CVE-2012-4431

欢迎使用 Apache Tomcat！ 这是什么？ Apache Tomcat® 软件是 Java Servlet、JavaServer Pages、Java 表达式语言和 Java WebSocket 技术的开源实现。Java Servlet、JavaServer Pages、Java 表达式语言和 Java WebSocket 规范是在 Java Community Process 下开发的。 Apache Tomcat 软件是在开放和参与式的环境中开发，并根据 Apache 许可证版本 2 发布。Apache Tomcat...

damn-vulnerable-log4j-app

SnapAttack Log4j / CVE-2021-44228 / log4shell 资源 包含什么？ 该死的易受攻击的 Log4j 应用（Damn Vulnerable Log4j App） damn-vulnerable-log4j-app 包含一个基本的易受攻击的 Java Servlet，它使用 log4j 记录 User Agent、HTTP GET 和 POST 参数。它被打包为 .war 文件，可以部署到 Tomcat 等服务器上。有关更多信息，请参阅 README。 攻击工件 attack-artifacts 包含示例 EDR、系统和应用程序日志，以及针对...

EUVD-2011-0409

Malware in sbrugna...

EUVD-2011-0410

Malware in sbrugna...

EUVD-2000-0952

Malware in sbrugna...

EUVD-2011-0414

Malware in sbrugna...

EUVD-2000-0768

Malware in sbrugna...

EUVD-2014-3719

Malware in sbrugna...

EUVD-2022-4979

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 8 : tomcat (RHSA-2025:11333)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11333 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

ALSA-2025:11332 Important: tomcat9 security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

RHEL 9 : tomcat (RHSA-2025:3647)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3647 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: RCE due to TOCTOU...

Moderate: Red Hat Security Advisory: pki-servlet-engine security update

An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Cross-site Scripting (XSS)

Overview org.apache.felix:org.apache.felix.webconsole is a web based management console for OSGi frameworks. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderContent function in ServicesServlet.java, which allows attackers to inject scripts into services...

[SECURITY] Fedora 41 Update: tomcat-9.0.98-1.fc41

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

[SECURITY] Fedora 40 Update: tomcat-9.0.98-1.fc40

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

RHEL 9 : pki-servlet-engine (RHSA-2024:8528)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8528 advisory. Tomcat is the servlet engine that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java...

Important: Red Hat Security Advisory: pki-servlet-engine security update

An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Eclipse Jetty 安全漏洞

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty that originates from an attacker being able to launch a remote denial of service attack by exhausting server memory...