GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...

VulnerableGWTApp

Vulnerable GWT Web Application This is a version of the StockWatcher example application described in the GWT getting-started guide that has been modified to use the GWT "enhanced classes" feature, making it vulnerable to a Java deserialization attack. It should only be used for testing detection...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2026-107400 Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...

CVE-2026-107400

IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to a security flaw caused by improper authentication (CWE-287). This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution on the target system. To remediate this issue, users shou...

Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

Summary GWT Mock Authentication Privilege Escalation in IBM TRIRIGA Vulnerability Details CVEID:CVE-2026-107400 DESCRIPTION: IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper authentication. CWE:CWE-287: Improper Authentication CVSS Source: IBM CVSS...

hackazon

Hackazon Hackazon es un sitio de prueba vulnerable gratuito que es una tienda en línea construida con las mismas tecnologías utilizadas en las aplicaciones móviles y de cliente enriquecido actuales. Hackazon tiene una interfaz AJAX, flujos de trabajo estrictos y API RESTful utilizadas por una...

CVE-2026-101146

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146

A security flaw exists in Eleveo Quality Management 9.7.0 within the GWT RPC Handler component. Specifically, the UtilsService.createAndSaveAudit function in the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService is vulnerable to information disclosure . An attacker can perform a manipulat...

CVE-2026-101146 Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146 Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

EUVD-2026-88538

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101146: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

PT-2026-102357

Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A security flaw in the GWT RPC Handler component allows remote information disclosure. The issue resides in the UtilsService.createAndSaveAudit function within the...

org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2023-42346 via org.opencms:opencms-core (9.5.0)

org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...

org.opencms:opencms-components (9.5.3), org.opencms:opencms-gwt (9.5.3) +19 more potentially affected by CVE-2023-42343 via org.opencms:opencms-core (9.5.3)

org.opencms:opencms-core MAVEN version 9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.3 - org.opencms:opencms-gwt 9.5.3 - org.opencms:opencms-setup 9.5.3 -...

org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2023-42343 via org.opencms:opencms-core (9.5.0)

org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...

org.opencms:opencms-components (9.5.3), org.opencms:opencms-gwt (9.5.3) +19 more potentially affected by CVE-2023-42346 via org.opencms:opencms-core (9.5.3)

org.opencms:opencms-core MAVEN version 9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.3 - org.opencms:opencms-gwt 9.5.3 - org.opencms:opencms-setup 9.5.3 -...

org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2023-42344 via org.opencms:opencms-core (9.5.0)

org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...

org.opencms:opencms-components (9.0.1), org.opencms:opencms-gwt (9.0.1) +19 more potentially affected by CVE-2023-42343 via org.opencms:opencms-core (9.0.1)

org.opencms:opencms-core MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.0.1 - org.opencms:opencms-gwt 9.0.1 - org.opencms:opencms-setup 9.0.1 -...