CVE-2026-32635-Angular-XSS-Mitigation-

CVE-2026-32635: Angular i18n Attribute XSS - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation and detection for CVE-2026-32635 , a Cross-Site Scripting XSS vulnerability in Angular that affects internationalized i18n attributes...

spring-RCE-CVE-2022-22965

Resumen de la vulnerabilidad Recientemente Spring ha publicado una vulnerabilidad CVE de gran repercusión. La información del CVE indica: "A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires th...

CVE-2018-1273

CVE-2018-1273 Entorno para CVE-2018-1273 CVE-2018-1273: RCE con Spring Data Commons https://pivotal.io/security/cve-2018-1273 Aplicación https://github.com/spring-projects/spring-data-examples/tree/master/web/example Construcción root@kitploit: $ docker build -t cve-2018-1273 . Ejecución...

Spring-CVE

CVE de Spring Esto incluye CVE-2022-22963, una vulnerabilidad de acceso a recursos de expresión/SpEL de Spring, así como CVE-2022-22965, el RCE de spring-webmvc/spring-webflux denominado «SpringShell». CVE-2022-22963 En las versiones 3.1.6, 3.2.2 y anteriores no soportadas de Spring Cloud Functio...

nmap-spring4shell

Nmap-spring4shell Log4shell-nmap es un script NSE para detectar vulnerabilidades de RCE Spring4Shell CVE-2022-22965 en servicios HTTP. El script inyecta el payload correcto en la aplicación y luego ejecuta el siguiente comando en el endpoint especificado. Vulnerabilidad Ver aquí. Uso root@kitploi...

CVE-2022-22965

Vulnerabilidad Spring4Shell - CVE-2022-22965 📕 Introducción La vulnerabilidad spring4shell fue nombrada así debido a 2 vulnerabilidades encontradas y ampliamente explotadas por atacantes a principios de 2022. Una de estas vulnerabilidades se encuentra en el componente del framework llamado "Sprin...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

spring4shell-local-verification-lab

Proyecto de verificación local de condiciones de impacto, corrección y reprueba de Spring4Shell Introducción del proyecto Este proyecto se utiliza para aprender y verificar las condiciones de impacto, el comportamiento de riesgo, el método de corrección y el flujo de reprueba posterior de la...

CVE-2022-22965

Spring4ShellCVE-2022-22965 RCE en Spring Framework mediante enlace de datos en JDK 9+ / spring4shell / CVE-2022-22965 Spring4ShellCVE-2022-22965 Demo del Exploit https://user-images.githubusercontent.com/57348147/161458377-44ab2f76-f947-4599-aa0a-92cbaac819f8.mp4 Construcción root@kitploit: docke...

CVE-2022-22965_Spring4Shell

CVE-2022-22965Spring4Shell CVE-2022-22965 Spring4Shell, SpringShell is a vulnerability in the Spring Framework that uses data binding functionality to bind data stored within an HTTP request to certain objects used by an application. The bug exists in the getCachedIntrospectionResults method, whi...

cve-2022-22965

Minimal CVE-2022-22965 example At the time of writing, spring-web request params binding WebDataBinder, by default allows accessing object's getClass method. This is an internal jvm specific implementation detail imho shouldn't be exposed. As such, its features may change and be expanded with...

CVE-2022-22965

🚨 CVE-2022-22965 — "Spring4Shell" Vulnerabilidad crítica de ejecución remota de código RCE Divulgada públicamente: 31 de marzo de 2022 📖 Índice de contenidos Descripción general Componentes afectados Causa raíz técnica Condiciones de explotación Impacto Severidad y CVSS Mitigación y parches...

CVE-2022-22965

CVE-2022-22965 aka "Spring4Shell" Vulnerabilidad RCE en Spring Framework vía Data Binding on JDK 9+ El objetivo es centralizar la mayor cantidad de información de público conocimiento hasta el momento de la vulnerabilidad y poder saber qué acciones tomar en tal caso. ¿Mi aplicación es vulnerable?...

BIT-JENKINS-2026-84654

In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public static fields of the bound configuration object, allowing attackers who can submit configuration forms to modify publi...

BIT-JENKINS-2026-84647

In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Stapler does not restrict the types of objects that can be instantiated via form data binding to those compatible with the expected field type, allowing...

CVE-2026-84647

A flaw was found in Stapler, a web framework included in Jenkins. This vulnerability allows an attacker with 'Overall/Read' permission to instantiate objects related to configuration through form data binding. The system does not properly restrict the types of objects that can be created, enablin...

CVE-2026-84664

Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators...

CVE-2026-84667

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups...

CVE-2026-84673

Jenkins Customizable Header Plugin 295.v2544bca19b97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...