st2-046-poc

Struts2 Content-Disposition filename null-byte variant of CVE-2017-5638 Struts2 Security Bulletin S2-046 A null byte \x00 in a request¡¯s Content-Disposition header filename field can trigger a InvalidFileNameException with the same client controlled filename string in the exception message that ...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability: Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. PoC: root@kitploit: git clone...

CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

CVE-2022-26134

「💥」CVE-2022-26134 Description In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17...

CVE-2020-17531

CVE-2020-17530 Apache Struts2 framework is a web framework for developing Java EE web applications. Apache Struts disclosed S2-061 Struts remote code execution vulnerability CVE-2020-17530 on December 08, 2020. When using certain tags and other cases, there may be an OGNL expression injection...

CVE-2022-26134

POC - Atlassian Confluence OGNL Injection Remote Code Execution RCE Vulnerability CVE-2022-26134 Tested on Confluence Version 7.13.6 Setting up environment Clone the repository root@kitploit: docker-compose up -d On http://localhost:8090 you shall see confluence up and running. Next, get an...

BotCon

BotCon Attlasian Confluence Un-Authenticated Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution...

CVE-2022-26134

CVE-2022-26134 POC Descripción root@kitploit: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Ejecuta python3 confluence....

through_the_wire

Through the Wire Through the Wire es un exploit de prueba de concepto para CVE-2022-26134, una vulnerabilidad de inyección OGNL que afecta a Atlassian Confluence Server y Data Center versiones = 7.13.6 LTS y = 7.18.0 "Latest". Originalmente fue un zero-day explotado en la naturaleza. Aviso del...

through_the_wire

Through the Wire Through the Wire is a proof of concept exploit for CVE-2022-26134, an OGNL injection vulnerability affecting Atlassian Confluence Server and Data Center versions = 7.13.6 LTS and = 7.18.0 "Latest". This was originally a zero-day exploited in-the-wild. Vendor advisory Volexity...

CVE-2021-26084

Confluence Server Webwork Pre-Auth OGNL Injection CVE-2021-26084 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. An OGNL injection vulnerability exists that allows an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data...

CVE-2022-26134

CVE-2022-26134 Confluence OGNL expression injected RCECVE-2022-26134 poc and exp Update Add sandbox bypass, high version supported. Usage root@kitploit: Usage: python Confluencecve202226134RCE.py http://example.com/ The script will auto check target is vulnerable, and enter a pseudo-interactive...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Descripción Confluence vulnerabilidad de ejecución remota de código no autorizada : CVE-2022-26134 Confluence es un wiki corporativo basado en web desarrollado por la empresa australiana de software Atlassian. El 2 de junio de 2022, Atlassian publicó un aviso de segurida...

CVE-2020-17530

CVE-2020-17530 s2-061 prueba de concepto:...

CVE-2021-26084

CVE-2021-26084 Introducción Este informe proporciona una visión general de CVE-2021-26084 - inyección OGNL en Webwork de Confluence Server 1 que permitiría a un usuario autenticado ejecutar código arbitrario en una instancia de Confluence Server o Data Center. TL;DR Confluence Server / Data Cente...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 Un script simple para explotar RCE en Struts 2 S2-053CVE-2017-12611 Uso root@kitploit: exploit.py Ejemplo root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day

CVE-2025-54253：深入剖析 Adobe AEM-Forms 零日漏洞 — 渗透测试人员与防御者必须采取的行动 TL;DR： Adobe Experience Manager AEM Forms on JEE（≤ 6.5.23.0）存在一个可通过网络访问的关键漏洞（CVE-2025-54253），该漏洞利用被滥用的 Struts/OGNL 端点，允许未经身份验证的远程代码执行。另一个伴生 XXE 漏洞（CVE-2025-54254）可实现任意文件读取。这些是影响广泛的企业级问题 — 请立即修补、搜寻入侵指标，并应用强化配置和检测控制。 为何此事至关重要 AEM...

CVE-2022-26134

CVE-2022-26134 （CVE-2022-26134）an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server Require：Python2 or Python3 Usage: root@kitploit: python cve202226134.py -url targeturl -cmd "ls -al" python cve202226134.py -url targeturl...

CVE-2019-0230

¿Qué es esto? Este es un proyecto de prueba simple para S2-059 que puede utilizarse para analizar los detalles de esta vulnerabilidad. Cómo usar Paso 1: Usa IDEA para importar este proyecto Paso 2: Configura el servidor Tomcat Paso 3: Utiliza el navegador para acceder a...