Important: tomcat9

Issue Overview: Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from...

Important: tomcat

Issue Overview: Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from...

Amazon Linux 2023 : tomcat11, tomcat11-admin-webapps, tomcat11-el-6.0-api (ALAS2023-2026-3151)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3151 advisory. Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive...

Important: httpd

Issue Overview: Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by modmime. This...

Important: tomcat-native

Issue Overview: Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be...

Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3202 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already b...

Amazon Linux 2 : httpd (ALAS-2026-3990)

The version of httpd installed on the remote host is prior to 2.4.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3990 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI...

Amazon Linux 2023 : tomcat-native (ALAS2023-2026-3167)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3167 advisory. Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-4327)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server:...

Rocky Linux 10.2 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc (crlba-2026_50158)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-202650158 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Bug Fixes and Enhancements: modproxyhtml regression in...

PT-2026-110541

Name of the Vulnerable Software and Affected Versions Apache SkyWalking BanyanDB versions 0.11.0 Description An improper authorization issue exists in the Canopy component. Under a non-default configuration, a user assigned a readonly role can bypass restrictions and send non-read requests throug...

CVE-2026-92120: Authentication Bypass by Capture-replay

OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue...

Important: tomcat10

Issue Overview: Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791323880)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791323880 advisory. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP...

Amazon Linux 2 : tomcat (ALASTOMCAT9-2026-029)

The version of tomcat installed on the remote host is prior to 9.0.122-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT9-2026-029 advisory. Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS...

CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI Author: 0xmid00 Vulnerability: SSRF / Local File Read via XOP:Include in MTOM requests Affected: Apache CXF 3.5.5 and 3.4.10 What is the Vulnerability? Apache CXF processes MTOM Message Transmission Optimization Mechanism messages that contain...

zaproxy

El Zed Attack Proxy ZAP de Checkmarx es el escáner de aplicaciones web más utilizado del mundo. Gratuito y de código abierto. Un proyecto comunitario del Top 1000 de GitHub al que cualquiera puede contribuir. Puede ayudarte a encontrar automáticamente...

dex2jar

dex2jar Proyecto trasladado aGitHub | Espejo| Wiki| Descargas| Incidencias ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| Releases| Issues sf| https://sourceforge.net/p/dex2jar| antigua| antigua| antigua bb| https://bitbucket.org/pxb1988/dex2jar| antigua| antigua| antigua gc|...

Exploit for Path Traversal in Apache Http_Server

CVE-to-Shell README'yi kendi cümlelerinle yaz brief §10...

tsunami-security-scanner

Tsunami Tsunami es un escáner de seguridad de red de propósito general con un sistema de complementos extensible para detectar vulnerabilidades de alta gravedad con alta confianza. Para obtener más información sobre Tsunami, visita nuestra documentación. Tsunami depende en gran medida de su siste...