CVE-2021-26084

CVE-2021-26084 Inyección OGNL en Confluence CVE-2021-26084 es una vulnerabilidad de inyección de Object-Graph Navigation Language OGNL en la implementación de Webwork de Atlassian Confluence. Un atacante remoto no autenticado podría explotar esta falla enviando una solicitud especialmente diseñad...

CVE-2021-26084

CVE-2021-26084 Prueba de concepto para CVE-2021-26084. Inyección OGNL en Webwork de Confluence Server RCE sin autenticación Descargo de responsabilidad Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. Limitaciones de comandos Debido al payload,...

CVE-2021-26084

CVE-2021-26084 Introducción Este informe proporciona una visión general de CVE-2021-26084 - inyección OGNL en Webwork de Confluence Server 1 que permitiría a un usuario autenticado ejecutar código arbitrario en una instancia de Confluence Server o Data Center. TL;DR Confluence Server / Data Cente...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence Server Webwork OGNL injection Existe una vulnerabilidad de inyección OGNL que permitiría a un usuario autenticado y, en algunos casos, a un usuario no autenticado, ejecutar código arbitrario en una instancia de Confluence Server o Data Center. IMPORTANTE Este exploit...

CVE-2021-26084_PoC

CVE-2021-26084 PoC | Inyección OGNL en Webwork de Confluence Server Existe una vulnerabilidad de inyección OGNL que permitiría a un usuario autenticado y, en algunos casos, a un usuario no autenticado, ejecutar código arbitrario en una instancia de Confluence Server o Data Center. Mi lucha por...

CVE-2021-26084

Confluence Server Webwork Pre-Auth OGNL Injection CVE-2021-26084 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. An OGNL injection vulnerability exists that allows an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data...

EUVD-2008-6498

Malware in sbrugna...

EUVD-2006-0453

Malware in sbrugna...

EUVD-2006-6612

Malware in sbrugna...

EUVD-2006-2836

Malware in sbrugna...

EUVD-2025-27136

Malicious code in bioql PyPI...

CVE-2025-40642

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642 Reflected Cross-Site Scripting (XSS) in WebWork

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642 Reflected Cross-Site Scripting (XSS) in WebWork

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

CVE-2025-40642

CVE-2025-40642 is a reflected Cross-Site Scripting (XSS) vulnerability in WebWork exploited via the q and engine parameters in /search. Affected software is WebWork; the vulnerability stems from improper handling of user-supplied input in the search query, enabling remote code execution in the co...

PT-2025-36458

Name of the Vulnerable Software and Affected Versions: WebWork affected versions not specified Description: A Reflected Cross-Site Scripting XSS issue exists in WebWork, potentially enabling remote attackers to execute arbitrary code. The vulnerability is triggered through the q and engine reques...

CVE-2025-40642: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...

Codester WebWork - PHP Search Engine Script 跨站脚本漏洞

Codester WebWork - PHP Search Engine Script is an open source search engine script from Codester. A cross-site scripting vulnerability exists in Codester WebWork - PHP Search Engine Script, which stems from the fact that incorrect manipulation of the parameters q and engine can lead to reflective...

Atlassian Jira Service Management 4.14.0 < 4.20.6 Seraph Authentication Bypass

According to its self-reported version number, the Atlassian Jira Service Management application running on the remote host is version 4.14.0 prior to 4.20.6 or 4.21.0 prior to 4.22.6. It is, therefore, affected by a authentication bypass vulnerability in Jira Seraph which may allow remote,...