AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...

CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82101

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a path traversal vulnerability (CWE-22 ). This flaw could allow a remote authenticated attacker to cause a denial of service (DoS). To remediate this issue, IBM strongly recommends upgrading to DataStage on Cloud Pak for Data 5....

CVE-2026-82101 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82103

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to an information disclosure vulnerability (CVE-2026-82103 ). A remote authenticated attacker could obtain sensitive information due to the exposure of data to an unauthorized actor. This issue is classified under CWE-200 and has a...

CVE-2026-82103 DataStage on Cloud Pak for Data Information Disclosure

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor...

CVE-2026-82110

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a path traversal flaw due to improper validation of pathname. This vulnerability could allow a remote authenticated attacker to execute arbitrary code . The impact is categorized as CRITICAL with high integrity and availability impacts....

CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal...

CVE-2026-82096

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a command injection flaw (CWE-78) caused by the improper neutralization of special elements used in an OS command. This vulnerability could allow a remote authenticated attacker to execute arbitrary commands on the system. The CVSS 3.1 ...

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82108

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a code injection vulnerability (CWE-94). A remote authenticated attacker can execute arbitrary code because the software fails to properly neutralize special elements used in OS commands . This vulnerability carries a High base severity...

CVE-2026-82108 DataStage on Cloud Pak for Data Code Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-84418

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a man-in-the-middle attack due to improper certificate validation (CWE-295). An attacker can present a forged TLS certificate to intercept the connection and capture the IAM bearer Authorization header automatically attached by the sess...

CVE-2026-84418 DataStage on Cloud Pak for Data Improper Certificate Validation

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

CVE-2022-22963

CVE-2022-22963 In versions 3.1.6, 3.2.2, and earlier versions of Spring Cloud Function, when using the routing functionality, it is possible for a user to provide a specially crafted SpEL as a routing expression that can result in remote code execution and access to local resources. PoC Clone the...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

SpringExploitGUI

SpringExploitGUIv1.0 0x01 Preface Today, I reproduced several previous Spring vulnerabilities and weaponized them. The tool currently supports detection and exploitation of Spring Cloud Gateway RCE CVE-2022-22947, Spring Cloud Function SpEL RCE CVE-2022-22963, and Spring Framework RCE...