578 matches found
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Confluence OGNL expression injected RCECVE-202...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 PoC Confluence Server and Data Center - CVE-20...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Confluence RCE CVE-2022-26134 Exploit Detection Pre-requ...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-exp Reproduced the...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-exp Reproduced the...
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language EL, evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a 1 name attribute in a a spring:hasBindErrors ta...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expres...
GHSA-3HX6-FQPJ-XFJR RichFaces vulnerable to Expression Language Injection
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...
RichFaces vulnerable to Expression Language Injection
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language EL variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309...
Apache Tiles Vulnerable to XSS via EL Expression Injection
Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language EL expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting XSS attacks or obtain sensitive information via unspecified vectors, related to th...
Exploit for Expression Language Injection in Apache Struts
CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 CVE-20...
Exploit for Expression Language Injection in Apache Struts
S2-062 CVE-2021-31805/s2-062 Batch scanning and vulnerability...
Exploit for Expression Language Injection in Apache Struts
CVE-2021-31805 Remote code execution S2-062 CVE-2021-31805...
Exploit for Expression Language Injection in Apache Struts
s2-062 Remote code execution for S2-062 CVE-2021-31805 – Ver...
Exploit for Expression Language Injection in Apache Struts
s2-062 Remote code execution for S2-062 CVE-2021-31805 – Ver...
GHSA-V8J6-6C2R-R27C Expression Language Injection in Apache Struts
The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %... syntax. Using forced OGNL evaluation on untrusted user input can lead to a...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
SpringCloud-Gateway Command Execution Vulnerability CVE-2022...