Lucene search
+L

2553 matches found

Positive Technologies
Positive Technologies
added 2025/11/15 12:0 a.m.5 views

PT-2025-47100

CVE-2025-65068 - Apache Struts Command Injection CVE ID : CVE-2025-65068 Published : Nov. 15, 2025, 4:15 a.m. | 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/15 12:0 a.m.7 views

PT-2025-47117

CVE-2025-65072 - Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-65072 Published : Nov. 15, 2025, 4:15 a.m. | 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.4 views

PT-2025-47032

CVE-2025-12703 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-12703 Published : Nov. 12, 2025, 11:15 p.m. | 3 hours, 44 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link fo...

6.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.10 views

PT-2025-48488

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 6.7.0 Apache Struts versions 7.0.0 through 7.0.3 Description A denial of service issue exists in Apache Struts due to incomplete cleanup of temporary or auxiliary resources during the processing of multipar...

7.8CVSS7.3AI score0.01486EPSS
SaveExploits0References26
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.8 views

PT-2025-45571

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 through 5.5.2-156 Description An authenticated regular user can create a photo collection with a collection name containing HTML/JavaScript payloads. This makes the Manage Photos feature susceptible to Stored Cross-Si...

9CVSS5.6AI score0.00412EPSS
SaveExploits1References7
GithubExploit
GithubExploit
added 2025/10/29 12:38 p.m.219 views

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Web Vulnerability to POC Generator Web Vulnerability to POC G...

10CVSS7.5AI score0.99999EPSS
SaveExploits45
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.8 views

PT-2025-43744

CVE-2025-62830 - Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-62830 Published : Oct. 24, 2025, 3:15 a.m. | 4 hours, 2 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

6.3AI score
SaveExploits0References1
CNVD
CNVD
added 2025/10/17 12:0 a.m.19 views

ZTE ZXCDN Struts Remote Code Execution Vulnerability

ZTE ZXCDN is a unified network management platform from China's ZTE Corporation ZTE. ZTE ZXCDN suffers from a Struts remote code execution vulnerability, which can be exploited by an attacker to remotely execute commands with non-root privileges...

9.8CVSS6.5AI score0.00748EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/10/15 4:2 p.m.129 views

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts

PoC exploit for CVE-2024-53677, a vulnerability in Apache Struts...

9.8CVSS8.1AI score0.78198EPSS
SaveExploits15
RedhatCVE
RedhatCVE
added 2025/10/15 1:45 p.m.15 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.5AI score0.00748EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/14 9:15 a.m.7 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00748EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/14 8:54 a.m.17 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS0.00748EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 8:54 a.m.7 views

CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.2AI score0.00748EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 8:54 a.m.21 views

CVE-2025-46581

CVE-2025-46581 affects ZTE ZXCDN, with an Apache Struts remote code execution vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges. Several connected sources corroborate a Struts-based RCE affecting ZXCDN, but none provide concrete product version(s) o...

9.8CVSS8.2AI score0.00748EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.8 views

ZTE ZXCDN 安全漏洞

ZTE ZXCDN is a unified network management platform from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCDN, which originates from an Apache Struts remote code execution vulnerability that could lead to remote command execution with non-root privileges...

9.8CVSS8AI score0.00748EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.7 views

PT-2025-41861

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN product affected versions not specified Description The ZTE ZXCDN product is susceptible to a remote code execution RCE issue stemming from a flaw in the Struts framework. An attacker who does not need to be authenticated can execute...

9.8CVSS7.7AI score0.00748EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
added 2025/10/13 12:0 a.m.27 views

VulnCheck KEV: CVE-2013-2134

Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135...

9.3CVSS7.6AI score0.70211EPSS
SaveIn wildExploits2References184
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.5 views

PT-2025-41533

CVE-2025-6046 - CVE-2019-25033: Apache Struts Unauthenticated Remote Code Execution Vulnerability CVE ID : CVE-2025-6046 Published : Oct. 7, 2025, 11:15 p.m. | 3 hours, 24 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severit...

9.8CVSS6.4AI score0.01783EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.4 views

PT-2025-41498

CVE-2025-10904 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2025-10904 Published : Oct. 7, 2025, 11:15 p.m. | 3 hours, 24 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

6.4AI score
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.19 views

EUVD-2018-0563

Malware in sbrugna...

8.1CVSS7.5AI score0.99396EPSS
SaveExploits23References12
Rows per page
Query Builder