Lucene search
+L

8 matches found

Kitploit
Kitploit
added 2026/09/21 1:39 p.m.14 views

Spring-CVE

CVE de Spring Esto incluye CVE-2022-22963, una vulnerabilidad de acceso a recursos de expresión/SpEL de Spring, así como CVE-2022-22965, el RCE de spring-webmvc/spring-webflux denominado «SpringShell». CVE-2022-22963 En las versiones 3.1.6, 3.2.2 y anteriores no soportadas de Spring Cloud Functio...

9.8CVSS8.3AI score0.99938EPSS
SaveExploits137
Kitploit
Kitploit
added 2026/09/20 2:57 a.m.13 views

spring-RCE-CVE-2022-22965

Vulnerability Overview Recently, Spring released a major CVE vulnerability. The CVE information states: "A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as ...

9.8CVSS7.7AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/09/19 10:02 p.m.9 views

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Versión Spring Framework 5.2.20 y 5.3.18 Versión parcheada: Spring Framework 5.3.18 y 5.2.20 Spring Boot 2.6.6 y 2.5.12 Detalles Spring Core es el componente central de Spring Framework. Es la base para construir otros componentes en el ecosistema de Spring...

9.8CVSS7.9AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/09/16 2:29 a.m.9 views

spring-framework-rce

spring-framework-rce CVE-2022-22965 Requisitos del entorno 1. tomcat8 8 Método de uso 1. Descargue springframeworkrce-0.0.1-SNAPSHOT.zip, descomprímalo y cámbiele el nombre a ROOT.war. 2. Reemplace la carpeta ROOT o el archivo ROOT.war en la carpeta webapps dentro de tomcat. 3. Cambie a la ruta b...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits105References1
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2022-22965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105References2
OSV
OSV
added 2022/04/01 11:15 p.m.18 views

UBUNTU-CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is...

9.8CVSS7.3AI score0.99638EPSS
SaveExploits105References8
OSV
OSV
added 2022/03/31 6:30 p.m.58 views

GHSA-36P3-WJMG-H94X Remote Code Execution in Spring Framework

Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability known as Spring4Shell. Impact A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the...

9.8CVSS7.4AI score0.99638EPSS
SaveExploits105References18
Spring Security Advisories
Spring Security Advisories
added 2022/03/31 12:00 a.m.18 views

Spring Framework RCE via Data Binding on JDK 9+

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is...

9.8CVSS8AI score0.99638EPSS
SaveExploits105References2
Rows per page
Query Builder