1505 matches found
CVE-2023-50895
In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated administrative users to execute arbitrary Groovy code...
CVE-2023-50895
In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated administrative users to execute arbitrary Groovy code...
CVE-2023-50895
CVE-2023-50895 affects Janitza GridVis up to version 9.0.66; exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject load functionality allow remote authenticated administrative users to execute arbitrary Groovy code. Exploitation context and technical details are su...
Janitza GridVis 安全漏洞
Janitza GridVis is a grid monitoring software from Janitza. A security vulnerability exists in Janitza GridVis version 9.0.66 and prior versions. An attacker can exploit this vulnerability to execute arbitrary Groovy code...
PT-2024-13997 · Janitza · Gridvis
Name of the Vulnerable Software and Affected Versions: Janitza GridVis versions 9.0.66 and earlier Description: The issue allows remote authenticated administrative users to execute arbitrary Groovy code due to exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject...
Kafka UI 0.7.1 Command Injection Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kafka UI Unauthenticated Remote Command Execution via the Groovy Filter option.', 'Description' = %q A command injection vulnerability exists in...
The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the lack of measures to neutralize special elements within the platform, allowing attackers to execute arbitrary Groovy and Python code.
The XWiki platform is vulnerable because measures have not been taken to neutralize its special elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary Groovy and Python code...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to execute arbitrary Groovy, Python, or Velocity code.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability allows a malicious actor to execute arbitrary Groovy, Python, or Velocity code remotely...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to execute arbitrary Groovy, Python, or Velocity code.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability allows a malicious actor to execute arbitrary Groovy, Python, or Velocity code remotely...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin
A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...
CVE-2024-23639
Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are susceptible to drive-by localhost attacks. While not typical ...
Security Bulletin: Vulnerabilities in Groovy affect IBM Cloud Pak System [CVE-2016-6814, CVE-2015-3253]
Summary Vulnerabilities in Groovy affect IBM Cloud Pak System. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2016-6814 DESCRIPTION: Apache Groovy could allow a remote attacker to execute arbitrary code on the system, caused by a...
Exploit for Code Injection in Provectus Ui
CVE-2023-52251-POC There is a Remote Code Execution vulnerabi...
Exploit for Server-Side Request Forgery in Apache Ofbiz
CVE-2023-51467 Graphical Apache Ofbiz: CVE-2023-51467 – Remo...
Denial Of Service (DoS)
org.jline, jline-groovy is vulnerable to Denial Of Service DoS. The vulnerability is due to a lack of row size limits when printing output, resulting in an out of memory error when the groovyEngine.execute method is passed with a crafted input...
