CVE-2022-42889-Analysis

CVE-2022-42889 Text4Shell रिपोर्ट यह Apache Commons Text CVE-2022-42889 के विश्लेषण रिपोर्ट और बंद परीक्षण वातावरण पर आधारित आक्रमण प्रदर्शन सामग्री को संकलित करने वाली रिपॉजिटरी है। दस्तावेज़ CVE-2022-42889 - भेद्यता विश्लेषण रिपोर्ट रिपॉजिटरी संरचना CVE-2022-42889-Report/ ├─ README.md ├─ report...

text4shell-exploit

text4shell-exploit एक कस्टम Python-आधारित प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट जो Text4Shell CVE-2022-42889 को लक्षित करता है, जो Apache Commons Text संस्करणों उदाहरण python3 text4shell.py 127.0.0.1 192.168.1.2 4444...

ICT287-CVE-2022-42889

ICT287-CVE-2022-42889 पूर्ण एक्सप्लॉइट सेटअप और पुनर्निर्माण रिपोर्ट के लिए कृपया CVE-2022-42889-Project Vulnerability Exploitation Report फ़ाइल देखें। एक्सप्लॉइट को बनाने और चलाने के लिए उपयोग किया गया VM इस रिपॉज़िटरी में शामिल नहीं है। CVE-2022-42889 Text4Shell के लिए सेटअप और एक्सप्लॉइट...

CVE-2025-24813

CVE-2025-24813 विवरण यह रिपॉजिटरी साइबर सुरक्षा खतरे के अनुकरण अभ्यास के लिए Windows Server 2019 Standard पर java 25.0.1 2025-10-21 LTS के साथ Tomcat v9.0.90 को त्वरित तैनाती हेतु स्पष्ट निर्देश प्रदान करने का लक्ष्य रखती है। exploit.py ysoserial-all.jar में CommonsCollections6 मॉड्यूल का उपयोग...

CLSA-2026-1790951905 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 2.7.16-tuxcare.2...

CLEANSTART-2026-JU98285 Uncontrolled Recursion vulnerability in Apache Commons

Security vulnerability affects the apache-nifi package. Uncontrolled Recursion vulnerability in Apache Commons...

CLEANSTART-2026-VJ67556 Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPaylo...

Security vulnerability affects the apache-nifi package. Spring Data Commons contains a vulnerability that can lead to a Denial of Service DoS condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker sends a specially crafted...

CLEANSTART-2026-PG68728 Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters

Security vulnerability affects the apache-nifi package. Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters...

CLEANSTART-2026-MV17823 Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution

Security vulnerability affects the apache-nifi package. Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution...

Rocky Linux 9 [CIQ] Security Update: apache-commons-beanutils (crlsa-2025_9114)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20259114 advisory. commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Tenable has extracted...

Rocky Linux 10.0 [CIQ] Security Update: apache-commons-beanutils / apache-commons-beanutils-javadoc (crlsa-2025_9166)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259166 advisory. commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Tenable has extract...

Rocky Linux 8 [CIQ] Security Update: apache-commons-collections / apache-commons-lang / bea-stax-api / etc Multiple Vulnerabilities (crlba-2019_3416)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlba-20193416 advisory. For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section. This advisory is provided by...

Rocky Linux 10.0 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14178)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514178 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...

Rocky Linux 10.0 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14179)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514179 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...

Rocky Linux 9 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14181)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514181 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...

FreeBSD : apache-commons-lang -- Uncontrolled Recursion vulnerability (a7738854-bc00-11f1-a829-dca632daf43b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a7738854-bc00-11f1-a829-dca632daf43b advisory. OSS-Fuzz, Gary Gregory reports: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue...

CentOS Linux 7 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (CENTOS7:CLSA-2026:1780929699)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780929699 advisory. - Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker...

Rocky Linux 9 [CIQ] Security Update: bcel (crlsa-2023_0005)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20230005 advisory. Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing CVE-2022-42920 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 8 [CIQ] Security Update: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / etc Multiple Vulnerabilities (crlsa-2025_9318)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20259318 advisory. apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default CVE-2019-10086 commons-beanutils: Apache Commons BeanUtils...

Rocky Linux 8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2025_14177)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202514177 advisory. tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125...