Apache Solr 7.0.1 RunExecutableListener Remote Command Execution

Apache Solr version 7.0.1 contains a flaw where an unauthenticated Config API request can add a RunExecutableListener that executes a command when a core update is committed. The supplied proof of concept provides a containerized vulnerable lab and HTTP request sequence...

Apache Solr 8.3.1 Velocity Template Remote Code Execution

Apache Solr versions 5.0.0 through 8.3.1 contain a VelocityResponseWriter issue that permits command execution when an attacker can use the configuration API to enable parameter-provided templates. https://packetstorm.news/download/234977...

Apache Tomcat 8.5.19 Arbitrary File Write

Apache Tomcat version 8.5.19 with the Default Servlet readonly setting disabled allows HTTP PUT requests with crafted filenames to write JSP files to the web root. https://packetstorm.news/download/234969...

Apache Tomcat 9.0.30 AJP File Read

Apache Tomcat version 9.0.30 exposes an AJP connector that permits an unauthenticated client to use crafted request attributes to read files within deployed web applications. https://packetstorm.news/download/234968...

Apache Unomi 1.5.1 MVEL/OGNL Injection Remote Code Execution

Apache Unomi version 1.5.1 contains an MVEL and OGNL expression injection vulnerability that allows unauthenticated remote code execution through crafted context requests. Proof of concept included. https://packetstorm.news/download/234967...

Apache Log4j 2.14.1 JNDI Remote Code Execution

Apache Log4j version 2.14.1 contains a JNDI lookup vulnerability that can permit remote code execution. This proof of concept provides an isolated lab application, a harmless canary payload, and patch-validation evidence. https://packetstorm.news/download/234959...

PT-2026-109171

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109125

Cross-Site request forgery CSRF vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause that user's browser session on a protected route to be established under the attacker's identity instead of their own. Any work...

PT-2026-109198

Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109220

Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109212

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

PT-2026-109189

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109200

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109190

Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109193

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

PT-2026-109216

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109205

Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

PT-2026-109173

Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109183

Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call Read again instead of looping. A peer produces such a frame for 4 bytes in TFramedTransport...

PT-2026-109217

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...