Flink-CVE-2020-17518-getshell

Flink-CVE-2020-17518-getshell Exploit Apache Flink CVE-2020-17518 getshell See: https://blog.rakjong.com/2021/01/10/flink-cve-2020-17518-getshell/...

Flink_RCE

Apache Flink Web Dashboard Unauthorized Access, Uploading Malicious jar Leads to Remote Code Command Execution msf nc python usage: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL Code Injection Remote code execution on Apache Flink TaskManagers via SQL code generation injection. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 — Code Injection Affected| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 Fixed| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...

CVE-2020-17519

Usage & Disclaimer This script is for batch detection of the Apache Flink directory traversal vulnerability CVE-2020-17519. Usage: Python CVE-2020-17519.py urls.txt Each line in urls.txt contains one URL. Vulnerable addresses are output in vul.txt. Affected Versions: Apache Flink 1.11.0, 1.11.1,...

apache-flink-directory-traversal.nse

This repository does not have a README...

CVE-2020-17518

CVE-2020-17518 Apache Flink RESTful API Arbitrary File Upload via Directory Traversal Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A REST handler which was introduced in Apache...

westone-CVE-2020-17519-scanner

westone-CVE-2020-17519-scanner Apache Flink 1.11.0, 1.11.1, 1.11.2 Hackers can read/write remote files via REST API Installation & Usage git clone https://github.com/Osyanina/westone-CVE-2020-17519-scanner.git cd westone-CVE-2020-17519-scanner cmd CVE-2020-17519.exe...

CVE-2020-17519

CVE-2020-17519 Apache Flink RESTful API Arbitrary File Read Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and...

CVE-2020-17518

Apache Flink directory traversal vulnerability, allows remote file read/write via REST API Vulnerability ID: CVE-2020-17518 Vulnerability Description: CVE-2020-17518: Write remote files via REST API Affected Versions: Flink 1.5.1-1.11.2 Safe Versions: Flink 1.11.3 or Flink 1.12.0 Flink 1.5.1...

CVE-2020-17519

Vulnerable Application This module exploits an unauthenticated directory traversal vulnerability in Apache Flink version 1.11.0 and released in 1.11.1 and 1.11.2 as well, allowing arbitrary file read with the web server privileges Vulnerable version: flink-1.11.0-src.tgz, Verification Steps 1...

apache__flink_CVE-2020-17519_1-11-2

Apache Flink Apache Flink is an open source stream processing framework with powerful stream- and batch-processing capabilities. Learn more about Flink at https://flink.apache.org/ Features A streaming-first runtime that supports both batch processing and data streaming programs Elegant and fluen...

Security Bulletin: IBM Operator for Apache Flink is affected by Multiple Vulnerabilities

Summary IBM Operator for Apache Flink is affected by Multiple Vulnerabilities and was addressed in BM Operator for Apache Flink 1.5.5 Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname...

CVE-2026-25194

CVE-2026-35194 — Apache Flink SQL 代码注入 通过 SQL 代码生成注入，在 Apache Flink TaskManager 上实现远程代码执行。 | ---|--- CVE| CVE-2026-35194 CVSS| 8.1（高危） CWE| CWE-94 — 代码注入 受影响版本| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 修复版本| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1 攻击面| SQL Gateway REST API（默认端口 8083，无认证） 快速开始 1. 部署漏洞实验环境...

CVE-2020-10965

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:01+00:00| seen| https://t.me/hackingAttack/95929 2026-09-01 20:01:01+00:00| seen| https://t.me/hackingAttack/95931 2026-09-02 01:01:21+00:00| seen| https://t.me/hackingAttack/95931 2026-09-02 01:01:22+00:00| seen|...

Files Or Directories Accessible To External Parties

Apache Flink Kubernetes Operator is vulnerable to Files or Directories Accessible to External Parties. The vulnerability is due to insufficient validation of the FlinkSessionJob jarURI, including missing scheme, host, and IP-range restrictions, which allows users with CR create permissions to rea...

Apache Flink Login Panel - Detect

Apache Flink login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Flink login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Flink Login Panel - Detect',...

Apache Flink - Local File Inclusion Detection

Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process aka local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Flink 1.""" import re from...

com.navercorp.pinpoint:pinpoint-batch (>=2.3.0, <=3.1.0), com.navercorp.pinpoint:pinpoint-flink (>=2.3.0, <=3.0.5) +6 more potentially affected by CVE-2026-57948 via com.navercorp.pinpoint:pinpoint-web (>=2.3.0, <=3.1.0)

com.navercorp.pinpoint:pinpoint-web MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =3.0.0, =3.0.0, =2.5.0, =3.1.0 Source cves: CVE-2026-57948 Source advisory: SNYK:JAVA-COMNAVERCORPPINPOINT-17755931...