508 matches found
Blackash-CVE-2025-66516
🚨 CVE-2025-66516 — Critical Apache Tika Vulnerability CVSS: 10.0 | Exploit Type: XXE Injection | Risk Level: MAXIMUM 🎯 Executive Summary CVE-2025-66516 is a critical XML External Entity XXE vulnerability in Apache Tika’s core processing engine. A single malicious PDF with XFA content can trigger:...
CVE-2018-11761
Zusammenfassung In einer aktuellen Forschung zu Apache Tika habe ich eine DOS Denial of Service Schwachstelle im XML-Parser entdeckt. Sie wird dadurch verursacht, dass der Parser XML-Dokumente nicht ordnungsgemäß parst. Betroffene Version Getestet auf ElasticSearch 6.3.1 mit Tika 1.18 und 6.2.3 m...
cve-2025-54988-VulnTikaProject
Apache Tika 漏洞测试项目 这是一个使用 Apache Tika 3.2.1 进行文档处理和文本提取的 Spring Boot 应用程序。 前提条件 需要 Docker 用法 ./start-app.sh 或 docker compose up -d CVE 执行 将你的恶意 PDF（https://github.com/mgthuramoemyint/POC-CVE-2025-54988）上传到端点以进行提取。 curl -X POST -F "[email protected]" http://127.0.0.1:8080/api/extract-text cur...
Apache Tika - XML External Entity Injection
Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1, and tika-parsers 1.13-1.28.5 contain an XML External Entity injection caused by processing crafted XFA files inside PDFs, letting attackers perform XXE attacks remotely, exploit requires crafted PDF input. id: CVE-2025-66516 info: nam...
Apache Tika - XXE Injection
Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE via malicious XFA in PDFs, allowing file read and SSRF attacks. id: CVE-2025-54988 info: name: Apache Tika - XXE Injection author: tx1ee severity: critical description: | Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE vi...
CVE-2025-66516-Writeup-POC
CVE-2025-66516: Kritische XXE-Sicherheitslücke in Apache Tika Zusammenfassung CVE-2025-66516 ist eine kritische XML-External-Entity-XXE-Einschleusungssicherheitslücke in Apache Tika mit einem CVSS-Score von 10,0 maximale Schwere. Die Sicherheitslücke ermöglicht es entfernten Angreifern, beliebige...
java-cve-2021-29425-tika-xxe
java-cve-2021-29425-tika-xxe...
Tika-CVE-2025-66516-Lab
بيئة التحقق المصغرة لـ CVE-2025-66516 يهدف هذا المشروع إلى التحقق من CVE-2025-66516 ثغرة حقن الكيانات الخارجية في XML ضمن Apache Tika. نبذة عن الثغرة الإصدارات Apache Tika 3.2.1 وما قبلها لا تقوم بتعطيل تحميل الكيانات الخارجية بشكل صحيح عند تحليل ملفات PDF التي تحتوي على نماذج XFA، مما يؤدي إلى...
Apache Tika < 1.1.8 - Header Command Injection
Apache Tika versions 1.7 to 1.17 allow clients to send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. i...
cve-2018-1335
Dipartimento di Ingegneria Informatica dell'Università Ankara Yildirim Beyazit CENG 325 - Principi di Sicurezza dell'Informazione e Privacy CENG201 OOP Project Membri del Gruppo @canumay @aslihann @ezgigucuyener @mburakdonmez Riferimenti NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 -...
CVE-2018-1335
CVE-2018-1335 Vulnerabilidade RCE remote code execution em servidores apache Tika-server com versões inferiores a 1.18 comandos: sudo bash install.sh python2 exploit.py...
CVE-2026-50645 vulnerabilities
Vulnerabilities for packages: apache-tika...
GHSA-GHVC-7HP8-2G2V vulnerabilities
Vulnerabilities for packages: apache-tika...
CVE-2025-66516-POC
⚠️ LEGGI IL DISCLAIMER PRIMA DELL'USO ⚠️ Solo uso didattico/test autorizzati | Licenza | Politica di sicurezza...
DeepPass
DeepPass Dockerisierte Anwendung, die Dokumente auf Passwortkandidaten analysiert. Der Blogbeitrag "DeepPass — Finding Passwords With Deep Learning" gibt weitere Details zum Ansatz und zur Entwicklung des Modells. Zum Ausführen: docker-compose up Dadurch wird http://localhost:5000 bereitgestellt,...
CVE-2026-50645 vulnerabilities
Vulnerabilities for packages: apache-tika, wso2is, apache-tika-fips...
GHSA-GHVC-7HP8-2G2V vulnerabilities
Vulnerabilities for packages: apache-tika, wso2is, apache-tika-fips...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: wazuh-indexer, conductor-fips, scala, opensearch, copybara-fips, gradle, elasticsearch-fips, jbang, metabase, apache-tika-fips, nextflow, apache-hop, apache-tika, apache-hop-fips, elasticsearch, copybara, conductor, spdx-tools-java, opensearch-fips...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: wazuh-indexer, conductor-fips, scala, opensearch, copybara-fips, gradle, elasticsearch-fips, jbang, metabase, apache-tika-fips, nextflow, apache-hop, apache-tika, apache-hop-fips, elasticsearch, copybara, conductor, spdx-tools-java, opensearch-fips...