CVE-2021-26086

This exploit demonstrates an arbitrary file read vulnerability in Atlassian Jira Server Data Center via path traversal. The PoC includes multiple HTTP GET requests targeting sensitive files like web.xml and seraph-config.xml.

The repository provides functional HTTP request examples demonstrating CVE-2021-26086, a path traversal vulnerability in Atlassian Jira Server/Data Center 8.4.0. The PoC includes crafted GET requests to read sensitive files (e.g., web.xml, seraph-config.xml) via a directory traversal payload.

This repository contains a functional exploit for CVE-2021-26084, an OGNL injection vulnerability in Confluence Server. The exploit allows unauthenticated remote code execution by injecting malicious OGNL expressions via the queryString parameter.

This repository contains a functional Go-based exploit for CVE-2021-26084 (mislabeled as CVE-2021-26086 in the repo name), targeting Confluence OGNL injection for remote code execution. The exploit sends a crafted payload to execute arbitrary commands via JavaScript evaluation in the ScriptEngineManager.