Spring Framework 拒绝服务漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://spring.io/security/cve-2024-22233
• https://spring.io/security/cve-2026-22745
• https://spring.io/security/cve-2026-22740
• https://spring.io/security/cve-2026-22741
• https://spring.io/security/cve-2024-38809
• https://nic.cczu.edu.cn/2024/0226/c1305a353307/page.htm
• https://www.venustech.com.cn/new_type/aqtg/20240123/26919.html
• https://avd.aliyun.com/detail?id=AVD-2024-38809

Related Vulnerabilities

• PoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal
• PoCfrappe-default-login: Frappe Framework - Default Login Credentials
• SpringBlade /api/blade-log/api/list SQL 注入漏洞
• SpringBlade /api/blade-user/list SQL 注入漏洞
• Spring Actuator 未授权访问漏洞
• PoCspringboot-sbom: Spring Boot Actuator SBOM - Exposure
• PoCCVE-2025-41242: Spring Framework - Path Traversal
• PoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges Actuator
• PoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web Frameworks
• Pentaho /pentaho/j_spring_security_check 默认口令漏洞
• PoCCVE-2026-22739: Spring Cloud Config Server - Path Traversal
• PoCspringboot-x-application-context: Spring Boot `X-Application-Context` Header Exposure
• Serverless Framework 未授权 命令注入漏洞