1131 matches found
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
It is an offensive tool for web exploitation. The repository is...
The vulnerability of the HPE Intelligent Management Center PLAT software lies in its failure to take measures to neutralize special elements used in the expression language of the operator. This allows a perpetrator to execute arbitrary code.
The vulnerability of the HPE Intelligent Management Center PLAT software lies in the lack of measures taken to neutralize special elements used in the expression language during the processing of the beanName parameter at the devGroupSelect.xhtml endpoint. Exploiting this vulnerability allows an...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134-LAB Confluence Server and Confluence Data Cent...
cron-utils: template Injection leading to unauthenticated Remote Code Execution
A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...
PT-2022-16005 · Nepxion · Nepxion Discovery
Name of the Vulnerable Software and Affected Versions: Nepxion Discovery affected versions not specified Description: The issue is related to SpEL Injection in discovery-commons, where the DiscoveryExpressionResolver’s eval method evaluates expressions with a StandardEvaluationContext. This allow...
Nepxion 安全漏洞
Nepxion Discovery is an enhanced middleware for service registration discovery for Spring Cloud. Nepxion Discovery 6.16.2 and earlier versions are vulnerable to a remote code execution vulnerability that stems from a lack of validation of input data in Discovery-commons and is susceptible to SpEL...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
It is an exploit module/toolkit targeting Apache Log4j. The targ...
VulnCheck KEV: CVE-2022-22963
When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources...
Expression Language Injection
Expression Language EL has been defined as part of the Java Server Pages Standard Tag Library JSTL in order to offer developers a simple way to output data from an object model. Starting from the JSP 2.0 specification, Expression Language has been made available within JSP pages, but it is also...
spring-expression: Denial of service via specially crafted SpEL expression
A flaw was found in the Spring Framework. This flaw allows an attacker to craft a special Spring Expression, causing a denial of service...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 A remote attacker can construct OGNL expressi...
spring-expression: Denial of service via specially crafted SpEL expression
A flaw was found in the Spring Framework. This flaw allows an attacker to craft a special Spring Expression, causing a denial of service...
Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb
Springcve-2022-22980 spring data mongodb remote code executio...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Copied from Original: - ht...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2022-26134, a vulnerability in Con...
spring-expression: Denial of service via specially crafted SpEL expression
A flaw was found in the Spring Framework. This flaw allows an attacker to craft a special Spring Expression, causing a denial of service...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
POC - Atlassian Confluence OGNL Injection Remote Code Executio...
GHSA-W24X-87MR-4R23 SpEL Injection in Spring Data MongoDB
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...