jeremylong__DependencyCheck_CVE-2018-12036_3-1-2

Dependency-Check Dependency-Check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found, it will generate a report linking...

CVE-2025-24813

CVE-2025-24813 - Exploit de Ejecución Remota de Código en Apache Tomcat Este es un exploit de prueba de concepto PoC para CVE-2025-24813 , una vulnerabilidad en Apache Tomcat 9.0.80–9.0.83, 10.1.0–10.1.17 que permite la ejecución remota de código RCE mediante deserialización de sesión. El exploit...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Arrastrar y soltar múltiples archivos para Contact Form 7 Descripción: Subida de archivos arbitrarios a través de drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 permite la subida de archivos .phar, lo que conduce a ejecución remota de código en...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Vulnerabilidad de ejecución remota de código CVE-2023-33246 Exploit Uso: java -jar CVE-2023-33246.jar -ip "127.0.0.1" -cmd "open -a calculator" Descargo de responsabilidad: Esta herramienta de detección está destinada únicamente al uso de los testers de seguridad de...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 POC funcional para CVE 2017-5638 Este repositorio contiene un ejemplo funcional en python que demuestra las capacidades de RCE de CVE 2017-5638. También se incluye como referencia el archivo WAR de Struts Showcase...

CVE-2022-29885

CVE-2022-29885 The tool is only used for security research. It is prohibited to use the tool to launch illegal attacks, and the user is responsible for the consequences 工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 Introduce Apache Tomcat DoS CVE-2022-29885 Exploit Denial of Service in EncryptIntercept...

Apache-Druid-CVE-2021-25646-Exploit

Apache Druid RCE Exploit CVE-2021-25646 Exploit Python para ejecución remota de código en Apache Druid mediante inyección de código JavaScript CVE-2021-25646. Descripción Este script explota una vulnerabilidad de RCE en Apache Druid versiones 0.20.1 que permite la ejecución arbitraria de código a...

CVE-2026-97468

Apache CXF's STSTokenValidator and Security Token Service STS cached validated security tokens under a non-cryptographic 32-bit hash of the token Java Arrays.hashCode/hashCode, and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a token fo...

CVE-2026-86463

Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounters a long string without an operator, causing the parser to consume excessive CPU time. An attacker can send a crafte...

CVE-2026-79650

Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs because attacker-controlled state parameters are preserved and later used as redirect targets without validating that the final decoded URI belongs to the...

CVE-2026-97791

In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shared by all requests, so one request could read another's result. A remote, unauthenticated attacker could send a forge...

CVE-2026-107937

In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size default 300 characters and attachment-headers-max-count default 500 limits. The size limit was applied only to each physical line, not to a header value built from...

CVE-2026-107938

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

CVE-2026-78384

CompressionUtils.inflate decompressed attacker-controlled DEFLATE data with no output-size cap. A small KB crafted payload could expand to gigabytes on the heap. Reachable via JWE decryption when zip=DEF e.g. JoseSessionTokenProvider with RSA-OAEP key wrap and via SAML redirect/POST binding token...

CVE-2026-73179

Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic...

CVE-2026-100227

Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors XmlSigInHandler, XmlSigInInterceptor and the streaming XmlSecInInterceptor did not ensure that the XML passed to the application was covered by the...

CVE-2021-41773

Servicio vulnerable CVE-2021-41773 Instalación Varias opciones: 1. Contenedor Docker docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd CVE-2021-41773-Vulnerable-service/2.4.49 docker build -t...

BIT-THRIFT-2026-94655 Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

BIT-THRIFT-2026-94642 Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

BIT-THRIFT-2026-93926 Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path

Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...