Atlassian Jira Seraph - Authentication Bypass

Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also...

Atlassian Confluence Download Attachments - Remote Code Execution

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...

Jira <8.4.0 - Information Disclosure

Jira before 8.4.0 is susceptible to information disclosure. The /rest/api/latest/groupuserpicker resource can allow an attacker to enumerate usernames, and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-8449 info: name: Jira 8.4...

Atlassian Questions For Confluence - Hardcoded Credentials

Atlassian Questions For Confluence contains a hardcoded credentials vulnerability. When installing versions 2.7.34, 2.7.35, and 3.0.2, a Confluence user account is created in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attack...

Atlassian Confluence < 5.8.6 - Server-Side Request Forgery

Confluence Server and Data Center before 5.8.6 contain a blind server-side request forgery caused by the WidgetConnector plugin, letting remote attackers manipulate internal network resources, exploit requires network access to the server. id: CVE-2021-26072 info: name: Atlassian Confluence 5.8.6...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the QueryComponentRendererValue!Default.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations, Affected versions are before...

Atlassian Confluence - Remote Code Execution

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjCustomDesignConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This...

Atlassian Confluence Data Center and Server - Remote Code Execution

Detects a Remote Code Execution vulnerability in Confluence Data Center and Server versions prior to X.X affected versions. This issue allows authenticated attackers to execute arbitrary code. id: CVE-2024-21683 info: name: Atlassian Confluence Data Center and Server - Remote Code Execution autho...

cve-2022-26134

Atlassian Confluence OGNL Injection POC Vulnerabilità CVE-2022-26134 esecuzione arbitraria di codice Uso: pip3 install termcolor python3 exploit.py http://example.com documentazione :...

BotCon

BotCon Esecuzione di codice remoto non autenticata su Atlassian Confluence tramite OGNL Injection CVE-2022-26134 Il 2 giugno 2022 Atlassian ha pubblicato un advisory di sicurezza per le loro applicazioni Confluence Server e Data Center, evidenziando una vulnerabilità critica di esecuzione di codi...

CVE-2022-26134

POC - Vulnerabilità di iniezione OGNL ed esecuzione remota di codice RCE in Atlassian Confluence CVE-2022-26134 Testato sulla versione di Confluence 7.13.6 Configurazione dell'ambiente Clonare il repository root@kitploit: docker-compose up -d Su http://localhost:8090 vedrai Confluence avviato e...

CVE-2023-22515-NSE

CVE-2023-22515-NSE Dieses Repository bietet ein Tool zur Überprüfung auf das Vorhandensein der Sicherheitslücke CVE-2023-22515 in Atlassian Confluence Server unter Verwendung der Nmap Scripting Engine NSE. Übersicht über CVE-2023-22515 CVE-2023-22515 ist eine kritische Sicherheitslücke in Atlassi...

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Vulnerabilità RCE Esecuzione di Codice Remoto nelle versioni datate di Confluence Data Center e Server Data di rilascio dell'avviso Tue, Jan 16 2024 01:00 EST Prodotti: Confluence Data Center Confluence Server Versioni Interessate: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x...

bitbucket-cve-2022-36804

bitbucket-cve-2022-36804 CVE-2022-36804 Atlassian Bitbucket Sicherheitslücke durch Befehlseinschleusung POC Folge uns YouTube Twitter Facebook...

CVE-2022-26133

CVE-2022-26133 Informazioni Descrizione SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 e successive precedenti la 7.6.14, 7.7.0 e successive precedenti la 7.17.6, 7.18.0 e successive precedenti la 7.18.4, 7.19.0 e successive precedenti la 7.19.4, e 7.20.0...

CVE-2023-22515

CVE-2023-22515 Exploit-Skript Betroffene Versionen root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Ausnutzung der Schwachstelle root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx....

analyze-Exploit-CVE-2023-22518-Confluence

Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518 : Questa vulnerabilità è descritta come “vulnerabilità di autorizzazione impropria nel database e nel server di Confluence”. Il difetto riguarda le versioni On-premises dei prodotti Atlassian. SETUP Configurare l'ambiente...

CVE-2022-26133

CVE-2022-26133 Descrizione Vulnerabilità di deserializzazione di Atlassian Bitbucket Data Center CVE-2022-26133 – verifica e sfruttamento di massa Verifica della vulnerabilità Batch root@kitploit: python3 CVE-2022-26133.py -u http://192.168.110.136:7990 -f target.txt Sfruttamento della...

Atlassian_CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Il 30 maggio 2022, un'organizzazione chiamata Volexity ha identificato una vulnerabilità di RCE non autenticata con punteggio 9.8 su NIST nelle edizioni Confluence Server e Data Center di Atlassian...