01-11 제공...

CVE-2023-22515

CVE-2023-22515 익스플로잇 스크립트 영향을 받는 버전 root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 취약점 악용 root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2019-3403

CVE-2019-3403 CVE-2019-3403을 이용하여 JIRA 애플리케이션에서 모든 사용자를 손쉽게 긁어오고 싶어서 이 스크립트를 만들었습니다. 가장 깔끔한 코드는 아니며, 1000명이 넘는 사용자를 반환하는 요청은 처리하지 않습니다처음 1000명으로 잘립니다. 하지만 취약한 JIRA 서버에서 모든 사용자를 빠르게 긁어올 수 있습니다. 사용법 root@kitploit: usage: scrapejira.py -h -d DOMAIN -q QUERY -o OUT -v 취약한 JIRA 인스턴스에서 사용자 정보 긁어오기...

CVE-2023-22524

Atlassian Companion RCE 취약점 개념 증명 CVE-2023-22524 개요 이 저장소는 macOS용 Atlassian Companion에서 최근 발견된 원격 코드 실행 취약점CVE-2023-22524에 대한 개념 증명PoC을 포함하고 있습니다. 이 심각한 문제는 공격자가 앱의 차단 목록과 macOS Gatekeeper를 우회하여 유해한 코드를 실행할 가능성을 제공합니다. 세부 사항 이 취약점은 애플리케이션이 특정 파일 유형을 처리하는 방식과 macOS 보안 기능과의 상호작용에서 발생한 실수에서 비롯됩니다...

CVE-2022-26134

CVE-2022-26134 1. 最初にshodanスクリプトを実行してすべてのIPを取得します python3 shodanscript.py -API yourapi -L limit -D "http.favicon.hash:-305179312 200" log.txt ex: python3 shodanscript.py -API xxxxxxx -L 10 -D "http.favicon.hash:-305179312 200" log.txt 2. すべての有効なIPに対して : cat log.txt | httpx -o forexploits.txt 3...

cve-2022-26134

CVE-2022-26134 by 1vere$k Atlassian Jira エクスプロイトのためのシンプルな PoC です。認証されていないユーザーに対してサーバー上でコード実行を提供します。 CVE-2022-26134 - OGNL インジェクション脆弱性。 Atlassian Confluence 7.18 以前の製品に影響を与えるリモートコード実行脆弱性を悪用する概念実証スクリプト。OGNL インジェクションの脆弱性により、認証されていないユーザーが Confluence Server または Data Center インスタンス上で任意のコードを実行できます。 Paylo...

bitbucket-cve-2022-36804

bitbucket-cve-2022-36804 CVE-2022-36804 Atlassian Bitbucket コマンドインジェクションの脆弱性 POC フォローする YouTube Twitter Facebook...

CVE-2017-9506

개념 증명 SSRF & XSS root@kitploit: https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet은 버전 1.3.0부터 1.9.12 이전까지, 그리고 버전 2.0.0부터 2.0.4 이전까지의 버전에서 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스에 접근하거나 XSS 공격을 수행할 수...