579 matches found
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
水泽-信息收集自动化工具 郑重声明:文中所涉及的技术、思路和工具仅供以安全为目的的学习交流使用,任何人不得将其用于非法用途以及盈利等目的,否则后果自行承担。 0x01 介绍 作者:Ske 团队:0x727,未来一段时间将陆续开源工具,地址:https://github.com/0x727 定位:协助红队人员快速的信息收集,测绘目标资产,寻找薄弱点 语言:python3开发 功能:一条龙服务,只需要输入根域名即可全方位收集相关资产,并检测漏洞。也可以输入多个域名、C段IP等,具体案例见下文。...
CVE-2022-4146
Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replication Manager: before 8.8.5-02...
GHSA-M384-PJ54-5VR2 Apache Ambari Expression Language Injection vulnerability
SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7...
Apache Jena Expression Language Injection vulnerability
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena from 3.7.0 through 4.8.0...
Exploit for Code Injection in Vmware Spring_Cloud_Function
Spring Cloud Function Vulnerability CVE-2022-22963 RCE This...
Security Bulletin: IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system [CVE-2013-4521, CVE-2013-2165 and CVE-2018-14667]
Summary IBM Security Verify Governance is vulnerable to remote attacks to execute arbitrary code on the system CVE-2013-4521. IBM Security Verify Governance is vulnerable to remote attacks caused by an error related to the handling of deserialization CVE-2013-2165. IBM Security Verify Governance ...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963 Exploit This repository contains a Rust-based e...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963-Reverse-Shell-Exploit This is a Python script t...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Proof of Concept for Log4j CVE-2021-44228 Disclaimer Th...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
Introduction Through CVE-2022-22947, an attack is attempte...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134check The script is used to check remotely if...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 练习 go 写 poc 用法 bash go get -u -v gith...
PT-2022-6758 · Hitachi · Hitachi Replication Manager
Name of the Vulnerable Software and Affected Versions: Hitachi Replication Manager versions prior to 8.8.5-02 Description: The issue affects Hitachi Replication Manager and is related to an Expression Language Injection vulnerability, allowing code injection. This vulnerability can be exploited b...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Usage: python3 CVE-2022-22947.py url...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Installation Download the Python scri...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Installation git clone https://github.com/CJ-0107/cve-20...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 ATLASIAN-Confluence RCE Installa...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
PoC exploit for CVE-2022-26134, a remote code execution vulnerab...