mojarragadget

mojarragadget 描述 我们在 Mojarra 库中发现了一条新的 Java gadget 链，本仓库包含 2 个 POC，用于在 2.3 和 3.0 版本上复现该漏洞。 更多信息请参阅： https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-2.html 构建 版本 2.3 root@kitploit: cd...

GHSA-RJHX-C9QH-QH8F Cross-site Scripting in Eclipse Mojarra

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces, allows Reflected XSS because a client window field is mishandled...

UBUNTU-CVE-2018-14371

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications...