CVE Listesine Dön
CVE-2018-11776 CISA KEV · Aktif Sömürülüyor

struts2: Using specific results and namespaces can result in a remote code execution

CVSS Skor

9.8

EPSS İhtimal

%100.0

Risk Skoru

19.6

Yayın

8 yıl önce

Overview (Genel Bakış)Public Exploits (14)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
m4sk0ff/CVE-2018-11776
GitHub

PoC Script for the CVE-2018-11776 vuln

Public PoCKaynak güncellemesi: 09.09.2025 13:40:00
G
jiguangsdf/CVE-2018-11776
GitHub

CVE-2018-11776(S2-057) EXPLOIT CODE

Public PoCKaynak güncellemesi: 09.05.2024 13:33:10
G
sonpt-afk/CVE-2018-11776-FIS
GitHub

sonpt-afk/CVE-2018-11776-FIS

Public PoCKaynak güncellemesi: 23.06.2023 03:12:07
G
OzNetNerd/apche-struts-vuln-demo-cve-2018-11776
GitHub

Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776.

Public PoCKaynak güncellemesi: 03.09.2020 00:46:46
G
cved-sources/cve-2018-11776
GitHub

cve-2018-11776

Public PoCKaynak güncellemesi: 15.04.2021 21:30:12
G
arlyone/Apache-Struts-0Day-Exploit
GitHub

Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.

Public PoCKaynak güncellemesi: 07.09.2026 16:01:40
G
freshdemo/ApacheStruts-CVE-2018-11776
GitHub

freshdemo/ApacheStruts-CVE-2018-11776

Public PoCKaynak güncellemesi: 04.09.2023 14:39:51
G
xfox64x/CVE-2018-11776
GitHub

Creating a vulnerable environment and the PoC

Public PoCKaynak güncellemesi: 20.03.2023 13:29:20
G
cucadili/CVE-2018-11776
GitHub

Investigation of CVE-2018-11776 vulnerability that allows attackers to remotely execute code and gain control over Apache Struts-based applications.

Public PoCKaynak güncellemesi: 08.10.2019 23:46:28
G
Ekultek/Strutter
GitHub

Proof of Concept for CVE-2018-11776

Public PoCKaynak güncellemesi: 05.03.2025 11:11:20
E
Apache Struts 2 - Namespace Redirect OGNL Injection (Metasploit)
Exploit-DB

Apache Struts 2 - Namespace Redirect OGNL Injection (Metasploit)

Exploit referansıKaynak güncellemesi: 10.09.2018 00:00:00
E
Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (1)
Exploit-DB

Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (1)

Exploit referansıKaynak güncellemesi: 26.08.2018 00:00:00
E
Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (2)
Exploit-DB

Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 - Remote Code Execution (2)

Exploit referansıKaynak güncellemesi: 25.08.2018 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11776.yaml
Nuclei

Nuclei: Apache Struts2 S2-057 - Remote Code Execution

Exploit referansı

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2018-11776"