spring_cloud_gateway_memshell

CVE-2022-22947 memshell このスクリプトは不完全で、学習用途のみです。不正に使用しないでください。 c0ny1 氏のブログを基に作成した学習用スクリプトで、netty と spring のメモリシェルを書き込むことができます。 テスト環境は vulhub です。 eg:xx.py http://127.0.0.1:8080 netty whoami...

mallet

Mallet，一个用于创建代理的框架 Mallet 是一个用于创建任意协议代理的工具，其思路类似于常见的拦截式 Web 代理，但更加通用。 它基于 Netty 框架构建，并严重依赖 Netty 的管道概念，该概念允许以图形方式组装处理器图。（示例见下方截图。）在 Netty 世界中，处理器实例提供帧定界（即消息的起始和结束位置）、协议解码与编码（将字节流转换为 Java 对象，反之亦然，或将字节流转换为不同的字节流——例如压缩与解压缩），以及更高级别的逻辑（实际对这些对象进行操作）。 通过将编解码器（Codecs）与实际操作消息的处理器（Handlers）仔细分离，Mallet...

CVE-2022-22947

CVE-2022-22947 メモリシェル注入 3種類のメモリシェル注入をサポート Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Godzillaシェル注入を例として python3 -t godzilla -u http://127.0.0.1 参考記事...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException スタックトレースの開示 同じApache Camel脆弱性に対する実行可能な概念実証再現コードで、ランタイムごとに1つずつ用意されています： ランタイム| ディレクトリ| スタック| 表示されるコンポーネント ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| netty-http および undertow...

netty-http-check

netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses netty-handler-4.1.135.Final.jar, ion-java-1.11.1.jar, js-yaml-4.3.0.tgz, tar-7.5.20.tgz, python3.12 3.12.13-3.el98, github.com/go-jose/go-jose/v4 v4.1.3, github.com/apache/thrift v0.22.0, and google.golang.org/grpc 1.71.0 which are vulnerable to CVE-2026-62243,...

ROOT-APP-MAVEN-CVE-2026-42577 CVE-2026-42577 in io.netty:netty-transport-native-epoll - Patched by Root

Root has patched CVE-2026-42577 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-59901 CVE-2026-59901 in io.netty:netty-codec - Patched by Root

Root has patched CVE-2026-59901 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-44249 CVE-2026-44249 in io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-44249 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45536 CVE-2026-45536 in io.netty:netty-transport-native-epoll - Patched by Root

Root has patched CVE-2026-45536 in the io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-58057 CVE-2025-58057 in io.netty:netty-codec - Patched by Root

Root has patched CVE-2025-58057 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42583 CVE-2026-42583 in io.netty:netty-codec - Patched by Root

Root has patched CVE-2026-42583 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-50010 CVE-2026-50010 in io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-50010 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45416 CVE-2026-45416 in io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-45416 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Operational Decision Manager for Sept 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-87822 DESCRIPTION: t-digest versions 3.1 through 3.3 fail to validate centroid means during...

ROOT-APP-MAVEN-CVE-2026-41417 CVE-2026-41417 in io.netty:netty-codec-http - Patched by Root

Root has patched CVE-2026-41417 in the io.netty:netty-codec-http package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42578 CVE-2026-42578 in io.netty:netty-handler-proxy - Patched by Root

Root has patched CVE-2026-42578 in the io.netty:netty-handler-proxy package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42579 CVE-2026-42579 in io.netty:netty-codec-dns - Patched by Root

Root has patched CVE-2026-42579 in the io.netty:netty-codec-dns package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-59419 CVE-2025-59419 in io.netty:netty-codec-smtp - Patched by Root

Root has patched CVE-2025-59419 in the io.netty:netty-codec-smtp package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45674 CVE-2026-45674 in io.netty:netty-resolver-dns - Patched by Root

Root has patched CVE-2026-45674 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...