GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: apache-nifi, elasticsearch, opensearch, zookeeper, akhq, camunda-zeebe, tez, apache-hop-fips, selenium, kafka, management-api-for-apache-cassandra-4.0, docker-selenium, spark, logstash, spark-fips, apache-hop, zipkin, keycloak, knative-kafka-broker,...

AZL-66570 CVE-2025-9288 affecting package reaper 3.1.1-22

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11...

atjiu pybbs 6.0.0 - Cross Site Scripting (XSS)

/ Exploit Title : atjiu pybbs 6.0.0 - Cross Site Scripting XSS Exploit Author: Byte Reaper Vendor Homepage: https://github.com/atjiu/pybbs Tested on: Kali Linux CVE: CVE-2025-8550...

Exploit for CVE-2025-7766

CVE-2025-7766 PoC Exploit PoC for exploiting XML External Ent...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: gradle, logstash, flyway, debezium-connector-spanner, nrjmx, cassandra-reaper, dependency-track, jenkins-plugin-manager, neo4j, akhq, management-api-for-apache-cassandra-5.0, thingsboard, sonar-scanner-cli, cassandra, kserve-modelmesh, wildfly, apache-nifi, nextflow,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: gradle, logstash, flyway, debezium-connector-spanner, nrjmx, cassandra-reaper, dependency-track, jenkins-plugin-manager, neo4j, akhq, management-api-for-apache-cassandra-5.0, thingsboard, sonar-scanner-cli, cassandra, kserve-modelmesh, wildfly, apache-nifi, nextflow,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: apache-nifi, elasticsearch, hadoop-client-modules, opensearch, apache-nifi-registry, akhq, camunda-zeebe, ghidra, apache-hop-fips, kafka, management-api-for-apache-cassandra-4.0, confluent-kafka, spark, logstash, maven-stage0, dependency-track, apache-hop, spark-fips...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-6484)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6484 advisory. - A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The...

CBL Mariner 2.0 Security Update: reaper (CVE-2025-48387)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48387 advisory. - tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue...

CVE-2025-48387 affecting package reaper for versions less than 3.1.1-19

CVE-2025-48387 affecting package reaper for versions less than 3.1.1-19. A patched version of the package is available...

CVE-2024-6484 affecting package reaper for versions less than 3.1.1-19

CVE-2024-6484 affecting package reaper for versions less than 3.1.1-19. A patched version of the package is available...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: gradle-stage0, cassandra, tez, celeborn, cassandra-reaper, scala, spark, confluent-common-docker...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: gradle-stage0, cassandra, tez, celeborn, cassandra-reaper, scala, spark, confluent-common-docker...

AZL-62236 CVE-2025-48387 affecting package reaper for versions less than 3.1.1-19

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore n...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: druid, sonarqube, trino, spdx-tools-java, tez, strimzi-kafka-operator, cassandra-reaper, celeborn, akhq, jenkins-plugin-manager, confluent-common-docker, opensearch, wildfly, jenkins, apache-activemq-artemis, apicurio-registry, apache-nifi, kafka...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: druid, sonarqube, trino, spdx-tools-java, tez, strimzi-kafka-operator, cassandra-reaper, celeborn, akhq, jenkins-plugin-manager, confluent-common-docker, opensearch, wildfly, jenkins, apache-activemq-artemis, apicurio-registry, apache-nifi, kafka...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, hadoop-client-modules, confluent-common-docker, akhq, camunda-zeebe, ghidra, tez, kafka, strimzi-kafka-operator, jenkins-plugin-manager, wildfly, celeborn, spdx-tools-java, neo4j, confluent-kafka-jre-bcfips, apache-activemq-artemis, druid,...

GHSA-Q4RV-GQ96-W7C5 vulnerabilities

Vulnerabilities for packages: celeborn, webswing, spark-fips, cassandra-reaper...

CVE-2024-13009 vulnerabilities

Vulnerabilities for packages: celeborn, webswing, spark-fips, cassandra-reaper...

CVE-2024-13009 vulnerabilities

Vulnerabilities for packages: celeborn, cassandra-reaper...