349 matches found
CVE-2026-34486
CVE-2026-34486 Bypass de fail-open en EncryptInterceptor en el clustering de Apache Tomcat Tribes que conduce a RCE no autenticado mediante deserialización de Java. Afecta: 11.0.19+, 10.1.53+, 9.0.116+. Corregido en: 11.0.21, 10.1.54, 9.0.117. Encontrado y reportado por Bartlomiej Dmitruk...
Unlearnable-Clusters
Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples Código relativo a "Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples", CVPR2023. Preprocesamiento Primero, ejecuta preprocess.py para renombrar el directorio del conjunto de datos. python preprocess.py --config...
Firmware_Slap
Firmware Slap Firmware Slap combina análisis concolico con agrupación de funciones para el descubrimiento de vulnerabilidades y similitud de funciones en firmware. Firmware Slap está construido como una serie de bibliotecas y exporta la mayoría de la información como pickles o JSON para la...
cosa-nostra
Cosa Nostra Cosa Nostra es un conjunto de herramientas de agrupamiento de software de código abierto centrado en el análisis de malware. Puede crear árboles filogenéticos de muestras de malware binarias que son estructuralmente similares. Fue lanzado inicialmente durante SyScan360 Shanghái 2016...
Clustering Local File Inclusion
Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access. id: CVE-2021-43496 inf...
telfhash
Trend Micro ELF Hash telfhash telfhash es un hash de símbolos para archivos ELF, al igual que imphash es un hash de importaciones para archivos PE. Con telfhash, puedes agrupar archivos ELF por similitud basada en símbolos. Esto es particularmente útil para agrupar muestras maliciosas. Si una...
permhash
Permhash es un marco extensible para calcular el hash de los permisos declarados aplicados a las extensiones de navegador basadas en Chromium y a los APK, lo que permite agrupamiento, búsqueda y pivoteo similar al hash de importaciones y al hash de cabeceras rich. Permhash actualmente es capaz de...
cve-2026-25854
CVE-2026-25854 — Occasionally open redirect Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2026-01-30 Affected Vendor: Apache Affected Product: Tomcat 11.0.x / 10.1.x / 9.x Severity: 6.1 Medium CWE: CWE-601 URL Redirection to Untrusted Site 'Open Redirect' Status: Under...
CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization
CVE-2026-34486 Derivación de fail-open en EncryptInterceptor en el clustering de Apache Tomcat Tribes que conduce a RCE no autenticado mediante deserialización de Java. Afectados: 11.0.19+, 10.1.53+, 9.0.116+. Corregido en: 11.0.21, 10.1.54, 9.0.117. Descubierto y reportado por Bartlomiej Dmitruk...
Cooper-ndss-2022
Cooper: Pruebas del código de enlace de lenguajes de script mediante mutación cooperativa Cooper utiliza mutación cooperativa para probar el código de enlace de los lenguajes de script y encontrar problemas de seguridad de memoria. La mutación cooperativa modifica simultáneamente el código de los...
HTTP-Basma
Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include
A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...