cve.2022-26134

Atlassian Confluence CVE-2022-26134

Aug 12, 2024 · attack.initial-access attack.execution attack.t1190 attack.t1059 cve.2022-26134 ·

Detects spawning of suspicious child processes by Atlassian Confluence server which may indicate successful exploitation of CVE-2022-26134

Java Payload Strings

Aug 12, 2024 · cve.2022-26134 cve.2021-26084 attack.initial-access attack.t1190 ·

Share on:

Detects possible Java payloads in web access logs

Potential OGNL Injection Exploitation In JVM Based Application

Aug 12, 2024 · attack.initial-access attack.t1190 cve.2017-5638 cve.2022-26134 ·

Share on:

Detects potential OGNL Injection exploitation, which may lead to RCE. OGNL is an expression language that is supported in many JVM based systems. OGNL Injection is the reason for some high profile RCE's such as Apache Struts (CVE-2017-5638) and Confluence (CVE-2022-26134)