8 matches found
CVE-2020-13942
CVE-2020-13942 CVE-2020-13942 POC by Eugene Rojavski Original blog post about the vulnerability: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ There are two RCE vectors: through MVEL injection and through OGNL injection. Both vectors target different...
CVE-2020-13942byVulHub
CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...
apche_unomi_rce
CVE-2020-13942 Original blog post about the vulnerability: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ There are two RCE vectors: through MVEL injection and through OGNL injection. Both vectors target different code though the payloads look relativel...
unomi_exploit
Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...
CVE-2020-14883
CVE-2020-14883 Oracle WebLogic Server の認証済みリモートコード実行 RCE Oracle Fusion Middleware の Oracle WebLogic Server 製品における脆弱性（コンポーネント：Console）。影響を受けるサポート対象バージョンは 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0、14.1.1.0.0 です。HTTP を介してネットワークアクセスを持つ未認証の攻撃者が容易に悪用可能な脆弱性により、Oracle WebLogic Server...
Exploit for Improper Input Validation in Apache Unomi
PoC exploit for CVE-2020-13942, an unauthenticated RCE vulnerability through MVEL and OGNL injection in Apache Unomi. The exploit targets the context.js/json endpoint exposed by the Unomi server, allowing an attacker to execute arbitrary OS commands. Two RCE vectors are available: MVEL injection...
