CVE-2026-94114 Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

CVE-2026-94114

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

CVE-2026-94114

Apache Commons BCEL versions before 6.13.0 are vulnerable to a symbolic name mapping issue. The BCEL component caches attacker-controlled classes using self-declared names without sufficient validation. This flaw allows subsequent lookups and name-keyed verification results to point to different ...

CVE-2026-94114 Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

CVE-2026-94114 Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

xwiki__xwiki-commons_CVE-2023-36471_14-10-5

XWiki Commons تُعد XWiki Commons مكتبات تقنية مشتركة بين العديد من مشاريع XWiki عالية المستوى. يمكن استخدام هذه المكتبات في مشاريع خارج النظام البيئي لـ XWiki، وهي مكتبات عامة وغير مرتبطة بمجال الويكي. تُعد XWiki Platform وXWiki Commons وXWiki Rendering جزءًا من منصة تطوير البرمجيات XWiki.org. وي...

Apache Commons JCS 3.2.1 Unauthenticated Java Deserialization

Summary JCS is a distributed caching system written in Java. It is intended to speed up applications by providing a means to manage cached data of various dynamic natures. Like any caching system, JCS is most useful for high read, low put applications. Latency times drop sharply and bottlenecks...

PT-2026-107219

Name of the Vulnerable Software and Affected Versions Apache Commons BCEL versions prior to 6.13.0 Description BCEL caches attacker-controlled classes under their self-declared names without validating the requested name. This allows subsequent lookups and name-keyed verification results to refer...

PT-2026-107178

Name of the Vulnerable Software and Affected Versions Apache Commons BCEL versions prior to 6.13.0 Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This occurs when...

Apache Commons JCS 3.2.1 Unauthenticated Deserialization

Apache Commons JCS version 3.2.1 contains an unauthenticated Java deserialization vulnerability in its TCP Lateral Cache listener that could allow remote code execution when the lateral cache is enabled. / Apache Commons JCS 3.2.1 Unauthenticated Java Deserialization Vendor: The Apache Software...

text4shell

text4shell عرض توضيحي لـ CVE-2022-42889 text4shell ثغرة تنفيذ التعليمات البرمجية عن بُعد. التفاصيل في لا تذعر!: CVE-2022-42889 ثغرة Text4shell في Apache Commons Text...

jenkinsci__docker-commons-plugin_CVE-2022-20617_1-17

Docker Commons API Plugin pour Jenkins Plugin d'API, qui fournit les fonctionnalités communes partagées pour divers plugins liés à Docker. Résumé API pour gérer les empreintes d'images Docker et de conteneurs Identifiants et localisation du Docker Registry Identifiants et localisation du démon...

CLSA-2026-1791205000 TuxCare security update for commons-configuration:commons-configuration (1 CVE)

TuxCare rebuilt commons-configuration:commons-configuration to address 1 CVE. Fixed in 1.10-tuxcare.3...

Text4shell--Automated-exploit---CVE-2022-42889

Installer maven - maven-linux //Pour le hacking automatisé : 1../install.sh 2../exploit.sh 3.Pour supprimer l'application, utilisez ./stopapp.sh //Pour le hacking manuel : 1. Installation de Maven pour créer le fat jar mvn clean install 2. Construction Docker docker build --tag=text4shell . 3...

ACEDcup

ACEDcup أداة ACEDcup هي مولد حمولة payload لهجوم إلغاء التسلسل الثنائي لجافا ACED لـ Apache Commons FileUpload الإصدار = 1.3 CVE-2013-2186 و Oracle JDK الإصدار 7u40 يعمل الهجوم حتى مع الإصدارات الأحدث من المكتبة أو جافا. يمكننا رفع أي محتوى في أي مجلد، لكن لا يمكننا التحكم في اسم الملف شيء مثل...

Astra Linux – Vulnerability in Commons-BeanUtils

Apache Commons has a vulnerability related to improper access control. A special BeanIntrospector class was added in version 1.9.2. This can be used to prevent attackers from using the declared class property of Java enum objects to gain access to the classloader. However, this protection was not...

CLSA-2026-1791192746 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 2.1.10.RELEASE-tuxcare.1...

CVE-2025-24813

CVE-2025-24813 Tomcat PoC PoC pour un environnement CTF/lab autorisé. Il exploite CVE-2025-24813 via l'ecriture PUT partielle d'un fichier de session Tomcat, puis declenche la deserialisation avec JSESSIONID. Prerequis Python 3 Module Python requests Java JDK java et javac Le fichier inclus...

CVE-2019-14450

Ce depot n’a pas de fichier README...

CVE-2022-42889

Application de test CVE-2022-42889 Ce dépôt contient une application simple utilisant Apache Commons Text 1.9 qui est vulnérable à CVE-2022-42889. Étapes pour reproduire l'exploitation Étapes pour reproduire l'exploitation dans un dépôt Copiez DemoApplication.java dans votre dépôt. Exécutez la...