java

java 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Brocade Network Advisor 14.4.1 – Unauthenticated Remote Code Execution

Exploit Title: Brocade Network Advisor - Unauthenticated Remote Code Execution

2019-05-21 Jakub Palaczynski webapps

Oracle CTI Web Service – ‘EBS_ASSET_HISTORY_OPERATIONS’ XML Entity Injection

# Exploit Title: Oracle CTI Web Service XML Entity Exp.

2019-05-21 omurugur webapps

Spring Cloud Config 2.1.x – Path Traversal (Metasploit)

##

2019-04-30 Dhiraj Mishra webapps

Apache Pluto 3.0.0 / 3.0.1 – Persistent Cross-Site Scripting

Exploit Title: Stored XSS

2019-04-26 Dhiraj Mishra webapps

ManageEngine ServiceDesk Plus 9.3 – User Enumeration

# Exploit Title: ManageEngine ServiceDesk Plus - 9.3 User enumeration vulnerability

2019-04-08 Operat0r webapps

Jenkins 2.137 and Pipeline Groovy Plugin 2.61 – ACL Bypass and Metaprogramming Remote Code Execution (Metasploit)

##

2019-03-19 Metasploit remote

Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 – Remote Code Execution

#!/usr/bin/env python

2019-02-25 wetw0rk webapps

Jenkins Plugin Script Security < 1.50/Declarative < 1.3.4.1/Groovy < 2.61.1 - Remote Code Execution (PoC)

In the exploitation, the target is always escalating the read primitive or write primitive to code execution! From th...

2019-02-19 orange webapps

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in AlternateSubstitutionSubtable::process

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in ExtractBitMap_blocClass

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in OpenTypeLayoutEngine::adjustGlyphPositions

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

OpenMRS Platform < 2.24.0 - Insecure Object Deserialization

Insecure Object Deserialization on the OpenMRS Platform

2019-02-05 Bishop Fox webapps

Rundeck Community Edition < 3.0.13 - Persistent Cross-Site Scripting

# Exploit Title: Rundeck Community Edition before 3.0.13 Multiple Stored

2019-01-28 Ishaq Mohammed webapps

Apache Spark – (Unauthenticated) Command Execution (Metasploit)

##

2018-11-30 Metasploit remote

Atlassian Jira – (Authenticated) Upload Code Execution (Metasploit)

##

2018-11-14 Metasploit remote

Apache OFBiz 16.11.04 – XML External Entity Injection

# Exploit Title: Apache OFBiz 16.11.04 - XML External Entity Injection

2018-10-24 Jamie Parfet webapps

Oracle Siebel CRM 8.1.1 – CSV Injection

# Exploit Title: Oracle Siebel CRM 8.1.1 - CSV Injection

2018-10-22 Sarath Nair webapps

ManageEngine AssetExplorer 6.2.0 – Cross-Site Scripting

# Exploit Title: ManageEngine AssetExplorer 6.2.0 - Cross-Site Scripting

2018-10-01 Ismail Tasdelen webapps

H2 Database 1.4.196 – Remote Code Execution

# Exploit Title: H2 Database 1.4.196 - Remote Code Execution

2018-10-01 h4ckNinja webapps

ManageEngine Desktop Central 10.0.271 – Cross-Site Scripting

# Exploit Title: ManageEngine Desktop Central 10.0.271 - Cross-Site Scripting

2018-09-27 Ismail Tasdelen webapps

CA Release Automation NiMi 6.5 – Remote Command Execution

# Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution

2018-09-17 Jakub Palaczynski remote

Wavemaker Studio 6.6 – Server-Side Request Forgery

# Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery (SSRF).

2018-08-06 Gionathan Reale webapps

LAMS < 3.1 - Cross-Site Scripting

# Exploit Title: LAMS < 3.1 - Cross-Site Scripting

2018-08-06 Nikola Kojic webapps

Fortify Software Security Center (SSC) 17.x/18.1 – XML External Entity Injection

Details

2018-07-16 alt3kx webapps

Manage Engine Exchange Reporter Plus – Remote Code Execution (Metasploit)

##

2018-07-13 Metasploit remote

ManageEngine Exchange Reporter Plus < Build 5311 - Remote Code Execution

# Exploit Title: ManageEngine Exchange Reporter Plus

2018-07-04 Kacper Szurek webapps

Liferay Portal < 7.0.4 - Server-Side Request Forgery

1. ADVISORY INFORMATION

2018-06-26 Mehmet Ince webapps

MaDDash 2.0.2 – Directory Listing

# Exploit Title: MaDDash 2.0.2 - Directory Listing

2018-06-20 ManhNho webapps

SearchBlox 8.6.7 – XML External Entity Injection

# Exploit Title: SearchBlox 8.6.7 Out-Of-Band XML eXternal Entity (OOB-XXE)

2018-06-04 Ahmet Gurel webapps

SearchBlox 8.6.6 – Cross-Site Request Forgery

# Exploit Title: CSRF Privilege Escalation (Creation of an administrator

2018-05-30 Ahmet Gurel webapps

ERPnext 11 – Cross-Site Scripting

# Exploit Title: ERPnext 11.x.x - Cross-Site Scripting

2018-05-22 Veerababu Penugonda webapps

GitBucket 4.23.1 – Remote Code Execution

# Exploit Title: GitBucket 4.23.1 Unauthenticated RCE

2018-05-21 Kacper Szurek webapps

ManageEngine Recovery Manager Plus 5.3 – Cross-Site Scripting

# Exploit Title: ManageEngine Recovery Manager Plus 5.3 (Build 5330) - Persistent Cross-Site Scripting

2018-05-21 Ahmet Gurel webapps

RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory < 20180516-0 >

2018-05-16 SEC Consult webapps