CVE-2021-41381

CVE-2021-41381 I have come-up with a POC for Payara Micro Community 5.2021.6 - Directory Traversal, Please refer above reference field...

Payara Micro Community 5.2021.6 Directory Traversal Detection

Payara Micro Community 5.2021.6 and below contains a directory traversal vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Payara Micro Community 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Payara...

Payara Micro Detect

Detects Payara Micro Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Payara Micro Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Payara Micro Detect', 'description': 'Detects Payara Micro...

EUVD-2024-41751

Malicious code in bioql PyPI...

EUVD-2022-6560

Malicious code in bioql PyPI...

Security Bulletin: HTTP Request/Response Splitting via Improper CRLF Neutralization in Payara Server and Micro (Grizzly, REST Modules), affects watsonx.data

Summary Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affec...

CVE-2021-41381

Payara Micro Community 5.2021.6 and below allows Directory Traversal...

CVE-2024-45687

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affects Payar...

Payara Server and Payara Micro injection vulnerabilities

Payara Server and Payara Micro are both products of Payara, Inc. of the U.K. Payara Server is a cloud-native, innovative, open-source middleware platform. payara Micro is an open-source, lightweight middleware platform for containerized Jakarta EE Java EE application deployment. An injection...

PT-2025-2727

Name of the Vulnerable Software and Affected Versions: Payara Server versions 4.1.151 through 4.1.2.191.51 Payara Server versions 5.20.0 through 5.70.0 Payara Server versions 5.2020.2 through 5.2022.5 Payara Server versions 6.2022.1 through 6.2024.12 Payara Server versions 6.0.0 through 6.21.0...

CVE-2024-45687: Improper Neutralization of CRLF Sequences in HTTP Headers

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in Payara Platform Payara Server Grizzly, REST Management Interface modules, Payara Platform Payara Micro Grizzly modules allows Manipulating State, Identity Spoofing.This issue affects Payar...

CVE-2023-41699 Payara Platform: URL Redirection to untrusted site using FORM authentication

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server, Micro and Embedded Servlet Implementation modules allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.4...

PT-2023-28054 · Payara · Payara Micro/Embedded +1

Name of the Vulnerable Software and Affected Versions: Payara Server versions 5.0.0 through 5.56.0 Payara Server versions 4.1.2.191 through 4.1.2.191.45 Payara Server versions 6.0.0 through 6.7.0 Payara Server versions 6.2023.1 through 6.2023.10 Payara Micro and Embedded versions 5.0.0 through...

CVE-2023-41699: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Payara Platform Payara Server, Micro and Embedded Servlet Implementation modules allows Redirect Access to Libraries.This issue affects Payara Server, Micro and Embedded: from 5.0.0 before 5.57.0, from 4.1.2.191 before 4.1.2.191.4...

Path Traversal

payara-micro is vulnerable to path traversal. The vulnerability exists because the setClasspath function of GFLauncher.java does not properly set the ext directory, allowing an attacker to access files outside the expected directory...

CVE-2022-37422

Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...

CVE-2022-37422

Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...

CVE-2022-37422

Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...

CVE-2022-37422

Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded...

Payara path traversal vulnerability

Payara Services Ltd Payara Micro Community and others are products of Payara Services Ltd, UK.Payara Micro Community is a Java Web server.Payara Server and others are products of Payara, UK. Payara Server is a cloud-native, innovative, open source middleware platform.Payara Micro is an open sourc...