nmap-spring4shell

Nmap-spring4shell Log4shell-nmap هو سكربت NSE لكشف ثغرات تنفيذ الأكواد عن بُعد RCE في Spring4Shell CVE-2022-22965 عبر خدمات HTTP. يقوم السكربت بحقن الحمولة الصحيحة في التطبيق ثم ينفذ الأمر التالي على نقطة النهاية المحددة. الثغرة انظر هنا. الاستخدام root@kitploit: ┌──kali㉿kali-/nmap-spring4shell └...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions concernées : Versions du framework Spring de 5.3.0 à 5.3.17, de 5.2.0 à 5.2.19 et versions antérieures Java JDK 9 Versions d'Apache Tomcat inférieures à 10.0.20, 9.0.62 et 8.5.78 Les applications empaquetées en WAR traditionnel avec une dépendance...

Spring-CVE

Spring CVE يتضمن هذا CVE-2022-22963، وهي ثغرة Spring SpEL / Expression Resource Access Vulnerability، بالإضافة إلى CVE-2022-22965، وهي ثغرة تنفيذ التعليمات البرمجية عن بُعد RCE في spring-webmvc/spring-webflux والتي تُعرف باسم "SpringShell". CVE-2022-22963 في إصدارات Spring Cloud Function 3.1.6...

CVE-2018-1273

CVE-2018-1273 Environnement pour CVE-2018-1273 CVE-2018-1273 : RCE avec Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Construction root@kitploit: $ docker build -t cve-2018-1273 . Exécution...

spring-RCE-CVE-2022-22965

Описание уязвимости Недавно в Spring была обнаружена серьезная уязвимость CVE. Согласно информации CVE, "A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as ...

CVE-2022-22965

CVE-2022-22965 المعروف أيضًا باسم "Spring4Shell" ثغرة RCE في Spring Framework عبر Data Binding على JDK 9+ الهدف هو تجميع أكبر قدر ممكن من المعلومات المتاحة للعموم حول الثغرة حتى الآن، ومعرفة الإجراءات التي يجب اتخاذها في هذه الحالة. هل تطبيقي عرضة للخطر؟ الشروط AND التي يجب توفرها هي: JDK 9 +...

CVE-2026-84647

A flaw was found in Stapler, a web framework included in Jenkins. This vulnerability allows an attacker with 'Overall/Read' permission to instantiate objects related to configuration through form data binding. The system does not properly restrict the types of objects that can be created, enablin...

CVE-2026-32635-Angular-XSS-Mitigation-

CVE-2026-32635 : XSS sur attribut i18n d'Angular - Preuve de concept de mitigation et détection 📌 Description générale Ce dépôt contient une démonstration éducative de la mitigation et de la détection pour CVE-2026-32635 , une vulnérabilité de Cross-Site Scripting XSS dans Angular qui affecte les...

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...

CVE-2026-84673

Jenkins Customizable Header Plugin 295.v2544bca19b97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

CVE-2026-84666

Jenkins Job Configuration History Plugin 1367.vc8fab15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

CVE-2026-84654

In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public static fields of the bound configuration object, allowing attackers who can submit configuration forms to modify publi...

CVE-2026-84662

Jenkins LDAP Plugin 807.809.vd3a4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL...

CVE-2026-84659

Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding...

CVE-2026-84647

In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Stapler does not restrict the types of objects that can be instantiated via form data binding to those compatible with the expected field type, allowing...

CVE-2026-84673

Jenkins Customizable Header Plugin 295.v2544bca19b97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability...

EUVD-2026-70146

Jenkins Customizable Header Plugin 295.v2544bca19b97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability...