PT-2024-26534 · Unknown · Mybatis Plus

Name of the Vulnerable Software and Affected Versions: Mybatis plus versions prior to 3.5.6 Description: A SQL injection issue allows remote attackers to obtain database information via a Boolean blind injection. The vendor notes that this can only occur in a misconfigured application, and the...

Exploit for CVE-2018-11776

PoC exploit for CVE-2018-11776, a Struts2 RCE vulnerability. The target product/service is Apache Struts 2, and the vulnerability class/vector is Remote Command Execution RCE. The probable entry point is the "help.action" URL, which is accessed via a specially crafted OGNL payload. The exploit is...