apache struts 2.1.2 beta vulnerabilities and exploits

(subscribe to this query)

Multiple directory traversal vulnerabilities in Apache Struts 2.0.x prior to 2.0.12 and 2.1.x prior to 2.1.3 allow remote malicious users to read arbitrary files via a ..%252f (encoded dot dot slash) in a URI with a /struts/ path, related to (1) FilterDispatcher in 2.0.x and (2) ...

Apache Struts 2.0.6 Apache Struts 2.0.8 Apache Struts 2.0.9 Apache Struts 2.0.11 Apache Struts 2.0.11.1 Apache Struts 2.0.11.2 Apache Struts 2.1.2 Beta

1 EDB exploit

Apache Struts 2.x prior to 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote malicious users to conduct cross-site scripting (XSS) attacks via unspecified vectors involving language display.

Apache Struts 2.0.0 Apache Struts 2.0.1 Apache Struts 2.0.2 Apache Struts 2.0.3 Apache Struts 2.0.4 Apache Struts 2.0.5 Apache Struts 2.0.6 Apache Struts 2.0.7 Apache Struts 2.0.8 Apache Struts 2.0.9 Apache Struts 2.0.10 Apache Struts 2.0.11

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

Apache Log4j Apache Log4j 2.0 Siemens Sppa-t3000 Ses3000 Firmware Siemens Captial Siemens Captial 2019.1 Siemens Comos Siemens Desigo Cc Advanced Reports 4.0 Siemens Desigo Cc Advanced Reports 4.1 Siemens Desigo Cc Advanced Reports 4.2 Siemens Desigo Cc Advanced Reports 5.0 Siemens Desigo Cc Advanced Reports 5.1 Siemens Desigo Cc Info Center 5.0

2 Metasploit modules1246 Github repositories29 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook