jetty-line-check

jetty-line-check 你这套 Jetty或 Spring Boot 带进来的 Jetty,中了 2026 年这六条 CVE 的哪几条 —— 而官方叫你升的那一版,在 Maven Central 上到底存不存在? 主打 CVE-2026-2332GHSA-355h-qmc2-wpwf,high / CVSS v3 7.4:jetty-http 的 chunked 请求走私。 2026-09-17 官方又发了同族的 CVE-2026-19203LF EXT.TERM 走私,high / CVSS v4 8.3:它的 9.4 线覆盖到 9.4.63 , 官方叫你升 9.4.64 —...

tomcat85-check

tomcat85-check 还在跑 Tomcat 8.5?这个工具告诉你到底中了哪些 2025 年的 CVE —— 因为这个问题,你在官方页面、NVD、扫描器那里都问不出完整答案。 零依赖单 jar,离线跑,不联网、不上传任何东西。 它解决什么 Tomcat 8.5 于 2024-03-31 EOL ,终版是 8.5.1002024-03-19 发布。 之后 Apache 仍在 CVE 记录里逐条声明「8.5 也中招」,而说这话的地方最少人去看 。 Apache 官方 9.x 安全页列出的CVE-2025- 共 17 条,其中 14 条逐字写着: The following...

msxml4-remediation

Устранение уязвимостей MSXML 4.0 PowerShell Скрипт PowerShell для устранения проблем безопасности, связанных с Microsoft XML Core Services MSXML 4.0 , который не поддерживается и часто отмечается сканерами уязвимостей. Этот скрипт отменяет регистрацию .dll-файлов MSXML 4 и переименовывает их. Это...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == Проблема У заказчика есть старый сервер CentOS7, который уже EOL На CentOS7 работает более старая версия openssl, которая затронута уязвимостью link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 Как следует пропатчить openssl на старом CentOS7 для устранения...

EUVD-2026-68911

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

Exploit for CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injec...

CVE-2026-15486: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub42026C of the file /goform/toolsddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched remotel...

PT-2026-57531

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub 42026C of the file /goform/tools ddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched...

CVE-2026-15484: Buffer Copy without Checking Size of Input

A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub41EC14 of the file /goform/toolsnslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The vendor explains: "We are unable to...

[SECURITY] [DLA 4548-1] distro-info-data database update

Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 25, 2026 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u11 This is a routine update of the distro-info-data database for Debian LTS users. It updates t...

Debian dla-4548 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4548 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview UmbracoForms is a tool that makes creating contact forms, entry forms and questionnaires just as easy as using Word. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the dynamic SOAP client generation...

EUVD-2017-16965

Malware in sbrugna...

EUVD-2024-51082

Malicious code in bioql PyPI...

EUVD-2025-12381

Malicious code in bioql PyPI...

EUVD-2022-32839

Malicious code in bioql PyPI...

EUVD-2024-0512

Malicious code in bioql PyPI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

CVE-2025-52982

Juniper Junos OS MX Series with MS-MPC SIP ALG is affected. When two or more SIP-processing service sets run, an improper resource shutdown can cause the MS-MPC to crash and restart, enabling unauthenticated network-based DoS. Affected versions: all before 21.2R3-S9; 21.4 from 21.4R1; 22.2 before...