CVE-2021-41773

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...

CVE-2026-68571 Apache Kylin: JDBC URL Whitelist Verification Bypass

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted...

EUVD-2026-102855

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted...

CVE-2026-68571

A Code Injection vulnerability exists in Apache Kylin (versions 4 through 5.0.4) due to improper control over the generation of code. Specifically, a special parameter in the JDBC URL can be exploited to execute arbitrary code. The impact is highest for Kylin services directly exposed to the publ...

EUVD-2026-102854

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...

CVE-2026-64959

Apache Kylin versions 5 through 5.0.4 are vulnerable to SQL Injection and Missing Authentication for Critical Function (CWE-89, CWE-306). The root cause is that certain backend cache API endpoints lack required authentication, allowing for the execution of injected SQL commands. This poses a high...

CVE-2026-64959 Apache Kylin: Missing authentication on certain cache API endpoints

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...

CVE-2026-64610 Apache Kylin: Redis unsafe Java deserialization

Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-64610

Apache Kylin versions 4 through 5.0.4 are vulnerable to a Deserialization of Untrusted Data vulnerability. The root cause is unsafe Java deserialization occurring from a broken external cache service. This issue could lead to significant security impacts, including high confidentiality, integrity...

EUVD-2026-102853

Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-63619

Apache Kylin versions 4 through 5.0.4 are affected by a Missing Authorization vulnerability (CWE-862). A backend metadata dump API lacks sufficient authorization and path-confinement, potentially allowing unauthorized access to metadata. The impact is highest for services directly exposed to the ...

EUVD-2026-102852

Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This...

CVE-2026-63619 Apache Kylin: Missing authorization and path-confinement on system meta dump

Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This...

EUVD-2026-102851

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-63618

Apache Kylin versions 4 through 5.0.4 are vulnerable to a vulnerability where system-level configuration information is exposed to an unauthorized actor. This exposure occurs due to improper access controls, potentially allowing an attacker to view sensitive configuration details. To remediate th...

CVE-2026-63618 Apache Kylin: Low-Privilege Config Exposure

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

OESA-2026-4322 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: Improper Check for Certificate...

CVE-2021-41773

CVE-2021-41773 Vulnerable service Installation Several options: 1. Docker container docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd CVE-2021-41773-Vulnerable-service/2.4.49 docker build -t...

Exploit for CVE-2026-78164

CVE-2026-78164 — Camel HTTP producers resolve property placeho...

Vulnerabilities Affecting SICK CorivaHub

SICK CorivaHub includes the third-party components Apache Tomcat and MapLibre GL, which are affected by two known vulnerabilities. These vulnerabilities include an improper input validation issue in Apache Tomcat and a vulnerability in MapLibre GL that could allow malicious behavior through custo...