java

java 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in

# Exploit Title: Jenkins 2.63 - Sandbox bypass in pipeline: Groovy plug-in

2020-10-19 Daniel Morris webapps

Scopia XT Desktop 8.3.915.4 – Cross-Site Request Forgery (change admin password)

# Exploit Title: Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)

2020-09-09 V1n1v131r4 webapps

ManageEngine Applications Manager 14700 – Remote Code Execution (Authenticated)

#!/usr/bin/python3

2020-09-07 Hodorsec webapps

ManageEngine ADSelfService Build prior to 6003 – Remote Code Execution (Unauthenticated)

# Exploit Title: ManageEngine ADSelfService Plus 6000 – Unauthenticated Remote Code Execution

2020-08-10 Bhadresh Patel webapps

ManageEngine Applications Manager 13 – ‘MenuHandlerServlet’ SQL Injection

# Exploit Title: ManageEngine Applications Manager 13 - 'MenuHandlerServlet' SQL Injection

2020-07-26 aldorm webapps

Exhibitor Web UI 1.7.1 – Remote Code Execution

# Exploit Title: Exhibitor Web UI 1.7.1 - Remote Code Execution

2020-07-07 Logan Sanderson webapps

VMWAre vCloud Director 9.7.0.15498291 – Remote Code Execution

# Exploit Title: VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution

2020-06-04 Tomas Melicher webapps

Oracle Hospitality RES 3700 5.7 – Remote Code Execution

# Exploit Title: Oracle Hospitality RES 3700 5.7 - Remote Code Execution

2020-05-18 Walid Faour webapps

ManageEngine Service Desk 10.0 – Cross-Site Scripting

# Exploit Title: ManageEngine Service Desk 10.0 - Cross-Site Scripting

2020-05-15 Felipe Molina webapps

TylerTech Eagle 2018.3.11 – Remote Code Execution

# Exploit Title: TylerTech Eagle 2018.3.11 - Remote Code Execution

2020-05-12 Anthony Cole webapps

Cisco Digital Network Architecture Center 1.3.1.4 – Persistent Cross-Site Scripting

# Exploit Title: Cisco Digital Network Architecture Center 1.3.1.4 - Persistent Cross-Site Scripting

2020-05-12 Dylan Garnaud webapps

Apache OFBiz 17.12.03 – Cross-Site Request Forgery (Account Takeover)

# Exploit Title: Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)

2020-05-01 Faiz Ahmed Zaidi webapps

Furukawa Electric ConsciusMAP 2.8.1 – Remote Code Execution

# Exploit Title: Furukawa Electric ConsciusMAP 2.8.1 - Remote Code Execution

2020-04-24 LiquidWorm webapps

Liferay Portal – Java Unmarshalling via JSONWS RCE (Metasploit)

##

2020-04-16 Metasploit remote

Oracle WebLogic Server 12.2.1.4.0 – Remote Code Execution

# Exploit Title: Oracle WebLogic Server 12.2.1.4.0 - Remote Code Execution

2020-04-14 nu11secur1ty webapps

WSO2 3.1.0 – Persistent Cross-Site Scripting

# Title: WSO2 3.1.0 - Persistent Cross-Site Scripting

2020-04-14 Raki Ben Hamouda webapps

WSO2 3.1.0 – Arbitrary File Delete

# Title: WSO2 3.1.0 - Arbitrary File Delete

2020-04-13 Raki Ben Hamouda webapps

Jinfornet Jreport 15.6 – Unauthenticated Directory Traversal

# Exploit Title: Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal

2020-03-27 hongphukt webapps

WatchGuard Fireware AD Helper Component 5.8.5.10317 – Credential Disclosure

# Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure

2020-03-12 RedTeam Pentesting GmbH webapps

Sysaid 20.1.11 b26 – Remote Command Execution

# Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution

2020-03-10 Ahmed Sherif webapps

ManageEngine EventLog Analyzer 10.0 – Information Disclosure

# Exploit Title: ManageEngine EventLog Analyzer 10.0 - Information Disclosure

2020-02-24 Scott Goodwin webapps

LabVantage 8.3 – Information Disclosure

# Exploit Title: LabVantage 8.3 - Information Disclosure

2020-02-17 Joel Aviad Ossi webapps

Cisco Data Center Network Manager 11.2.1 – ‘LanFabricImpl’ Command Injection

#!/usr/bin/python

2020-02-06 mr_me webapps

Cisco Data Center Network Manager 11.2.1 – ‘getVmHostData’ SQL Injection

#!/usr/bin/python

2020-02-06 mr_me webapps

Cisco Data Center Network Manager 11.2 – Remote Code Execution

#!/usr/bin/python

2020-02-06 mr_me webapps

Kronos WebTA 4.0 – Authenticated Remote Privilege Escalation

# Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation

2020-02-05 nxkennedy webapps

Jira 8.3.4 – Information Disclosure (Username Enumeration)

# Exploit Title: Jira 8.3.4 - Information Disclosure (Username Enumeration)

2020-02-03 Mufeed VH webapps

Liferay CE Portal 6.0.2 – Remote Command Execution

# Exploit Title: Liferay CE Portal 6.0.2 - Remote Command Execution

2020-01-29 Berk Dusunur webapps

ManageEngine Network Configuration Manager 12.2 – ‘apiKey’ SQL Injection

# Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection

2020-01-21 Ertebat Gostar Co webapps

Jenkins Gitlab Hook Plugin 1.4.2 – Reflected Cross-Site Scripting

# Exploit Title: Jenkins Gitlab Hook Plugin 1.4.2 - Reflected Cross-Site Scripting

2020-01-16 Ai Ho webapps

Oracle Weblogic 10.3.6.0.0 – Remote Command Execution

# Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution

2020-01-09 james webapps

Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape

# Exploit Title: Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape

2020-01-08 hantwister webapps

JetBrains TeamCity 2018.2.4 – Remote Code Execution

# Exploit Title: JetBrains TeamCity 2018.2.4 - Remote Code Execution

2020-01-08 hantwister remote

Cisco DCNM JBoss 10.4 – Credential Leakage

# Exploit Title: Cisco DCNM JBoss 10.4 - Credential Leakage

2020-01-08 hantwister remote

Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting

# Exploit Title: Zendesk App SweetHawk Survey 1.6 - Persistent Cross-Site Scripting

2019-12-17 MTK webapps

Apache Olingo OData 4.0 – XML External Entity Injection

#############################################################

2019-12-11 Compass Security webapps

Oracle Siebel Sales 8.1 – Persistent Cross-Site Scripting

# Exploit Title : Oracle Siebel Sales 8.1 - Persistent Cross-Site Scripting

2019-12-09 omurugur webapps

Jenkins build-metrics plugin 1.3 – ‘label’ Cross-Site Scripting

# Exploit Title: Jenkins build-metrics plugin 1.3 - 'label' Cross-Site Scripting

2019-11-08 vesche webapps

Apache Solr 8.2.0 – Remote Code Execution

# Title: Apache Solr 8.2.0 - Remote Code Execution

2019-11-01 @l3x_wong webapps

IBM Bigfix Platform 9.5.9.62 – Arbitrary File Upload

# Exploit Title: IBM Bigfix Platform 9.5.9.62 - Arbitrary File Upload

2019-10-07 Jakub Palaczynski webapps

AVCON6 systems management platform – OGNL Remote Command Execution

# Exploit Title: AVCON6 systems management platform - OGNL - Remote root command execution

2019-09-11 Nassim Asrir webapps

Cisco Data Center Network Manager – Unauthenticated Remote Code Execution (Metasploit)

##

2019-09-03 Metasploit remote

Jenkins Dependency Graph View Plugin 0.13 – Persistent Cross-Site Scripting

# Exploit Title: Persistent XSS - Dependency Graph View Plugin(v0.13)

2019-07-12 Ishaq Mohammed webapps

Sahi Pro 8.0.0 – Remote Command Execution

# Exploit Title: Sahi Pro V8.0.0 - Unauthenticated Remote Command Execution

2019-07-12 AkkuS webapps

Spring Security OAuth – Open Redirector

# Exploit Title: Open Redirector in spring-security-oauth2

2019-06-17 Riemann webapps

Zoho ManageEngine ServiceDesk Plus 9.3 – ‘PurchaseRequest.do’ Cross-Site Scripting

# Exploit Title: Zoho ManageEngine ServiceDesk Plus 9.3 Cross-Site Scripting via PurchaseRequest.do

2019-06-04 Vingroup webapps

Zoho ManageEngine ServiceDesk Plus 9.3 – ‘SearchN.do’ Cross-Site Scripting

# Exploit Title: Zoho ManageEngine ServiceDesk Plus 9.3 Cross-Site Scripting via SearchN.do

2019-06-04 Vingroup webapps

Zoho ManageEngine ServiceDesk Plus 9.3 – ‘SolutionSearch.do’ Cross-Site Scripting

# Exploit Title: Zoho ManageEngine ServiceDesk Plus 9.3 Cross-Site Scripting via SolutionSearch.do

2019-06-04 Vingroup webapps

Zoho ManageEngine ServiceDesk Plus 9.3 – ‘SiteLookup.do’ Cross-Site Scripting

# Exploit Title: Zoho ManageEngine ServiceDesk Plus 9.3 Cross-Site Scripting via SiteLookup.do

2019-06-04 Vingroup webapps

Oracle Application Testing Suite – WebLogic Server Administration Console War Deployment (Metasploit)

##

2019-05-29 Metasploit remote