Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 dork sur shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 PoC curl curl -v...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 est une vulnérabilité largement exploitée qui figure sur la liste KEV de la CISA. Cette implémentation go-exploit peut exécuter un reverse shell sur les cibles à l'aide d'une charge utile Nashorn, ou télécharger un binaire sur la cible et l'exécuter...

CVE-2022-26134

Exploitation active de Confluence CVE-2022-26134 Aperçu CVE-2022-26134 est une vulnérabilité critique d'exécution de code à distance RCE affectant Atlassian Confluence. Cette vulnérabilité permet à des attaquants non authentifiés d'exécuter du code arbitraire en injectant des expressions OGNL dan...

cve-2023-51467

Go-Exploit pour CVE-2023-51467 Ce dépôt contient un go-exploit pour Apache OFBiz CVE-2023-51467. L'implémentation comprend la vérification de la cible, un scanner de version, et un reverse shell Nashorn en mémoire comme charge utile nécessite que le Java utilisé supporte Nashorn. Le processus...

log4j2-rce-poc

POC уязвимости RCE удалённого выполнения кода в Log4j2 Минимальный proof-of-concept POC для уязвимости Log4j2 JNDI Remote-Code-Execution CVE-2021-44228. Он предназначен для образовательных целей, чтобы помочь людям, не являющимся исследователями безопасности, понять, как она работает и насколько...

CVE-2026-78844

요약 javadelight delight-nashorn-sandbox 0.5.5는 통제되지 않은 리소스 소비Uncontrolled Resource Consumption 취약점이 존재합니다. 이 샌드박스는 JavaScript 루프에 정적으로 인터럽트 검사를 주입하여 maxCPUTime 제한을 적용하지만, 동적 코드 평가를 비활성화하지 못합니다. 공격자는 이러한 함수를 사용하여 정적 새니타이저를 우회하는 무한 루프를 실행할 수 있습니다. 취약점 유형: 통제되지 않은 리소스 소비, 보호 메커니즘 실패 제품...

java-1.8.0-openjdk: Fix of 6 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity integrity flaw in TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity flaw in JPEG handling - CVE-2026-47021: 2D,...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8 (AXSA:2026-1388:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1388:12 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK:...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8...

Important: Red Hat Security Advisory: OpenJDK 8u502 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

Important: Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit...

RHEL 7 : java-1.8.0-openjdk (RHSA-2026:42876)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42876 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK: Enhance...

RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Important) (RHSA-2026:42880)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42880 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

EUVD-2026-44958

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...