l4j-info

l4j-info Compiling valuable links as I find them documenting CVE-2021-44228 or Log4J Critical First Party advisories: Existing Log4J 1.2 vulnerability CVE-2019-17571 is also potentially present Apache Log4J Version 2.x Security Information VMWare critical vulnerability advisory Cisco product...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE Proof-of-concept and technical notes for CVE-2026-34197 , a remote code execution vulnerability in Apache ActiveMQ Classic reachable through the Jolokia JMX-HTTP bridge. Affected: ActiveMQ Classic ⚠️ For authorized testing / research...

ghostcatch

ghostcatch Python para deshabilitar conectores AJP en Apache Tomcat para remediar CVE-2020-1938 Ghostcat! Actualmente escrito para: Python 2.7 Requiere: pip install progress Uso: python ghostCatch.py -help es la bandera para el uso Ejemplo: python ghostCatch.py -help -path es la bandera para...

cve-2025-31651

CVE-2025-36701 — Apache Tomcat - Bypass de reglas de reescritura Descubridor: gregk4sec https://github.com/gregk4sec/cve Fecha de descubrimiento: 2025-02-28 Proveedor afectado: Apache Producto afectado: Tomcat 9.0.x / 10.1.x / 11.0.x Gravedad: Crítica / Alta CWE: CWE-116 Estado: En revisión /...

CVE-2022-41678

Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...

CVE-2025-24813-POC

CVE-2025-24813 Proof-of-Concept Standalone This repository contains a non-destructive, standalone PoC for CVE-2025-24813, a vulnerability in Apache Tomcat 9.0.55 allowing remote file upload via partial PUT requests. This exploit demonstrates code execution by uploading and accessing a benign JSP...

Exploit for Path Traversal in Apache Http_Server

Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: kafka-fips, flink-kubernetes-operator-fips, traccar, spark-fips, cassandra, conductor, kafka, opensearch-fips, hadoop-fips, automq, cruise-control, nuxeo, kayenta, conductor-fips, apache-hop, akhq, cassandra-reaper, datahub-gms-fips, flink-kubernetes-operator, pinot,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: kafka-fips, flink-kubernetes-operator-fips, traccar, spark-fips, cassandra, conductor, kafka, opensearch-fips, hadoop-fips, automq, cruise-control, nuxeo, kayenta, conductor-fips, apache-hop, akhq, cassandra-reaper, datahub-gms-fips, flink-kubernetes-operator, pinot,...

CVE-2026-106449 vulnerabilities

Vulnerabilities for packages: kafka-fips, flink-kubernetes-operator-fips, traccar, spark-fips, cassandra, conductor, kafka, opensearch-fips, hadoop-fips, automq, cruise-control, nuxeo, kayenta, conductor-fips, apache-hop, akhq, cassandra-reaper, datahub-gms-fips, flink-kubernetes-operator, pinot,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: kafka-fips, flink-kubernetes-operator-fips, traccar, spark-fips, cassandra, conductor, kafka, opensearch-fips, hadoop-fips, automq, cruise-control, nuxeo, kayenta, conductor-fips, apache-hop, akhq, cassandra-reaper, datahub-gms-fips, flink-kubernetes-operator, pinot,...

GHSA-J9F9-W8PJ-32F8 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

CVE-2026-47890 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

K000163606: Apache Tomcat vulnerability CVE-2026-78383

Security Advisory Description Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1...

Dubbo-deserialization

Dubbo-deserialization CVE-2020-1948 Apache Dubbo Provider default deserialization cause RCE Dubbo Study Dubbo-exp Dubbo-poc Dubbo复现环境...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

Apache-Solr-Arbitrary-File-Read

Apache Solr Arbitrary File Read Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and client libraries for many programming languages such...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G...

CVE-2021-27905

CVE-2021-27905 Sr No| Title ---|--- 1| Overview 2| Root Cause 3| Proof Of Concept 4| Mitigation 8.8.2+ 5| Reference For educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. Overview This is...