CVE-2019-16891-Liferay-deserialization-RCE

I need to see the input content. The user provided only a heading " CVE-2019-16891-Liferay-deserialization-RCE" and then the instructions. Wait, the input field appears to contain only that heading? Let me re-read the user message. The user says "Translate the following Kitploit tool content...

Liferay Portal - Cross-site Scripting

A Cross-site scripting XSS vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the tag parameter. id:...

Liferay Portal - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated...

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...

Liferay Portal - Open Redirect

HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' U+FFFD, which allows remote...

CVE-2020-7961

CVE-2020-7961 Script di exploit per CVE-2020-7961 Esecuzione remota di codice non autenticata tramite JSONWS Riferimenti e ispirazioni post del blog originale : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html post del blog synacktiv :...

CVE-2025-3639

CVE-2025-3639 PoC - Bypass di Login Liferay Portal/DXP Questo repository contiene un Proof of Concept PoC per CVE-2025-3639 , una vulnerabilità di bypass del login in Liferay Portal versioni 7.3.0–7.4.3.132 e Liferay DXP varie versioni da 2024.Q1 a 2025.Q1.6. Il PoC dimostra come un utente non...

CVE-2011-1571

CVE-2011-1571 Riepilogo Vulnerabilità non specificata nella portlet XSL Content di Liferay Portal Community Edition CE 5.x e 6.x prima della 6.0.6 GA, quando viene utilizzato Apache Tomcat, consente ad attaccanti remoti di eseguire comandi arbitrari tramite vettori sconosciuti. Dettaglio CVE :...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Ricerca sulle vulnerabilità RAPTOR Loop-Hunt Un audit di sicurezza di Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a eseguito con la metodologia RAPTOR loop-hunt : ricognizione deterministica → 25 agenti generatori isolati che leggono il sorgente grezzo → 2...

MAL-001

MAL-001: Server-Side Template Injection di FreeMarker in Liferay Portal È stato scoperto un problema in Liferay - Portal =7.4.3.12-ga12. Inserendo contenuti dannosi nei modelli FTL, un attaccante può effettuare attacchi SSTI Server-Side Template Injection, che possono sfruttare gli oggetti espost...

CVE-2020-7961-Mass

CVE-2020-7961-Mass Exploit di massa CVE-2020–7961 per Script Kiddies Testato su: Kali Linux, Windows,... Requisiti: apt install python3 pip3 install requests colorama Utilizzo: python3 rce.py target url | Per un singolo target python3 mass.py list url | Per una lista di target File salvato in:...

CVE-2020-7961-payloads

CVE-2020-7961-payloads Deserializzazione di dati non fidati in Liferay Portal precedente alla versione 7.2.1 CE GA2 consente a un attaccante remoto di eseguire codice arbitrario tramite JSON web services JSONWS Step 1 Scrivi il tuo payload in LifExp.java Step 2 Compilalo con javac Step 3 Crea il...

audit-xss-cve-2020-7934

CVE 2020-7934 So führen Sie den CVE aus Anforderungen 1. docker Hinweise Es ist möglich, das Angriffsskript online zu stellen mit dem JS-Code http://yourjavascript.com/ Unser JS-Skript online für den Angriff html Befehle für die Konfiguration 1. Gehen Sie zum Hauptordner dieses Projekts 2. führen...

Liferay-CE-Portal-Java-Deserialization

Liferay-CE-Portal-Java-Deserialization Questa repo contiene il PoC per la vulnerabilità di esecuzione remota di codice di Liferay CE Portal! Payload Ho già condiviso i payload nel repository. Devi trovare la sintassi giusta con il metodo brute-force. I payload che condivido sono per una prova di...

Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution

Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services JSONWS. id: CVE-2020-7961 info: name: Liferay Portal Unauthenticated 7.2.1 CE GA2 - Remote Code Execution author: dwisiswant0 severity: critical description: Liferay Portal prior to 7.2.1 ...

liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934

XSS Archiviato Autenticato in LifeRay 7.2.1 GA2 tramite MyAccountPortlet eseguito dai Risultati di Ricerca In LifeRay versione 7.1.0 fino a 7.2.1 GA2 i campi Nome, Secondo Nome e Cognome per gli account utente sono tutti vulnerabili a un problema di XSS Archiviato. Qualsiasi utente può modificare...

Remote Code Execution (RCE)

com.liferay, com.liferay.object.service is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper restriction on the use of Groovy scripts in Object actions, which allows authenticated admin users with the Instance Administrator role to execute arbitrary Groovy scripts and...

CVE-2021-33332

Cross-site scripting XSS vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2021-33323

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user...

CVE-2021-33990

Liferay Portal 6.2.5 allows Command=FileUpload=File=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference link only shows frmfolders.html is accessible and does not demonstrate how an unauthorized user can upload a file...