Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

CVE-2021-34427

CVE-2021-34427 Windows POC for CVE-2021-34427 affecting Birt Viewer Tested on Birt 4.8.0 Built with Claude Based on research here: https://bugs.eclipse.org/bugs/showbug.cgi?id=538142&ref=labs.watchtowr.com & https://sploitus.com/exploit?id=PACKETSTORM:170326...

Eclipse BIRT Panel - Detect

Eclipse BIRT Business Intelligence Reporting Tool detected !/usr/bin/env python3 -- coding: utf-8 -- """Eclipse BIRT Business Intelligence Reporting Tool detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Exploit for Unrestricted Upload of File with Dangerous Type in Eclipse Business_Intelligence_And_Reporting_Tools

CVE-2021-34427 Windows POC for CVE-2021-34427 affec...

c2birtengine

BIRT File Upload RCE – C2 over HTTPS This repository provides...

VulnCheck KEV: CVE-2021-34427

In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote current BIRT viewer dir to inject JSP code into the running instance...

ch.reportingsoft.birt:birt-runtime-bundle (>=4.19.0, <=4.20.0), cloud.wondrify:coffee-asset-pipeline (>=5.0.10, <=5.2.0-m1) +165 more potentially affected by CVE-2025-66453 via org.mozilla:rhino (1.8.0)

org.mozilla:rhino MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mozilla:rhino and may be impacted: - ch.reportingsoft.birt:birt-runtime-bundle =4.19.0, =5.0.10, =5.0.10, =5.0.10, =10.2.1, =8.0.0, =8.0.0, =5.0.6, =5.0.6, =5.0.6...

EUVD-2017-7141

Malware in sbrugna...

EUVD-2017-8834

Malware in sbrugna...

EUVD-2013-3947

Malware in sbrugna...

EUVD-2013-2913

Malware in sbrugna...

EUVD-2015-5088

Malware in sbrugna...

EUVD-2019-3444

Malware in sbrugna...

EUVD-2021-21085

Malware in sbrugna...

EUVD-2020-2520

Malware in sbrugna...

EUVD-2009-4487

Malware in sbrugna...

EUVD-2023-0864

Malicious code in bioql PyPI...

EUVD-2022-30041

Malicious code in bioql PyPI...

CVE-2022-25370

Apache OFBiz uses the Birt plugin https://eclipse.github.io/birt-website/ to create data visualizations and reports. In Apache OFBiz release 18.12.05, and earlier versions, by leveraging a vulnerability in Birt https://bugs.eclipse.org/bugs/showbug.cgi?id=538142, an unauthenticated malicious user...

CVE-2022-25371

Apache OFBiz uses the Birt project plugin https://eclipse.github.io/birt-website/ to create data visualizations and reports. By leveraging a bug in Birt https://bugs.eclipse.org/bugs/showbug.cgi?id=538142 it is possible to perform a remote code execution RCE attack in Apache OFBiz, release 18.12....