primefaces

从餐桌到代码：通过餐厅POS系统中的RCE漏洞之旅 这一次，我们偶然发现了一个存在于多个餐厅POS应用程序中的漏洞 XETUX，后者是餐厅监控和自动化解决方案。在巴拿马，它是许多餐厅广泛使用的工具。 该漏洞是一个RCE（远程代码执行），允许攻击者在未经验证的情况下执行代码，并在目标系统上获得权限。 1. 枚举 我们发现Xetux应用程序中存在一个名为primefaces的库，该库用于生成PDF。于是，我们决定在Shodan中搜索以识别潜在目标。 root@kitploit: http.title:"@XETUX" country:PA 搜索结果显示40个结果，全球范围内有334个。...

CVE-2017-1000486

CVE-2017-1000486 PrimeFaces 5.x EL表达式注入（CVE-2017-1000486）的概念验证利用工具，可用于在目标上实现远程代码执行。 漏洞描述 你可以在 Minded Security 博客 上找到关于该漏洞的精彩描述。 使用方法 该利用工具提供了一个帮助函数，可打印所有重要参数： root@kitploit: ./primefaces.py --help PrimeFaces 5.x EL injection exploit CVE-2017-1000486 by MOGWAI LABS...

CVE-2017-1000486

CVE-2017-1000486 이것은 CVE-2017-1000486의 PoC로, RCE를 달성하는 데 사용되는 표준 함수getClass, exec 등에 대한 블랙리스트 사전식 검사를 우회하고, Padding Oracle을 통해 primefaces 시크릿을 검색하여 익스플로잇 시 노이즈를 최대한 줄이는 데 유용한 몇 가지 페이로드를 포함합니다. 이 주제와 관련된 작업을 해주신 @pimps , @federicodotta , @AonCyberLabs 님께 감사드립니다. 설명 이 PoC는 모든 애플리케이션과 사용 가능한 웹 서버...

CVE-2017-1000486

CVE-2017-1000486 PrimeFaces 5.x 向けリモートコード実行エクスプロイト - EL インジェクション CVE-2017-1000486 これは基本的に Mogwailabs が作成したエクスプロイトと同じものですが、インターネットにアクセスできない、またはファイアウォールのアウトバウンドトラフィックがブロックされているクローズド環境でも動作するように編集されています。 HTTP レスポンスヘッダーで結果を確認できるため、旧エクスプロイトでブラインド RCE を試していた場合でも、もうブラインドではありません。 使用方法 root@kitploit: pytho...

pwnfaces

😛 pwnfaces Primefaces 5.X EL 인젝션 익스플로잇 🕵️ pwnfaces란 무엇인가요? 🕵️ pwnfaces 는 CVE-2017-1000486 PrimeFaces 5.X의 EL 인젝션으로 정의된 취약점을 악용하기 위해 만들어진 Golang 도구입니다. ⚡ 설치 / 시작하기 pwnfaces를 설치하고 사용하는 간단한 가이드입니다. root@kitploit: 1. go install github.com/oppsec/pwnfaces@latest 2. pwnfaces -u...

CVE-2026-15538

A flaw was found in PrimeFaces PrimeReact. A remote attacker can exploit a weakness in the ObjectUtils.mutateFieldData function within the component API. This allows for the improper modification of object prototype attributes, potentially leading to unexpected behavior or further attacks. This...

EUVD-2026-43294

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack is possible to be...

CVE-2026-15538

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack is possible to be...

CVE-2026-15538

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack is possible to be...

CVE-2026-15538 primefaces primereact API ObjectUtils.mutateFieldData prototype pollution

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack is possible to be...

CVE-2026-15538

CVE-2026-15538 affects PrimeFaces PrimeReact up to 10.9.8. The vulnerability is in the API function ObjectUtils.mutateFieldData, where manipulation of the argument Field enables prototype attribute modification (prototype pollution). The attack is stated as remotely exploitable. The issue notes t...

CVE-2026-15538 primefaces primereact API ObjectUtils.mutateFieldData prototype pollution

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the argument Field causes improperly controlled modification of object prototype attributes. The attack is possible to be...

CVE-2020-10544

An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation...

EUVD-2021-1068

Malware in sbrugna...

Metasploit Weekly Wrap-Up 12/13/2024

It’s raining RCEs! It's the second week of December and the weather forecast announced another storm of RCEs in Metasploit-Framework land. This weekly release includes RCEs for Moodle e-Learning platform, Primefaces, WordPress Really Simple SSL and CyberPanel along with two modules to change...

Multiple vulnerabilities in UNIVERSAL PASSPORT RX

Overview UNIVERSAL PASSPORT RX provided by Japan System Techniques Co., Ltd. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2023-42427 Dependency on vulnerable third-party component CWE-1395 Known vulnerability in Primefaces library used in the product Cross-sit...

JVN#43215077: Multiple vulnerabilities in UNIVERSAL PASSPORT RX

UNIVERSAL PASSPORT RX provided by Japan System Techniques Co., Ltd. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Base Score 5.4 CVE-2023-42427 Dependency on vulnerable third-party component CWE-1395 Known vulnerability in...

PrimeTek PrimeFaces Remote Code Execution (CVE-2017-1000486)

Binary data primetekprimefacescve-2017-1000486.nbin...

Cross-site Scripting (XSS)

primefaces is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of the input values in AvatarRenderer.java allowing an attacker to inject maliciously crafted script via writeText function...

PrimeFaces 4.0.x < 4.0.25 / 5.x < 5.2.21 / 5.3.x < 5.3.8 Expression Language Injection

In affected versions of PrimeFaces, an expression language injection vulnerability exists that would allow an unauthenticated user to execute arbitrary code due to a weak encryption flaw. No source data...