EUVD-2022-2626

Malicious code in bioql PyPI...

PT-2025-40651

CVE-2025-61850 - Apache Struts Command Execution CVE ID : CVE-2025-61850 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-38643

CVE-2025-59673 - Apache Struts Cross-Site Scripting CVE ID : CVE-2025-59673 Published : Sept. 19, 2025, 3:15 a.m. | 1 hour, 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PocCollect

This repository is an offensive tool for vulnerability scanning and exploitation, specifically targeting various web applications and services. The primary vulnerability class targeted is SQL injection, with specific examples of exploits for Struts2, 08CMS, and ASPCMS. The tool is written in Pyth...

PT-2025-36434

CVE-2025-58908 - Apache Struts Command Injection Vulnerability CVE ID : CVE-2025-58908 Published : Sept. 6, 2025, 3:15 a.m. | 3 hours, 53 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PT-2025-36422

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 14.96.10 Frappe versions 15.0.0 through 15.71.0 Description An insecure endpoint parameter is susceptible to error-based SQL Injection due to a lack of validation. This allows for the retrieval of sensitive information...

Exploit for Files or Directories Accessible to External Parties in Apache Struts

CVE-2023-50164: A critical security vulnerability, identified...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts

CVE-2024-53677 A kind old vulnerability that effect Apache...

PT-2025-35497

CVE-2025-6992 - Apache Struts Command Evaluation Remote Code Execution CVE ID : CVE-2025-6992 Published : Aug. 30, 2025, 11:15 p.m. | 1 hour, 34 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

PoC: Apache Struts2 CVE-2017-5638 Safe Educational Demo...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via EditInfoItemStrutsAction accessible through c/portal/editinfoitem. An attacker can redirect users to arbitrary external sites by crafting a malicious URL. Remediation Upgrade com.liferay:com.liferay.info.impl to versio...

PT-2025-34651 · Undefined · Undefined

CVE-2025-58038 - Apache Struts Command Injection CVE ID : CVE-2025-58038 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-34692 · Undefined · Undefined

CVE-2025-58039 - Apache Struts Remote Code Execution CVE ID : CVE-2025-58039 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-34585 · Undefined · Undefined

CVE-2025-22861 - Apache Struts Command Injection CVE ID : CVE-2025-22861 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-34551 · Undefined · Undefined

CVE-2023-4143 - Apache Struts Remote Code Execution Vulnerability CVE ID : CVE-2023-4143 Published : Aug. 21, 2025, 11:15 p.m. | 1 hour ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details,...

PT-2025-34530 · Undefined · Undefined

CVE-2025-57824 - "Apache Struts Deserialization Vulnerability" CVE ID : CVE-2025-57824 Published : Aug. 21, 2025, 4:15 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PT-2025-33614 · Undefined · Undefined

CVE-2025-55724 - Apache Struts Remote Code Execution CVE ID : CVE-2025-55724 Published : Aug. 15, 2025, 3:15 a.m. | 2 hours, 46 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-33612 · Undefined · Undefined

CVE-2025-55722 - Apache Struts Cross-Site Scripting XSS CVE ID : CVE-2025-55722 Published : Aug. 15, 2025, 3:15 a.m. | 2 hours, 46 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Improper Output Neutralization For Logs

org.apache.struts, struts-extras is vulnerable to Improper Output Neutralization for Logs. The vulnerability is due to LookupDispatchAction printing untrusted input to logs without filtering, which allows an attacker to craft input that injects misleading log entries, potentially confusing human ...

PT-2025-33454 · Undefined · Undefined

CVE-2025-8395 - "CVE-xxxx: Apache Struts SQL Injection Vulnerability" CVE ID : CVE-2025-8395 Published : Aug. 12, 2025, 11:15 p.m. | 3 hours, 3 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link f...