Lucene search
+L

1108 matches found

GithubExploit
GithubExploit
added 2022/07/13 2:7 p.m.11 views

Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb

Springcve-2022-22980 spring data mongodb remote code executio...

9.8CVSS9AI score0.16771EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2022/07/12 8:20 a.m.339 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Copied from Original: - ht...

10CVSS9.7AI score0.98253EPSS
SaveExploits54
GithubExploit
GithubExploit
added 2022/07/12 5:34 a.m.37 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This is a PoC exploit for CVE-2022-26134, a vulnerability in Con...

9.8CVSS9.9AI score0.99999EPSS
SaveExploits76
RedHat Linux
RedHat Linux
added 2022/07/07 2:19 p.m.5 views

spring-expression: Denial of service via specially crafted SpEL expression

A flaw was found in the Spring Framework. This flaw allows an attacker to craft a special Spring Expression, causing a denial of service...

6.5CVSS7.1AI score0.35834EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2022/07/06 1:27 a.m.352 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

Atlassian Confluence OGNL Injection POC Vulnerability CVE-202...

9.8CVSS10AI score0.99999EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2022/06/29 5:33 p.m.321 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 - conFLU PoC for exploiting CVE-2022-26134 on...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2022/06/24 10:33 a.m.392 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

POC - Atlassian Confluence OGNL Injection Remote Code Executio...

9.8CVSS10AI score0.99999EPSS
SaveExploits76
OSV
OSV
added 2022/06/24 12:0 a.m.6 views

GHSA-W24X-87MR-4R23 SpEL Injection in Spring Data MongoDB

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

9CVSS7.1AI score0.16771EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2022/06/23 5:15 p.m.8 views

CVE-2022-22980

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

9.8CVSS7.2AI score0.16771EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.10 views

The vulnerability of software for unifying and simplifying access to Spring Data MongoDB databases, related to errors in processing SpEL expressions, allows a perpetrator to execute arbitrary code.

The vulnerability of the software for unifying and simplifying access to Spring Data MongoDB databases is related to errors in processing SpEL expressions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SpEL query...

10CVSS7.9AI score0.16771EPSS
SaveExploits3References3Affected Software1
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.9 views

Spring Data MongoDB 安全漏洞

Spring Framework is the U.S. Spring team of a set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. A security vulnerability exists in Spring Data MongoDB that stems from vulnerability to SpEL injection when using @Query or...

9.8CVSS8AI score0.16771EPSS
SaveExploits3References3
GithubExploit
GithubExploit
added 2022/06/21 11:39 a.m.535 views

Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb

CVE-2022-22980 A local based poc of CVE-2022-22980, for the d...

9.8CVSS8.5AI score0.16771EPSS
SaveExploits3
Spring Security Advisories
Spring Security Advisories
added 2022/06/20 12:0 a.m.12 views

Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...

9CVSS7.2AI score0.16771EPSS
SaveExploits3References1
GithubExploit
GithubExploit
added 2022/06/19 1:50 p.m.409 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

「💥」CVE-2022-26134 Description In affected versions of Con...

9.8CVSS9.5AI score0.99999EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2022/06/13 11:1 p.m.489 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 - Confluence Pre-Auth Remote Code Execution...

9.8CVSS10AI score0.99999EPSS
SaveExploits76
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/13 5:43 p.m.30 views

Security Bulletin: IBM Sterling Control Center is vulnerable to remote attacker security restrictions bypass due to Eclipse EE4J Jakarta Expression Language (CVE-2021-28170)

Summary Eclipse EE4J Jakarta Expression Language is used by IBM Sterling Control Center. Eclipse EE4J Jakarta Expression Language could allow a remote attacker to bypass security restrictions, and the issue has been addressed. Vulnerability Details CVEID: CVE-2021-28170 DESCRIPTION: Eclipse EE4J...

5.3CVSS2.2AI score0.02132EPSS
SaveExploits1Affected Software1
GithubExploit
GithubExploit
added 2022/06/10 8:57 a.m.391 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

exploitCVE-2022-26134 CVE-2022-26134, an OGNL injection vulne...

9.8CVSS10AI score0.99999EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2022/06/09 2:11 a.m.407 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

9.8CVSS10AI score0.99999EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2022/06/09 2:11 a.m.360 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 -u URL, --url URL 目标url -c COMM...

9.8CVSS10AI score0.99999EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2022/06/08 9:52 a.m.404 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...

10CVSS7.9AI score0.98253EPSS
SaveExploits54
Rows per page
Query Builder