80228 matches found
Log4Shell-CVE-2021-44228-PoC
Log4Shell CVE-2021-44228: Brief Description Apache Log4j2 2.0-beta9 through 2.15.0 no releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control...
CVE-2021-41773-PoC
CVE-2021-41773-PoC 🚀 Mode Of Use ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se hace responsable...
Apache Druid - Local File Inclusion
Apache Druid ingestion system is vulnerable to local file inclusion. The InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of t...
Klog Server <=2.41 - Unauthenticated Command Injection
Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...
Apache Struts <=2.5.20 - Remote Code Execution
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation when evaluated on raw user input in tag attributes, which may lead to remote code execution. id: CVE-2019-0230 info: name: Apache Struts =2.5.20 - Remote Code Execution author: geeknik severity: critical description: Apache Struts 2.0.0 ...
Apache HTTP Server - Remote Code Execution
Apache HTTP Server 2.4.32 to 2.4.44 contains an info disclosure and possible remote code execution caused by a vulnerability in modproxyuwsgi, letting remote attackers access sensitive information and potentially execute arbitrary code, exploit requires sending crafted requests. id: CVE-2020-1198...
Apache Struts2 S2-053 - Remote Code Execution
Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1 uses an unintentional expression in a Freemarker tag instead of string literals, which makes it susceptible to remote code execution attacks. id: CVE-2017-12611 info: name: Apache Struts2 S2-053 - Remote Code Execution author: pikpikcu...
mac0352-ep4
mac0352-ep4 Apache HTTP Server 2.4.23 vulnerability study CVE-2016-8740...
CLEANSTART-2026-FI29300 Connect2id Nimbus JOSE + JWT 10
Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE + JWT 10...
CLEANSTART-2026-CO70761 In Connect2id Nimbus JOSE+JWT before 9
Security vulnerability affects the apache-hive package. In Connect2id Nimbus JOSE+JWT before 9...
CLEANSTART-2026-EQ87084 Connect2id Nimbus JOSE+JWT before v7
Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE+JWT before v7...
CLEANSTART-2026-YW54942 Fasterxml Jackson version Before 2
Security vulnerability affects the apache-hive package. Fasterxml Jackson version Before 2...
CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11
Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...
CLEANSTART-2026-AO34403 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com
Security vulnerability affects the apache-hive package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...
CLEANSTART-2026-JS33298 flaw was discovered in FasterXML jackson-databind in all versions before 2
Security vulnerability affects the apache-hive package. A flaw was discovered in FasterXML jackson-databind in all versions before 2...
CLEANSTART-2026-QI59332 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-GF02196 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-CP80171 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-GD39113 flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly
Security vulnerability affects the apache-hive package. A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly...