25460 matches found
CVE-2019-11581
CVE-2019-11581 Atlassian JIRA Template injection vulnerability RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Vuln Version Download https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc root@kitploit:...
Jira-CVE-2019-8451
Jira CVE-2019-8451 POC Description Proof of concept scan to check if a Jira host is vulnerable to CVE-2019-8451 CVE-2019-8451 CVE-2019-8451 is a pre-authentication server side request forgery SSRF vulnerability found in the /plugins/servlet/gadgets/makeRequest resource. This vulnerability was...
CVE-2020-14179
CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...
xray
Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...
AtlasReaper
AtlasReaper AtlasReaper is a command-line tool developed for offensive security purposes, primarily focused on reconnaissance of Confluence and Jira. It also provides various features that can be helpful for tasks such as credential farming and social engineering. The tool is written in C. Blog...
CVE-2019-8451
CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kitploit: root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...
Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure
Atlassian Jira Server and Data Center before 8.5.8 and 8.6.0 through 8.11.1 are susceptible to information disclosure via the /secure/QueryComponent!Default.jspa endpoint. An attacker can view custom field names and custom SLA names. id: CVE-2020-14179 info: name: Atlassian Jira Server/Data Cente...
JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)
The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...
Jira Netic Group Export <1.0.3 - Missing Authorization
Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexportdownload=true request to a...
Jira <8.4.0 - Information Disclosure
Jira before 8.4.0 is susceptible to information disclosure. The /rest/api/latest/groupuserpicker resource can allow an attacker to enumerate usernames, and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-8449 info: name: Jira 8.4...
Jira-Scan
Jira-Scan SOLO PROBADO CON PYTHON 3 Proporciona una lista de sitios web para probar sin el http o https y esto probará cada uno para la vulnerabilidad SSRF. Usa una VPS de DO CVE-2017-9506 El IconUriServlet del Atlassian OAuth Plugin desde la versión 1.3.0 hasta la versión 1.9.12 y desde la versi...
CVE-2021-39115
CVE-2021-39115 La inyección de plantillas en las plantillas de correo electrónico conduce a la ejecución de código en Jira Service Management Server I Construcción He explicado cómo desplegar y depurar aquí, pueden consultarlo. II Análisis En la Descripción de este CVE ya se indica claramente que...
bulwark
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...
bulwark
Una herramienta organizativa de gestión de activos y vulnerabilidades, con integración con Jira, diseñada para generar informes de seguridad de aplicaciones. Funcionalidades Gestión de vulnerabilidades para múltiples clientes Generación de informes de seguridad Integración con Jira Autorización...
faraday_plugins
Install root@kitploit: pip install faraday-plugins Commands List Plugins List all plugins and if its compatible with command or/and report Optional params: -cpf / --custom-plugins-folder PATH: If given will also look for custom plugins on that path root@kitploit: faraday-plugins list-plugins Test...
CVE-2019-8449
CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...
jira-mobile-ssrf-exploit
CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...
CVE-2023-26256
CVE-2023-26255 CVE-2023-26256 POC root@kitploit: FOFA: body="JIRA" && body="2.0.50" root@kitploit: Usage: python3 CVE-2023-26256.py -h...
sh00t
root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...