495 matches found
CVE-2021-34045
CVE-2021-34045 Massen-Scan-PoC für nicht autorisierten Zugriff auf Druid Tool-Nutzung python3 CVE-2021-34045.py -u http://127.0.0.1:1111 Einzelne URL testen python3 CVE-2021-34045.py -f url.txt Massen-Scan Haftungsausschluss Für jegliche direkten oder indirekten Folgen und Verluste, die durch die...
CVE-2021-36749
CVE-2021-36749 Apache Druid lecture de fichier arbitraire Version concernée : version = 0.21.1 Les deux méthodes suivantes peuvent être utilisées Méthode en ligne de commande root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST ...
CVE-2021-36749
CVE-2021-36749 Apache Druid LoadData: Schwachstelle zum Lesen beliebiger Dateien Code By: Junsheng @ Orange Cybersecurity Labor Orange Cybersecurity Labor https://0range.team/ 0x00 Risikoübersicht Dieses Tool ist nur für autorisierte Sicherheitstests bestimmt. Nicht autorisierte illegale Angriffe...
CVE-2023-29839
CVE-2023-29839 Hotel Druid 3.0.4 Vulnerabilità di Cross Site Scripting Memorizzato Link CMS: https://www.hoteldruid.com/ Versione Affetta: 3.0.4 Gravità e CVSS: 5.4 Media | Vettore: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Esiste una vulnerabilità di Cross Site Scripting XSS Memorizzato in...
Apache Druid Kafka Connect - Remote Code Execution
The vulnerability has the potential to enable a remote attacker with authentication to run any code on the system. This is due to unsafe deserialization that occurs during the configuration of the connector through the Kafka Connect REST API id: CVE-2023-25194 info: name: Apache Druid Kafka Conne...
Apache Druid - Remote Code Execution
Apache Druid is susceptible to remote code execution because by default it lacks authorization and authentication. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server. id: CVE-2021-25646 info: name: Apache Druid - Remote Cod...
Apache-Druid-CVE-2021-25646-Exploit
Exploit RCE di Apache Druid CVE-2021-25646 Exploit in Python per l'esecuzione remota di codice in Apache Druid tramite iniezione di codice JavaScript CVE-2021-25646. Descrizione Questo script sfrutta una vulnerabilità RCE in Apache Druid versioni 0.20.1 che consente l'esecuzione arbitraria di...
CVE-2021-34045
Informações Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Data do exploit：01.06.2021 Autor do exploit：Al1ex@Heptagram Página inicial do fornecedor：https://github.com/201206030/novel-plus Versão afetada：novel-plus-install-v3.5.3 Descrição：O sistema Novell plus carrega o...
CVE-2022-22909
CVE-2022-22909 Descrizione È stata trovata una vulnerabilità di Code Injection nell'applicazione Hotel Druid v3.0.3, che un attaccante potrebbe sfruttare per eseguire codice remoto sul server. Per uno sfruttamento riuscito, un attaccante deve avere il privilegio di aggiungere una nuova stanza...
CVE-2021-37136 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-GRG4-WF29-R9VV vulnerabilities
Vulnerabilities for packages: druid...
CVE-2021-37137 vulnerabilities
Vulnerabilities for packages: druid...
CVE-2022-41404 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-9VJP-V76F-G363 vulnerabilities
Vulnerabilities for packages: druid...
GHSA-JR6H-R7VG-F9MC vulnerabilities
Vulnerabilities for packages: druid...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: trino, kserve-modelmesh, thingsboard, wavefront-proxy, wildfly, infinispan, druid, zipkin, opensearch, apicurio-registry, logstash, spark, neo4j, keycloak, apache-activemq-artemis, flyway, akhq, apache-pulsar, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: trino, kserve-modelmesh, thingsboard, wavefront-proxy, wildfly, infinispan, druid, zipkin, opensearch, apicurio-registry, logstash, spark, neo4j, keycloak, apache-activemq-artemis, flyway, akhq, apache-pulsar, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-54428 vulnerabilities
Vulnerabilities for packages: sonarqube, druid, kserve-modelmesh, opensearch, thingsboard, apicurio-registry, logstash, cassandra-reaper, nrjmx, cloudwatch-exporter, akhq...
GHSA-V3JC-474W-2WM6 vulnerabilities
Vulnerabilities for packages: sonarqube, druid, kserve-modelmesh, opensearch, thingsboard, apicurio-registry, logstash, cassandra-reaper, nrjmx, cloudwatch-exporter, akhq...
CVE-2026-73508 vulnerabilities
Vulnerabilities for packages: celeborn, apache-pulsar, druid, opensearch, strimzi-kafka-operator, thingsboard, zipkin, apicurio-registry, management-api-for-apache-cassandra-5.0, spark, tez, keycloak, apache-nifi, akhq...