18 matches found
CVE-2022-42889-text4shell
CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text — CVE-2022-42889 Text4Shell — эксплойт PoC. Подробности📃 CVE-2022-42889 затрагивает версии Apache Commons Text с 1.5 по 1.9. Патч выпущен в версии Commons Text 1.10. Уязвимость сравнивают с Log4Shell, поскольку это уязвимость на уровне библиотеки ...
CVE-2022-42899
CVE-2022-42899 Apache Common Text de la version 1.5 à 1.9 présente une vulnérabilité d'exécution de code à distance CVE-2022-42899. root@kitploit: final StringSubstitutor interpolator = StringSubstitutor.createInterpolator;...
CVE-2022-42889
🚀 CVE-2022-42889 Text4Shell 익스플로잇 Apache Commons Text 1.10.0 미만 버전에서 발생하는 치명적인 원격 코드 실행 취약점인 CVE-2022-42889Text4Shell을 위한 Python 익스플로잇입니다. 📋 목차 설명 취약점 세부 정보 영향을 받는 버전 익스플로잇 기능 요구 사항 사용법 예제 작동 방식 탐지 완화 참고 자료 면책 조항 📝 설명 이 익스플로잇은 StringLookup 인터폴레이터가 처리하는 특수하게 조작된 입력 문자열을 통해 원격 코드 실행RCE을 허용하는 Apache...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 Text4Shell Report Apache Commons Text CVE-2...
[SECURITY] Fedora 43 Update: rust-interpolator-0.5.0-3.fc43
Runtime format strings, fully compatible with std's macros...
[SECURITY] Fedora 42 Update: rust-interpolator-0.5.0-3.fc42
Runtime format strings, fully compatible with std's macros...
[SECURITY] Fedora 41 Update: rust-interpolator-0.5.0-3.fc41
Runtime format strings, fully compatible with std's macros...
EUVD-2022-54976
Malicious code in bioql PyPI...
📄 Apache Commons Text 1.10.0 Remote Code Execution
Apache Commons Text version 1.10.0 suffers from a remote code execution vulnerability. Exploit Title: Apache Commons Text 1.10.0 - Remote Code Execution Text4Shell - POST-based Date: 2025-04-17 Exploit Author: Arjun Chaudhary Vendor Homepage: https://commons.apache.org/proper/commons-text/ Softwa...
SUSE CVE-2022-49250
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...
DEBIAN-CVE-2022-49250
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...
CVE-2022-49250
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...
UBUNTU-CVE-2022-49250
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...
CVE-2022-49250 ASoC: codecs: rx-macro: fix accessing compander for aux
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...
CVE-2022-45381
Jenkins Pipeline Utility Steps Plugin 2.13.1 and earlier does not restrict the set of enabled prefix interpolators and bundles versions of Apache Commons Configuration library that enable the 'file:' prefix interpolator by default, allowing attackers able to configure Pipelines to read arbitrary...
PT-2022-27483 · Jenkins +1 · Jenkins Pipeline Utility Steps Plugin +2
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline Utility Steps Plugin versions 2.13.1 and earlier Description: The issue allows attackers who can configure Pipelines to read arbitrary files from the Jenkins controller file system. This is due to the lack of restriction on t...
Apache Commons Text RCE
This exploit takes advantage of the StringSubstitutor interpolator class, which is included in the Commons Text library. A default interpolator allows for string lookups that can lead to Remote Code Execution. This is due to a logic flaw that makes the "script", "dns" and "url" lookup keys...