Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

MITRE ATT&CK Threat Detection with Splunk Detection engineeri...

CVE-2023-37525

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...

EUVD-2023-41412

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...

CVE-2025-70974

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an...

EUVD-2013-0663

Malware in sbrugna...

EUVD-2002-1969

Malware in sbrugna...

EUVD-2021-10361

Malware in sbrugna...

EUVD-2005-1025

Malware in sbrugna...

EUVD-2014-8730

Malware in sbrugna...

EUVD-2014-0762

Malware in sbrugna...

EUVD-2002-1835

Malware in sbrugna...

EUVD-2019-0613

Malware in sbrugna...

EUVD-2023-42953

Malicious code in bioql PyPI...

EUVD-2022-41312

Malicious code in bioql PyPI...

EUVD-2024-41567

Malicious code in bioql PyPI...

EUVD-2022-29297

Malicious code in bioql PyPI...

EUVD-2022-3350

Malicious code in bioql PyPI...

CVE-2025-26074

Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes...

CVE-2025-26074

Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes...

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...