ConfluentPwn

ConfluentPwn Confluence pre-auth ONGL injection remote code execution scanner CVE-2022-26134. Usage The below GIF shows a demo usage of the tool: Here is the help output of the tool: $ ./cfscan -h +-------------------------------+ | C O N F L U E N T P W N | +-------------------------------+ +...

CVE-2021-26084

CVE-2021-26084 Proof of concept for CVE-2021-26084. Confluence Server Webwork OGNL injection Pre-Auth RCE Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. Command Limiations Due to the payload, it is not possible to pass some...

CVE-2023-22527

CVE-2023-22527 This repository presents a proof-of-concept of CVE-2023-22527 CVE-2023-22527 | RCE using SSTI in Confluence Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on confluence instances they don't own. This tool has been developed for...

cve-2021-26084-confluence

cve-2021-26084-confluence Just run command without brain...

CVE-2022-26138

CVE-2022-26138 1.Introduction Confluence Hardcoded Password POC 2.Usage poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3.Disclaimer This tool is only for learning, research, and self-checking. It should not be used for illegal purposes. Please comply with relevant laws and regulations. Any...

CVE-2022-26134-Confluence-RCE

Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection Another exploit in OGNL Land Description Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluen...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

Atlassian Jira Confluence - Cross-Site Scripting

Atlassian Jira Confluence before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4, and from version 7.9.0 before version 7.9.2, allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the error messa...

Atlassian Confluence <5.8.17 - Information Disclosure

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. id: CVE-2015-8399 info: name: Atlassian...

Atlassian Confluence Server - Path Traversal

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...

Atlassian Confluence < 5.8.6 - Server-Side Request Forgery

Confluence Server and Data Center before 5.8.6 contain a blind server-side request forgery caused by the WidgetConnector plugin, letting remote attackers manipulate internal network resources, exploit requires network access to the server. id: CVE-2021-26072 info: name: Atlassian Confluence 5.8.6...

CVE-2021-26084_PoC

CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...

CVE-2019-3396

CVE-2019-3396 🔎 Key Information: Affected Product : Confluence Server & Data Center Affected Versions : from 6.0.0 to 6.15.4 Severity : Critical CVSS 9.8 Cause : Confluence has a Widget Connector plugin used to embed videos, external content like YouTube, Vimeo.... This function does not properly...

CVE-2022-26134

「💥」CVE-2022-26134 Description In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17...

ATLASSIAN-Confluence_rce

ATLASSIAN-Confluencerce CVE-2022-26134 Installation git clone https://github.com/xanszZZ/ATLASSIAN-Confluencerce cd ATLASSIAN-Confluencerce Usage Because this tool is a POC written according to the development specifications of the pocsuite3 framework Before using, please download pocsuite3 Proje...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability POC Vulnerable Endpoints: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability: Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

confluence_CVE-2019-3396

confluenceCVE-2019-3396...

Confluence_CVE-2021-26084

ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...

cve-2019-3396

cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries bundle install run ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahman and Omar and Alaa Usage: rub...