1132 matches found
CVE-2022-22980
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...
Spring Data MongoDB 安全漏洞
Spring Framework is the U.S. Spring team of a set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. A security vulnerability exists in Spring Data MongoDB that stems from vulnerability to SpEL injection when using @Query or...
The vulnerability of software for unifying and simplifying access to Spring Data MongoDB databases, related to errors in processing SpEL expressions, allows a perpetrator to execute arbitrary code.
The vulnerability of the software for unifying and simplifying access to Spring Data MongoDB databases is related to errors in processing SpEL expressions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SpEL query...
Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb
CVE-2022-22980 A local based poc of CVE-2022-22980, for the d...
Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
「💥」CVE-2022-26134 Description In affected versions of Con...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - Confluence Pre-Auth Remote Code Execution...
Security Bulletin: IBM Sterling Control Center is vulnerable to remote attacker security restrictions bypass due to Eclipse EE4J Jakarta Expression Language (CVE-2021-28170)
Summary Eclipse EE4J Jakarta Expression Language is used by IBM Sterling Control Center. Eclipse EE4J Jakarta Expression Language could allow a remote attacker to bypass security restrictions, and the issue has been addressed. Vulnerability Details CVEID: CVE-2021-28170 DESCRIPTION: Eclipse EE4J...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 -u URL, --url URL 目标url -c COMM...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 -u URL, --url URL 目标url -c COMM...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
ConfluentPwn Confluence pre-auth ONGL injection remote code ex...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Confluence-CVE-2022-26134 dork en shodan https://www...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Implementation of CVE-2022-26134 This reposito...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
confluencePot ConfluencePot is a simple honeypot for the Atla...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 1 First run the shodan scripts to grabs all t...