Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Installation git clone https://github.com/CJ-0107/cve-20...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 ATLASIAN-Confluence RCE Installa...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

PoC exploit for CVE-2022-26134, a remote code execution vulnerab...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This is a PoC exploit for CVE-2022-26134, an OGNL injection vuln...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

It is an offensive tool for web exploitation. The repository is...

Critical severity command injection vulnerability - CVE-2022-43781

There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to gain code execution on the system. This vulnerability was introduced in Bitbucket Server and Data Center...

PT-2022-5667 · Atlassian · Bitbucket Server +1

Name of the Vulnerable Software and Affected Versions: Atlassian Bitbucket Server and Data Center affected versions not specified Description: The issue is related to a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to...

PT-2022-5616 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows CryptoAPI, which can be exploited to bypass authentication. This vulnerability allows an attacker to conduct spoofi...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134-LAB Confluence Server and Confluence Data Cent...

Actively exploited vulnerability in Bitbucket Server and Data Center

On September 29, 2022 the Cybersecurity & Infrastructure Security Agency CISA added three vulnerabilities to the catalog of known to be exploited vulnerabilities. One of them is a vulnerability in Atlassians Bitbucket Server and Data Center. The other two are the Exchange Server zero-day...

PT-2022-6920

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.4.0-rc1 through 2.12.7.1 FasterXML jackson-databind versions 2.13.x through 2.13.4.1 Bamboo Data Center and Server versions 9.1.0 through 9.2.4 Bamboo Data Center and Server versions 9.3.0 through 9.3.2...

PT-2022-6919 · Atlassian +4 · Bamboo Server +9

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.13.4 Bamboo Data Center and Server versions 9.1.0, 9.2.1, and 9.3.0 Bitbucket Data Center and Server versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, 8.12.0, and 8.13.0 Description:...

VulnCheck KEV: CVE-2022-36804

Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request...

PT-2022-25243 · Atlassian +6 · Confluence +7

Name of the Vulnerable Software and Affected Versions: Apache XML Graphics Batik version 1.14 Confluence Data Center and Server versions 7.13.0 through 7.19.0 Description: A Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a J...

CVE-2021-33079

Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-33081

Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-POC A critical vulnerability CVE-2022-36804 i...

Intel(R) SSD DC 安全漏洞

IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products, which stems from a failure in the firmware protection mechanism that could lead to information disclosure via local access by a privileged user...

PT-2022-10202 · Intel · Intel Ssd Dc Products

Name of the Vulnerable Software and Affected Versions: IntelR SSD DC Products affected versions not specified Description: The issue is related to a protection mechanism failure in the firmware of some IntelR SSD DC Products. This failure may allow a privileged user to potentially enable...

PT-2022-10203 · Intel · Intel Ssd Dc Products

Name of the Vulnerable Software and Affected Versions: IntelR SSD DC Products affected versions not specified Description: The issue is related to a protection mechanism failure in the firmware of some IntelR SSD DC Products. This failure may allow a privileged user to potentially enable...