Louis Sato – Noise https://noise.getoto.net The collective thoughts of the interwebz Fri, 10 Sep 2021 18:32:40 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Metasploit Wrap-Up https://noise.getoto.net/2021/09/10/metasploit-wrap-up-23/ Fri, 10 Sep 2021 18:32:40 +0000 http://noise.getoto.net/?guid=3538f350fd08e0cfd124821c57a21c64

Confluence Server OGNL Injection

Our own wvu along with Jang added a module that exploits an OGNL injection (CVE-2021-26804)in Atlassian Confluence's WebWork component to execute commands as the Tomcat user. CVE-2021-26804 is a critical remote code execution vulnerability in Confluence Server and Confluence Data Center and is actively being

]]> Metasploit Wrap-Up https://noise.getoto.net/2021/01/29/metasploit-wrap-up-5/ Fri, 29 Jan 2021 21:09:49 +0000 http://noise.getoto.net/?guid=b65d62b8e1ad22c908d33d641fd0a55e