CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK + Apache XML...

CLSA-2026-1771459787 TuxCare security update for org.mozilla:rhino (1 CVE)

TuxCare rebuilt org.mozilla:rhino to address 1 CVE. Fixed in 1.7.10-tuxcare.1...

Mozilla Rhino 资源管理错误漏洞

Mozilla Rhino is an open source JavaScript engine from Mozilla Corporation. A resource management error vulnerability exists in Mozilla Rhino versions 1.8.1, 1.7.15.1, and prior to 1.7.14.1, which stems from the improper handling of floating point numbers by the toFixed function, which could lead...

Exploit for CVE-2023-21939

JDK CVE-2023-21939 文章链接https://mp.weixin.qq.com/s?biz=M...

JVN#34535327: HtmlUnit vulenerable to arbitrary code execution

HtmlUnit is a Java-based library which provides web browser functionality to Java programs, and it supports JavaScript evaluation with embedded Mozilla Rhino engine. Mozilla Rhino engine offers a feature to make Java objects available from JavaScript. HtmlUnit initializes Rhino engine improperly,...

BurpSuiteJSBeautifier - Burp Suite JavaScript Beautifier

Most of the websites compress their resources such as JS files in order to increase the loading speed. However, security testing and debugging a compressed resource is not an easy task. This is a Burp Suite open source extension which makes it possible to beautify most of the resources properly...

JDownloader JDExternInterface.java远程代码执行漏洞

BUGTRAQ ID: 38143 JDownloader是专为Rapidshare等站点设计的网盘下载工具。 JDownloader在下载过程中所传输的密钥可能为明文或JavaScript代码，之后在Mozilla Rhino Javascript实现中执行。以下是相关代码: （plugins/JDExternInterface.jar/JDExternInterface.java）： String jk = Encoding.urlDecoderequest.getParameters.get"jk", false; ... Context cx = Context.enter;...

JDownloader concept included execution vulnerability

Exploit for unknown platform in category web applications ==================================================== JDownloader concept included execution vulnerability ==================================================== - -- Product JDownloader1 is an open source download manager for One-Click-...