CVE-2022-0540-RCE

Atlassian Jira Seraph: RCE por bypass de autenticación CVE-2022-0540 Inglés • Chino Detalles del exploit Como se ve en el blog del autor, Atlassian proporcionó una larga lista de complementos afectados la gran mayoría de los cuales eran falsos positivos, y el autor enumeró varios complementos...

Pentaho Business Analytics / Pentaho Business Server 9.1 Remote Code Execution Vulnerability

Pentaho allows users to create and run Pentaho Report Bundles .prpt. Users can create PRPT reports by utilizing the Pentaho Designer application and can include BeanShell Script functions to ease the production of complex reports. However, the BeanShell Script functions can allow for the executio...

Hitachi Vantara Pentaho 代码问题漏洞

Hitachi Vantara Pentaho is a service from Hitachi, Japan, for storing and managing data in big data environments. A security vulnerability exists in Hitachi Vantara Pentaho Business Analytics 9.1 and prior versions, which stems from Pentaho allowing users to create and run Pentaho report packages...

SRC-2015-0003 : Oracle Endeca Tools and Frameworks AMF Request Beanshell Script Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Tools and Frameworks. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fla...