740 matches found
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +125 more potentially affected by CVE-2012-0393 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.1)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.2.0, =1.0.3, =0.6, =3.0-rc2, =5.0.1 - com.google.inject.extensions:guice-struts2-plugin 2.0 - com.google.inject.integration:guice-struts2-plugin 1.0 - com.googlecode.rapid-framework:rapid-core 4.0 and more Source cves:...
br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +216 more potentially affected by CVE-2012-0394 via org.apache.struts.xwork:xwork-core (>=2.2.1, <=2.3.16.3)
org.apache.struts.xwork:xwork-core MAVEN version =2.2.1, =2.0.0, =1.2.4, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =0.5.9, =1.2.0, =1.2.2 and more Source cves: CVE-2012-0394 Source advisory: GHSA-HMVJ-GC9Q-MG9P...
com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +23 more potentially affected by CVE-2007-4556 via opensymphony:xwork (>=2.0.0, <=2.0.3)
opensymphony:xwork MAVEN version =2.0.0, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.8 and more Source cves: CVE-2007-4556 Source advisory: GHSA-H7MF-QRM9-2848...
com.google.code.struts2webflow:struts2webflow-parent (1.0.4), com.google.code.struts2webflow:struts2webflow-plugin (1.0.4) +23 more potentially affected by CVE-2007-4556 via opensymphony:xwork (>=2.0.0, <=2.0.3)
opensymphony:xwork MAVEN version =2.0.0, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.5, =2.0.8 and more Source cves: CVE-2007-4556 Source advisory: OSV:GHSA-H7MF-QRM9-2848...
Unrestricted Upload of File with Dangerous Type in Apache Struts2
A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files. A patch exists as of version 2.5.22...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +299 more potentially affected by CVE-2012-1592 via org.apache.struts:struts2-core (>=2.0.5, <=2.5.20)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2012-1592 Source advisory: GHSA-8M5Q-CRQQ-6PMF...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +299 more potentially affected by CVE-2012-1592 via org.apache.struts:struts2-core (>=2.0.5, <=2.5.20)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2012-1592 Source advisory: OSV:GHSA-8M5Q-CRQQ-6PMF...
GHSA-8M5Q-CRQQ-6PMF Unrestricted Upload of File with Dangerous Type in Apache Struts2
A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files. A patch exists as of version 2.5.22...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +125 more potentially affected by CVE-2011-3923 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.1.1)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.2.0, =1.0.3, =0.6, =3.0-rc2, =5.0.1 - com.google.inject.extensions:guice-struts2-plugin 2.0 - com.google.inject.integration:guice-struts2-plugin 1.0 - com.googlecode.rapid-framework:rapid-core 4.0 and more Source cves:...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +125 more potentially affected by CVE-2011-3923 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.1.1)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.2.0, =1.0.3, =0.6, =3.0-rc2, =5.0.1 - com.google.inject.extensions:guice-struts2-plugin 2.0 - com.google.inject.integration:guice-struts2-plugin 1.0 - com.googlecode.rapid-framework:rapid-core 4.0 and more Source cves:...
Exploit for Expression Language Injection in Apache Struts
CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 CVE-20...
Exploit for Expression Language Injection in Apache Struts
Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062 remote c...
Exploit for Expression Language Injection in Apache Struts
CVE-2021-31805 Remote code execution S2-062 CVE-2021-31805...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +302 more potentially affected by CVE-2020-17530 +1 more via org.apache.struts:struts2-core (>=2.0.5, <=2.5.29)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2020-17530, CVE-2021-31805 Source advisory: OSV:GHSA-V8J6-6C2R-R27Chttps://vulner...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +302 more potentially affected by CVE-2020-17530 +1 more via org.apache.struts:struts2-core (>=2.0.5, <=2.5.29)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2020-17530, CVE-2021-31805 Source advisory: GHSA-V8J6-6C2R-R27Chttps://vulners.co...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +302 more potentially affected by CVE-2020-17530 +1 more via org.apache.struts:struts2-core (>=2.0.5, <=2.5.29)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2020-17530, CVE-2021-31805 Source advisory: MEND:CVE-2021-31805https://vulners.co...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +301 more potentially affected by CVE-2020-17530 via org.apache.struts:struts2-core (>=2.0.5, <=2.5.25)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2020-17530 Source advisory: OSV:GHSA-JC35-Q369-45PV...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +301 more potentially affected by CVE-2020-17530 via org.apache.struts:struts2-core (>=2.0.5, <=2.5.25)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2020-17530 Source advisory: GHSA-JC35-Q369-45PV...
Metasploit Wrap-Up
Log4Shell - Log4j HTTP Scanner Versions of Apache Log4j impacted by CVE-2021-44228 which allow JNDI features used in configuration, log messages, and parameters, do not protect against attacker controlled LDAP and other JNDI related endpoints. This module will scan an HTTP endpoint for the...