cve-2023-22515

CVE-2023-22515 ここでは、Burp Suiteを使用した脆弱性の悪用ロジックについて説明します。 悪用するには、属性 bootstrapStatusProvider.applicationConfig.setupComplete の値を false に変更する必要があります。つまり、次のリクエストを実行します。 Confluenceをセットアップモードに切り替えるハンドル: GET /server-info.action?bootstrapStatusProvider.applicationConfig.setupComplete=false HTTP/1.1 Host:...

CVE-2023-22515-check

免責事項 このスクリプトは、教育およびテスト目的のみを対象としています。責任を持って使用し、対象の Confluence インスタンスをテストする許可を得ていることを確認してください。無許可のテストは違法かつ非倫理的です。 Confluence CVE-2023-22515 脆弱性検出スクリプト このスクリプトは、Confluence インスタンスが CVE-2023-22515 に対して脆弱かどうかをチェックします。CVE-2023-22515 は、Atlassian Confluence Data Center および Server バージョン 8.0.0 以降に影響する重大な...

CVE-2026-103244

The ground-station application, in versions prior to 0.8.0 , is vulnerable to an authentication bypass within the setup.restore command. This flaw allows unauthenticated attackers to execute arbitrary SQL during the initial first-run setup mode. By invoking setup.restore via Socket.IO , an attack...

CVE-2026-103244 ground-station before 0.8.0 Authentication Bypass via setup.restore

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

CVE-2026-62222

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

CVE-2026-62222

Technical details about CVE-2026-62222 (affected product/component, root cause, impact, patch/versions, exploit info) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-62222

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

EUVD-2026-45110

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

CVE-2026-62222 OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

CVE-2026-62222 OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

CVE-2026-62222 OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

CVE-2026-62222: Inclusion of Functionality from Untrusted Control Sphere

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

PT-2026-60632

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level...

EUVD-2019-4206

Malware in sbrugna...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect

ScreenConnect CVE-2024-1709 Exploit Tool A Python tool to che...

CVE-2019-12612

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

CVE-2019-12612

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

Design/Logic Flaw

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

CVE-2019-12612: Undefined Security Weakness

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup...

CVE-2017-3881: Cisco Catalyst switches remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Your Catalyst switches whether to enable the telnet in? If Yes, it would have to be careful. This article will be to introduce the reader for the equipped with the latest firmware the Catalyst 2960 switch the remote code execution vulnerability proof-of-concept attack technique. Specific exploit...