Lucene search
+L

503 matches found

Kitploit
Kitploit
added 2026/09/15 2:25 a.m.6 views

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd および Crowd Data Center の RCE 使用方法: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 脆弱性バージョンのダウンロード https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Powered by Atlassian Crowd Version: 2.11.0 Build:725 - 2017-01-...

9.8CVSS8.5AI score0.95355EPSS
SaveExploits6
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.70 views

Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution

Atlassian Crowd and Crowd Data Center is susceptible to a remote code execution vulnerability because the pdkinstall development plugin is incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit...

9.8CVSS8.6AI score0.95355EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/09/09 9:38 a.m.13 views

nmap-scripts

nmap-scripts 用于漏洞 cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 的 nmap 脚本 CVE-2020-0796 Microsoft 服务器消息块 3.1.1 SMBv3 协议处理某些请求的方式中存在一个远程代码执行漏洞,又称"Windows SMBv3 客户端/服务器远程代码执行漏洞"。 CVE-2019-7238 Sonatype Nexus Repository Manager 3.15.0 之前版本存在不正确的访问控制。 CVE-2019-11580 Atlassian Crowd 和...

10CVSS8.3AI score0.9981EPSS
SaveExploits143
EUVD
EUVD
added 2026/08/19 12:31 a.m.15 views

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

8.8CVSS5.3AI score0.00393EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 10:16 p.m.15 views

CVE-2026-21582

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

8.8CVSS0.00393EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/18 10:00 p.m.71 views

CVE-2026-21582

Crowd Data Center 7.2.1 has a Broken Authentication & Session Management flaw (CVSS 8.8) letting unauthenticated attackers act as other users; Atlassian advises upgrading to 7.2.2 or later . No exploitation details are provided in the documents.

8.8CVSS5.4AI score0.00393EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/18 10:00 p.m.35 views

CVE-2026-21582

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

8.8CVSS0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.15 views

PT-2026-78243

Name of the Vulnerable Software and Affected Versions Crowd Data Center version 7.2.1 Description An issue involving Broken Authentication and Session Management BASM allows an unauthenticated attacker to perform actions as another user. Recommendations Upgrade to version 7.2.2 or a later release...

8.8CVSS5.2AI score0.00393EPSS
SaveExploits0References6
Atlassian
Atlassian
added 2026/08/07 4:30 p.m.14 views

DoS (Denial of Service) io.micrometer:micrometer-core Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to cause a resource ...

7.5CVSS5.1AI score0.00631EPSS
SaveExploits0
Atlassian
Atlassian
added 2026/08/07 4:30 p.m.15 views

DoS (Denial of Service) io.micrometer:micrometer-core Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 6.2.4, 6.3.1, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

7.5CVSS5.1AI score0.00792EPSS
SaveExploits0
Atlassian
Atlassian
added 2026/08/05 11:49 a.m.12 views

BASM (Broken Authentication & Session Management) in Crowd Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

8.8CVSS5.3AI score0.00393EPSS
SaveExploits0
Atlassian
Atlassian
added 2026/08/03 4:30 p.m.14 views

Information Disclosure axios Dependency in Crowd Data Center

This High severity Information Disclosure vulnerability was introduced in version 7.2.1 of Crowd Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT: P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N allows an unauthenticated attacke...

8.3CVSS5.3AI score0.0037EPSS
SaveExploits1
Atlassian
Atlassian
added 2026/08/02 4:30 p.m.13 views

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

7.5CVSS7.3AI score0.00443EPSS
SaveExploits1
Atlassian
Atlassian
added 2026/08/01 4:33 a.m.14 views

Injection axios Dependency in Crowd Data Center

This High severity Injection vulnerability was introduced in versions 6.0.1, 6.1.0, 6.2.2, 6.3.6, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Injection vulnerability, with a CVSS Score of 7.4 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N allows an unauthenticated attack...

7.4CVSS6.8AI score0.00403EPSS
SaveExploits1
Atlassian
Atlassian
added 2026/08/01 4:32 a.m.13 views

Injection axios Dependency in Crowd Data Center

This High severity Injection vulnerability was introduced in versions 6.0.1, 6.1.0, 6.2.2, 6.3.6, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Injection vulnerability, with a CVSS Score of 7.4 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N allows an unauthenticated attack...

7.4CVSS7.3AI score0.00838EPSS
SaveExploits1
Atlassian
Atlassian
added 2026/08/01 4:32 a.m.12 views

Injection axios Dependency in Crowd Data Center

This High severity Injection vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Injection vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N allows an unauthenticated attack...

8.2CVSS7.4AI score0.00611EPSS
SaveExploits1
Atlassian
Atlassian
added 2026/08/01 4:32 a.m.15 views

Injection js-cookie Dependency in Crowd Data Center

This High severity Injection vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.6, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N allows an unauthenticated attack...

7.5CVSS5.3AI score0.00919EPSS
SaveExploits1
Atlassian
Atlassian
added 2026/08/01 4:32 a.m.12 views

Business Logic Vulnerability org.apache.tomcat:tomcat-catalina Dependency in Crowd Data Center

This High severity Business Logic vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Business Logic vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an...

7.5CVSS7.1AI score0.00503EPSS
SaveExploits0
Atlassian
Atlassian
added 2026/08/01 4:32 a.m.12 views

DoS (Denial of Service) org.apache.tomcat:tomcat-catalina Dependency in Crowd Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows a...

7.5CVSS7AI score0.00839EPSS
SaveExploits0
Atlassian
Atlassian
added 2026/08/01 4:32 a.m.13 views

Injection axios Dependency in Crowd Data Center

This High severity Injection vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.6, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Injection vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H allows an unauthenticated attack...

6.8CVSS5.8AI score0.01553EPSS
SaveExploits2
Rows per page
Query Builder