Lucene search
+L

35 matches found

Kitploit
Kitploit
•added 2026/10/10 4:35 p.m.•12 views

Ratpack-1

Ratpackとは? Ratpackは、高性能なWebアプリケーションを作成するためのシンプルで高性能なツールキットです。 RatpackはJavaとNettyのイベント駆動型ネットワーキングエンジンをベースに構築されています。 APIはGroovyとJava 8向けに最適化されています。 オプションのGoogle Guice統合により、アプリケーションのサイズを管理された方法で拡張する基盤を提供します。 オプションのGradleビルドタイムサポートにより、アプリケーションの構築とテストが簡単になります。 http://www.ratpack.io コントリビュートを希望される方へ...

5.8AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/28 3:40 p.m.•26 views

Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...

5.7CVSS6.9AI score0.02451EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/28 3:40 p.m.•10 views

SUSE-SU-2026:3390-1 Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: + Add SystemProperties.getPathString, Supplier + Add JavaVersion.JAVA25 + Add JavaVersion.JAVA26 + Add SystemUtils.ISJAVA25 + Add...

5.3CVSS6.5AI score0.02451EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/28 12:00 a.m.•26 views

Linux Distros Unpatched Vulnerability : CVE-2026-56091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This...

8.2CVSS5.9AI score0.00669EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/06/25 10:16 a.m.•13 views

Authentication Bypass by Alternate Name

Overview org.apache.shiro:shiro-web is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name in the shiro-guice module when...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/06/25 10:16 a.m.•17 views

Authentication Bypass by Alternate Name

Overview Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name in the shiro-guice module when deployed in a web servlet context. An attacker can gain unauthorized access by sending specially crafted HTTP requests. Remediation Upgrade...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
NVD
NVD
•added 2026/06/25 9:16 a.m.•31 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS0.00669EPSS
SaveExploits1References1
OSV
OSV
•added 2026/06/25 9:16 a.m.•17 views

DEBIAN-CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/06/25 9:16 a.m.•17 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
OSV
OSV
•added 2026/06/25 9:16 a.m.•24 views

UBUNTU-CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/06/25 8:45 a.m.•12 views

CVE-2026-56091 Apache Shiro: Authentication bypass in Guice-Web integration

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/06/25 8:45 a.m.•59 views

CVE-2026-56091 Apache Shiro: Authentication bypass in Guice-Web integration

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS0.00669EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/06/25 8:45 a.m.•22 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2026/06/25 8:45 a.m.•53 views

EUVD-2026-39230

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

9.8CVSS7.7AI score0.23326EPSS
SaveExploits2References1
CVE
CVE
•added 2026/06/25 8:45 a.m.•81 views

CVE-2026-56091

CVE-2026-56091 involves Apache Shiro when used with the shiro-guice module in a web servlet context. A specially crafted HTTP request may cause an authentication bypass. Affected: all Apache Shiro versions through 2.x; 3.0.0-alpha-1 is affected when using shiro-guice in this context. Remediation:...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2026/06/25 8:45 a.m.•32 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•30 views

PT-2026-52220

CVE-2026-56091: Apache Shiro: Authentication bypass in Guice-Web integration https://t.co/tNgFNw4p66 CVE-2026-56130: Apache Shiro: Remember-me cookie isn't checked for expiry on the server https://t.co/wMSxMMxBZs...

8.2CVSS5.9AI score0.00669EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•2 views

CVE-2026-56091: Authentication Bypass by Alternate Name

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•43 views

PT-2026-52222

CVE-2026-56091: Apache Shiro: Authentication bypass in Guice-Web integration https://t.co/tNgFNw4p66 CVE-2026-56130: Apache Shiro: Remember-me cookie isn't checked for expiry on the server https://t.co/wMSxMMxBZs...

8.2CVSS5.9AI score0.00669EPSS
SaveExploits1References1
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•39 views

[SECURITY] Fedora 40 Update: google-guice-5.1.0-11.fc40

Put simply, Guice alleviates the need for factories and the use of new in your Java code. Think of Guice's @Inject as the new new. You will still need to write factories in some cases, but your code will not depend directly on them. Your code will be easier to change, unit test and reuse in other...

8.8CVSS7AI score0.02578EPSS
SaveExploits3
Rows per page
Query Builder