java

Exploit Database - Exploits for Penetration Testers, Researchers, and Ethical Hackers/漏洞数据库

日期 标题 类别 作者
2020-10-29 WebLogic Server 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 – Unauthenticated RCE via GET request
  • webapps
    		•  Mohammed Althibyani
    2020-10-20 Apache Struts 2 – DefaultActionMapper Prefixes OGNL Code Execution
  • webapps
    		•  Jonatas Fil
    2020-10-19 Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in
  • webapps
    		•  Daniel Morris
    2020-09-09 Scopia XT Desktop 8.3.915.4 – Cross-Site Request Forgery (change admin password)
  • webapps
    		•  V1n1v131r4
    2020-09-07 ManageEngine Applications Manager 14700 – Remote Code Execution (Authenticated)
  • webapps
    		•  Hodorsec
    2020-08-10 ManageEngine ADSelfService Build prior to 6003 – Remote Code Execution (Unauthenticated)
  • webapps
    		•  Bhadresh Patel
    2020-07-26 ManageEngine Applications Manager 13 – ‘MenuHandlerServlet’ SQL Injection
  • webapps
    		•  aldorm
    2020-07-07 Exhibitor Web UI 1.7.1 – Remote Code Execution
  • webapps
    		•  Logan Sanderson
    2020-06-04 VMWAre vCloud Director 9.7.0.15498291 – Remote Code Execution
  • webapps
    		•  Tomas Melicher
    2020-05-18 Oracle Hospitality RES 3700 5.7 – Remote Code Execution
  • webapps
    		•  Walid Faour
    2020-05-15 ManageEngine Service Desk 10.0 – Cross-Site Scripting
  • webapps
    		•  Felipe Molina
    2020-05-12 TylerTech Eagle 2018.3.11 – Remote Code Execution
  • webapps
    		•  Anthony Cole
    2020-05-12 Cisco Digital Network Architecture Center 1.3.1.4 – Persistent Cross-Site Scripting
  • webapps
    		•  Dylan Garnaud
    2020-05-01 Apache OFBiz 17.12.03 – Cross-Site Request Forgery (Account Takeover)
  • webapps
    		•  Faiz Ahmed Zaidi
    2020-04-24 Furukawa Electric ConsciusMAP 2.8.1 – Remote Code Execution
  • webapps
    		•  LiquidWorm
    2020-04-16 Liferay Portal – Java Unmarshalling via JSONWS RCE (Metasploit)
  • remote
    		•  Metasploit
    2020-04-14 Oracle WebLogic Server 12.2.1.4.0 – Remote Code Execution
  • webapps
    		•  nu11secur1ty
    2020-04-14 WSO2 3.1.0 – Persistent Cross-Site Scripting
  • webapps
    		•  Raki Ben Hamouda
    2020-04-13 WSO2 3.1.0 – Arbitrary File Delete
  • webapps
    		•  Raki Ben Hamouda
    2020-03-27 Jinfornet Jreport 15.6 – Unauthenticated Directory Traversal
  • webapps
    		•  hongphukt
    2020-03-12 WatchGuard Fireware AD Helper Component 5.8.5.10317 – Credential Disclosure
  • webapps
    		•  RedTeam Pentesting GmbH
    2020-03-10 Sysaid 20.1.11 b26 – Remote Command Execution
  • webapps
    		•  Ahmed Sherif
    2020-02-24 ManageEngine EventLog Analyzer 10.0 – Information Disclosure
  • webapps
    		•  Scott Goodwin
    2020-02-17 LabVantage 8.3 – Information Disclosure
  • webapps
    		•  Joel Aviad Ossi