79711 matches found
CVE-2026-25604-PoC
CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: automq-fips, kafbat-ui, opensearch-fips, dd-trace-java, elasticsearch, kayenta-fips, traccar-fips, cassandra, apache-nifi, flink-kubernetes-operator-fips, conductor-fips, cruise-control, solr-fips, knative-kafka-broker-fips, hadoop-fips, kafbat-ui-fips, logstash,...
CVE-2026-106449 vulnerabilities
Vulnerabilities for packages: automq-fips, kafbat-ui, opensearch-fips, dd-trace-java, elasticsearch, kayenta-fips, traccar-fips, cassandra, apache-nifi, flink-kubernetes-operator-fips, conductor-fips, cruise-control, solr-fips, knative-kafka-broker-fips, hadoop-fips, kafbat-ui-fips, logstash,...
GHSA-GM45-99XC-R7WV vulnerabilities
Vulnerabilities for packages: automq-fips, kafbat-ui, opensearch-fips, dd-trace-java, elasticsearch, kayenta-fips, traccar-fips, cassandra, apache-nifi, flink-kubernetes-operator-fips, conductor-fips, cruise-control, solr-fips, knative-kafka-broker-fips, hadoop-fips, kafbat-ui-fips, logstash,...
CVE-2026-106450 vulnerabilities
Vulnerabilities for packages: automq-fips, kafbat-ui, opensearch-fips, dd-trace-java, elasticsearch, kayenta-fips, traccar-fips, cassandra, apache-nifi, flink-kubernetes-operator-fips, conductor-fips, cruise-control, solr-fips, knative-kafka-broker-fips, hadoop-fips, kafbat-ui-fips, logstash,...
GHSA-J9F9-W8PJ-32F8 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi-registry...
CVE-2026-47890 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi-registry...
K000163606: Apache Tomcat vulnerability CVE-2026-78383
Security Advisory Description Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1...
Dubbo-deserialization
Dubbo-deserialization CVE-2020-1948 Apache Dubbo Provider default deserialization cause RCE Dubbo Study Dubbo-exp Dubbo-poc Dubbo复现环境...
Apache-Solr-RCE-via-Velocity-template
Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...
Apache-Solr-Arbitrary-File-Read
Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...
CVE-2024-53677
This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G...
CVE-2021-27905
CVE-2021-27905 Sr No| Title ---|--- 1| Overview 2| Root Cause 3| Proof Of Concept 4| Mitigation 8.8.2+ 5| Reference For educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. Overview This is...
CVE-2025-66249-POC
CVE-2025-66249 — Apache Livy Path Traversal Whitelist Bypass For educational and security research purposes only. Do not use against systems you do not own or have explicit written permission to test. →Full Disclaimer Overview Field| Detail ---|--- CVE ID| CVE-2025-66249 Severity| Important CVSS...
CVE-2025-48734
CVE-2025-48734: Apache Commons BeanUtils – enum declaringClass Information Leak & RCE Chain For educational and authorized security research purposes only. This repository provides a controlled lab environment to reproduce the CVE-2025-48734 vulnerability in Apache Commons BeanUtils and explore h...
APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...
Exploit for Deserialization of Untrusted Data in Apache Activemq
ActiveMQ OpenWire Deserialization RCE CVE-2023-46604 Vulhu...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat
Tomcat PUT Arbitrary File Write CVE-2017-12615 Vulhubhtt...