7 matches found
CVE-2019-16891-Liferay-deserialization-RCE
I need to see the input content. The user provided only a heading " CVE-2019-16891-Liferay-deserialization-RCE" and then the instructions. Wait, the input field appears to contain only that heading? Let me re-read the user message. The user says "Translate the following Kitploit tool content...
CVE-2019-16891
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload...
CVE-2019-16891
creationtimestamp| type| source ---|---|--- 2023-01-06 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7496 2023-01-06 17:16:11+00:00| published-proof-of-concept| https://t.me/crackcodes/2121 2024-01-06 21:41:50+00:00| seen| https://t.me/arpsyndicate/2576...
CVE-2022-44147
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-16891. Reason: This candidate is a reservation duplicate of CVE-2019-16891. Notes: All CVE users should reference CVE-2019-16891 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2022-44147
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-16891. Reason: This candidate is a reservation duplicate of CVE-2019-16891. Notes: All CVE users should reference CVE-2019-16891 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2019-16891
CVE-2019-16891 affects Liferay Portal CE 6.2.5 (and related CVE mappings) and is described as remote command execution caused by deserialization of a JSON payload. The connected records corroborate deserialization-based RCE for Liferay Portal CE 6.2.5, with CVSS metrics indicating a high/severe i...
