CVE-2020-14179

CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...

Jira-Scan

Jira-Scan ONLY TESTED WITH PYTHON 3 Provide a list of websites to test with out the http or https and this will test each one for the SSRF vun. Use a VPS from DO CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before...

CVE-2026-48206

CVE-2026-48206 — camel-jira IssueKey Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...

UserEnumJira

This repository does not have a README...

CVE-2019-8451

CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

AtlasReaper

AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...

CVE-2019-8449

CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Limited Remote File Read/Include Vulnerable Endpoints: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

faraday_plugins

Install pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path faraday-plugins list-plugins Test autodetect plugin from comman...

purify

Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo Description The goal of Purify to be an easy-in-use and efficient tool to simplify a workflow of managing vulnerabilities delivered from various even custom tools. Purify is aims to be a tool-agnostic applicatio...

CVE-2019-8449

CVE-2019-8449 CVE-2019-8449 Exploit for Jira Releases Below v8.3.4 CVSS Score: 5.0 Vulnerability Types: Information Disclosure Authentication: Not Required Affected Versions: 2.1 - 8.3.4 Publish Date: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 Description The...

bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...

CVE-2020-14179

CVE-2020-14179 Sensitive data exposure via /secure/QueryComponent!Default.jspa endpoint Priority: High Affects Version/s: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names a...

watchTowr-vs-Atlassian-CVE-2026-21589

CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection in Action Detection Artifact Generator attempts to check if the target is vulnerable to CVE-2026-21589. Detection is implemented for following products: Atlassia...

CVE-2019-11581

CVE-2019-11581 Atlassian JIRA Template injection vulnerability RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Vuln Version Download https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc...

Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read

Atlassian products including Jira, Confluence, and Bitbucket Data Center contain a pre-authentication arbitrary file read vulnerability in the shared atlassian-plugins-webresource library. The library improperly handles double colons :: as path separators in the resource routing, allowing...

GitLab Enterprise Edition - Server-Side Request Forgery

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue. id: CVE-2019-6793 info: name: GitLab Enterprise Edition - Server-Side Request Forgery author:...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjFooterNavigationConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site...