CVE-2022-42889-Analysis

CVE-2022-42889 Text4Shell Report A repository that organizes an analysis report for Apache Commons Text CVE-2022-42889 and attack demonstration materials based on a closed test environment. Documents CVE-2022-42889 - Vulnerability Analysis Report Repository Structure CVE-2022-42889-Report/ ├─...

text4shell-exploit

text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions Example python3 text4shell.py 127.0.0.1 192.168.1.2 4444 Make sure to set up a lsitener on your attacking...

ICT287-CVE-2022-42889

ICT287-CVE-2022-42889 To find full exploit setup and recreation report please find the CVE-2022-42889-Project Vulnerability Exploitation Report file. VM that was used to build and run the exploit isn't included in this repository. Setup and exploit recreation for CVE-2022-42889 Text4Shell...

Apache-Commons-Text-CVE-2022-42889

Apache Commons Text CVE-2022-42889 Overview Apache Text4Shell CVE-2022-42889 The affected Apache Commons Text versions 1.5 through 1.9 and it has been patched in version 1.10. Apache Commons Text is a Java library described as "a library focused on algorithms working on strings". Usage: 1. Copy...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell Description This script is a penetration testing tool designed to exploit the CVE-2022-42889 vulnerability, also known as Text4Shell, within Apache Commons Text versions -param $PARAMETER -L $LHOST -P $LPORT Example python3 exploit.py -t 10.10.10.10 -p 8080 -u /search/...

CVE-2022-42889

CVE-2022-42889-POC Una aplicación de demostración simple que muestra cómo explotar la vulnerabilidad CVE-2022-42889. Utiliza servicios OOB Fuera de Banda para demostrar los prefijos dns y url. JavaDocs para la interpolación de commons-text commons-text JavaDocs Ejemplos de interpolaciones...

CVE-2025-46295-fix-fms

FileMaker Apache Commons JAR Replacer Overview The FileMaker Apache Commons JAR Replacer is an automation solution that addresses CVE-2025-46295 by replacing vulnerable Apache Commons JAR files in FileMaker Server installations. Instead of upgrading the entire FileMaker Server, this solution...

cve-2022-42889-jmeter

CVE 2022-42889 This script is for removing the older version of Apache Commons Text 1.9 and replaces it with the newer version 1.10.0 in JMETERHOME/lib folder...

asf__commons-io_CVE-2021-29425_2-6

Apache Commons IO The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Documentation More information can be found on the Apache Commons IO homepage. The JavaDoc can be browsed. Questions...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-21933 DESCRIPTION: Java SE could allow a remote attacker to bypass security controls and perform unauthorized update, insert, delete, or read operations on...

cve

CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – enum declaringClass Information Leak & RCE Chain For educational and authorized security research purposes only. This repository provides a controlled lab environment to reproduce the CVE-2025-48734 vulnerability in Apache Commons BeanUtils and explore h...

CVE-2022-42889

🚀 Exploit CVE-2022-42889 Text4Shell Un exploit en Python para CVE-2022-42889 Text4Shell, una vulnerabilidad crítica de ejecución remota de código en Apache Commons Text versiones anteriores a 1.10.0. 📋 Tabla de Contenidos Descripción Detalles de la Vulnerabilidad Versiones Afectadas Característic...

Text4Shell-Scanner

Scanner for CVE-2022-42889 Text4Shell Description This is a scanner for CVE-2022-42889 Text4Shell vulnerability Usage Step 1. Download jar file jar file is on preparedJar/text4shell-scanner.jar 2. Check java version on your system 3. Run jar file with args refer to the following example Sample...

CLEANSTART-2026-CT42491 In Apache Commons IO before 2

Security vulnerability affects the apache-hive package. In Apache Commons IO before 2...

CLEANSTART-2026-PL91023 Uncontrolled Resource Consumption vulnerability in Apache Commons IO

Security vulnerability affects the apache-hive package. Uncontrolled Resource Consumption vulnerability in Apache Commons IO...

CLEANSTART-2026-EA81114 Uncontrolled Recursion vulnerability in Apache Commons Lang

Security vulnerability affects the apache-hive package. Uncontrolled Recursion vulnerability in Apache Commons Lang...

CVE-2022-42889

CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.9 which is vulnerable to CVE-2022-42889. Running the application Build and run the application via docker: docker build . -t vulnerable-app docker run vulnerable-app $ docker ps CONTAINER ID...

CVE-2026-105111

A flaw was found in Apache Commons BCEL. The Class2HTML component does not properly sanitize strings when generating web pages from Java class files. A remote attacker can supply a specially crafted class file to trigger stored Cross-Site Scripting XSS when a user views the generated report...

CVE-2026-94114

A flaw was found in Apache Commons BCEL Byte Code Engineering Library. When loading untrusted classes, the library caches them under their internally declared names without verifying them against the requested class name. A remote attacker could exploit this vulnerability to substitute legitimate...