CVE-2026-2587-Exploit-POC

CVE-2026-2587 Exploit PoC — Eclipse GlassFish EL Injection RCE Validator Safe PoC validator for CVE-2026-2587, a critical EL Injection / RCE issue affecting Eclipse GlassFish admin console gadget handling via /common/gadgets/gadget.jsf. This tool helps security teams validate GlassFish...

cve-2018-14667

cve-2018-14667 POC for CVE-2018-14667 Original analysis and POC: https://paper.seebug.org/765/ Ref: https://web.archive.org/web/20190501081357/https://tint0.com/when-el-injection-meets-java-deserialization/...

CVE-2018-12533

RF-14310 / CVE-2018-12533 payload generator Based on Lucifaer research All credit goes to https://github.com/Lucifaer References https://access.redhat.com/security/cve/cve-2018-12533 richfaces-jboss-poc Easy to deploy proof of concept to practice Richfaces 3.3.4 deserialization + EL injection...

CVE-2020-10199

Nexus Repository Manager 3 Vuln Affected versions: = 3.21.2 CVE-2020-10199, CVE-2020-10204, CVE-2020-11444 CVE-2020-10199 Remote Code Execution Echo PoC No Echo PoC $\A''.getClass.forName'java.lang.Runtime'.getMethods6.invokenull.exec'touch /tmp/cve-2020-10199' Normal User Privileges...

Nexus-Repository-Manager3-EL-CVE-2018-16621-https-www.cve.org-CVERecord-id-CVE-2018-16621-

This script targets the Nexus Repository Manager 3 EL injection vulnerability CVE-2018-16621, and performs one-click exploitation to get a reverse shell. Running Example: Run the script on the attacker machine, enter the target IP, port, local listener IP and port as prompted, then execute the...

CVE-2017-1000486

CVE-2017-1000486 This is a PoC of CVE-2017-1000486 with some payloads useful to bypass blacklisting lexicographic checks on standard functions used to achieve RCE getClass, exec, etc.. and for retrieving primefaces secret through Padding Oracle in order to be less noisy possible on exploitation...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit To install the requirements execute: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Here is how to use the exploit: $ python primefaces.py -h...

hopgoblin

hopgoblin hopgoblin is a scanner for Adobe Experience Manager AEM instances. It automates a handful of checks that we frequently perform manually during security assessments. Features Detects exposed QueryBuilder endpoints: /bin/querybuilder.json /bin/querybuilder.feed Abuses QueryBuilder to:...

CVE-2017-1000486

CVE-2017-1000486 Proof of Concept Exploit for PrimeFaces 5.x EL Injection CVE-2017-1000486, a RCE vulnerability that can be used to gain Remote Code Execution on a target. Vulnerability description You can find an excellent description of the vulnerability on the Minded Security blog. Usage The...

pwnfaces

😛 pwnfaces Primefaces 5.X EL Injection Exploit 🕵️ What is pwnfaces? 🕵️ pwnfaces is a Golang tool created to exploit the vulnerability defined as CVE-2017-1000486 EL Injection in PrimeFaces 5.X ⚡ Installing / Getting started A quick guide of how to install and use pwnfaces. 1. go install...

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

Sonatype Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreuiUser update endpoint, leading to remote code execution. This...

PT-2026-120571

SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wpsp el editor form AJAX action. Attackers can reuse the wpsp-el-editor nonce from the Elementor modal to unpublish or...

CVE-2024-4412

The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language EL code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires administrator privileges...

EUVD-2024-55807

The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language EL code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires administrator privileges...

PT-2026-117485

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The software fails to sufficiently validate user-supplied data, enabling the injection of malicious Expression Language EL code. This flaw allows for the executi...

Primefaces EL Injection RCE (CVE-2017-1000486)

Exploits CVE-2017-1000486 in Primefaces 5.x: weak AES passphrase allows forging pfdrid payloads that evaluate Java EL expressions for RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Primefaces weak encryption EL injection RCE CVE-2017-1000486.""" import base64 import re from hashlib import md5...

CentOS Linux 7 [TuxCare] Security Update: emacs-git-el / git-daemon / git-email / git-hg / git-p4 / git-svn / etc (CENTOS7:CLSA-2025:1752655814)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1752655814 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CentOS Linux 6 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-cvs / git-daemon / etc (CENTOS6:CLSA-2025:1755184971)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1755184971 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...