1131 matches found
DEBIAN-CVE-2023-20861
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service DoS condition...
Spring Framework 安全漏洞
Spring Framework is the U.S. Spring team of a set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. A security vulnerability exists in Spring Framework versions 6.0.0 through 6.0.6, 5.3.0 through 5.3.25, 5.2.0 through 5.2.22, and...
PT-2023-2099
Name of the Vulnerable Software and Affected Versions Spring Framework versions 5.2.0.RELEASE through 5.2.22.RELEASE Spring Framework versions 5.3.0 through 5.3.25 Spring Framework versions 6.0.0 through 6.0.6 Description The issue is related to unlimited resource distribution in the Spring...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963-Reverse-Shell-Exploit This is a Python script t...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Proof of Concept for Log4j CVE-2021-44228 Disclaimer Th...
Vega Expression Language `scale` expression function Cross Site Scripting
Summary The Vega scale expression function has the ability to call arbitrary functions with a single controlled argument. This can be exploited to escape the Vega expression sandbox in order to execute arbitrary JavaScript. Details The scale expression function passes a user supplied argument gro...
K38110373: Apache Tomcat vulnerability CVE-2014-7810
Security Advisory Description The Expression Language EL implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a...
SUSE CVE-2011-1484
jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language EL statements i...
SUSE CVE-2014-7810
The Expression Language EL implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanis...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
Introduction Through CVE-2022-22947, an attack is attempte...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134check The script is used to check remotely if...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 练习 go 写 poc 用法 bash go get -u -v gith...
PT-2022-6758 · Hitachi · Hitachi Replication Manager
Name of the Vulnerable Software and Affected Versions: Hitachi Replication Manager versions prior to 8.8.5-02 Description: The issue affects Hitachi Replication Manager and is related to an Expression Language Injection vulnerability, allowing code injection. This vulnerability can be exploited b...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Usage: python3 CVE-2022-22947.py url...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE in the ExpressionContextImpl class via jexl.createExpressionexpression.evaluatecontext; functionality, due to improper user input validation. Remediation There is no fixed version for com.bstek.uflo:uflo-core...
The vulnerability of the HPE Intelligent Management Center PLAT software lies in its failure to take measures to neutralize special elements used in the expression language of the operator. This allows a perpetrator to execute arbitrary code.
The vulnerability of the HPE Intelligent Management Center PLAT software lies in the lack of measures taken to neutralize special elements used in the expression language during the processing of the beanName parameter at the select.xhtml endpoint. Exploiting this vulnerability allows an attacker...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Installation Download the Python scri...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Installation git clone https://github.com/CJ-0107/cve-20...