Lucene search
+L

527 matches found

Kitploit
Kitploit
•added 2026/10/10 6:02 a.m.•15 views

text4shell-tools

commons-text-tools Collegamenti rapidi Clicca per trovare: Trova i file .jar di commons-text e le loro versioni Chiamate alle funzioni vulnerabili di commons-text Patch immediata sui file .jar di commons-text per disabilitare i comportamenti vulnerabili Esempio di scansione e patch Panoramica...

9.8CVSS7.8AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/10/09 11:08 p.m.•14 views

ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

9.8CVSS8.1AI score0.01602EPSS
SaveExploits1References4
Kitploit
Kitploit
•added 2026/10/09 10:38 p.m.•11 views

nahsra__antisamy_CVE-2022-29577_1-6-6-1

AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 7+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...

6.1CVSS6.6AI score0.01328EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/09 10:34 p.m.•9 views

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 8+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...

6.1CVSS6.8AI score0.01664EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/09 4:24 a.m.•23 views

VUL4J-59

jsoup: analizador HTML en Java que da sentido al HTML del mundo real. jsoup es una biblioteca Java para trabajar con HTML del mundo real. Proporciona una API muy conveniente para extraer y manipular datos, utilizando lo mejor de DOM, CSS y métodos similares a jQuery. jsoup implementa la...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/09 12:03 a.m.•13 views

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — also known as CVE-2021-44228 — is a critical vulnerability that enables remote code execution in systems using the Apache Foundation’s Log4j, which is an open-source Java library that is extensively used in commercial and open-source software products and utilitie...

10CVSS7.9AI score0.99999EPSS
SaveExploits383References2
Kitploit
Kitploit
•added 2026/10/08 8:57 p.m.•13 views

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

6.5AI score
SaveExploits0
OSV
OSV
•added 2026/10/08 12:38 a.m.•7 views

CLEANSTART-2026-AJ94302 JLine is a Java library for handling console input

Security vulnerability affects the trino package. JLine is a Java library for handling console input...

6.5CVSS5.9AI score0.00434EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/06 12:39 a.m.•8 views

CLEANSTART-2026-HM88327 JLine is a Java library for handling console input

CVE-2026-77420 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/01 4:33 p.m.•16 views

CVE-2026-85228

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

9.1CVSS6AI score0.00539EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/01 5:58 a.m.•29 views

ROOT-APP-MAVEN-CVE-2026-42581 CVE-2026-42581 in io.netty:netty-codec-http - Patched by Root

Root has patched CVE-2026-42581 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...

5.8CVSS6.8AI score0.00684EPSS
SaveExploits1
OSV
OSV
•added 2026/09/30 10:17 a.m.•12 views

DEBIAN-CVE-2026-93994

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...

8.1CVSS5.5AI score0.00315EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/30 10:17 a.m.•10 views

DEBIAN-CVE-2026-93996

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

6.5CVSS5.6AI score0.00333EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/30 9:34 a.m.•16 views

CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.7AI score0.00382EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•9 views

CVE-2026-93994: Missing Critical Step in Authentication

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshdconfig AuthenticationMethods "publickey,publickey"...

8.1CVSS5.5AI score0.00315EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/29 12:37 a.m.•8 views

CLEANSTART-2026-KE95640 JLine is a Java library for handling console input

CVE-2026-77420 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

9.8CVSS5.9AI score0.00123EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/29 12:35 a.m.•9 views

CLEANSTART-2026-YI14989 JLine is a Java library for handling console input

CVE-2026-77422 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

9.8CVSS7.2AI score0.00496EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/29 12:35 a.m.•10 views

CLEANSTART-2026-JE20809 JLine is a Java library for handling console input

CVE-2026-77421 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...

9.8CVSS5.9AI score0.00434EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/24 4:28 p.m.•13 views

SUSE CVE-2026-77423

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/23 9:06 p.m.•18 views

CVE-2026-77422

A flaw was found in JLine, a Java library for handling console input. The built-in grep command accepts user-controlled regular expressions and automatically wraps them, which can amplify backtracking in the regular expression engine. A remote attacker could exploit this by providing a specially...

7.5CVSS7.2AI score0.00496EPSS
SaveExploits0References10
Rows per page
Query Builder