CVE-2025-3639

CVE-2025-3639 PoC - Contournement de l'authentification dans Liferay Portal/DXP Ce dépôt contient une preuve de concept PoC pour CVE-2025-3639 , une vulnérabilité de contournement de l'authentification dans Liferay Portal versions 7.3.0 à 7.4.3.132 et Liferay DXP plusieurs versions de 2024.Q1 à...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...

CVE-2018-11039

Spring Framework versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions allow web applications to change the HTTP request method to any HTTP method including TRACE using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-existing XSS...