Apache Tomcat Access Control Bypass

The vulnerability of the Apache Tomcat application server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

Apache Tomcat Synchronization Data Compromise

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Apache Thrift Integer Overflow DoS

The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Apache Thrift Uncontrolled Recursion

The vulnerability of the Apache Thrift framework is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Apache Thrift Host Certificate Unauthorized Access

The vulnerability of the Apache Thrift framework is related to the lack of checks for host-specific certificate data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache Thrift Integer Overflow Unauthorized Access

The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache Thrift Pathname Restriction Unauthorized Access

The vulnerability of the Apache Thrift framework is related to shortcomings in pathname limitation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache HugeGraph 1.7.0 SecurityManager Sandbox Bypass Remote Code Execution

Apache HugeGraph version 1.7.0 contains a SecurityManager sandbox bypass that allows unauthenticated remote command execution through the Gremlin endpoint. !/usr/bin/env bash Apache HugeGraph 1.7.0 Sandbox Bypass Remote Code Execution Vendor: The Apache Software Foundation Product web page:...

fastjson

fastjson Fastjson es una librería de Java que se puede usar para convertir objetos Java a su representación JSON. También se puede usar para convertir una cadena JSON en un objeto Java equivalente. Fastjson puede trabajar con objetos Java arbitrarios, incluyendo objetos preexistentes de los cuale...

poc-cve-2025-69219

CVE-2025-69219 apache airflow deserializzazione non sicura verso RCE 1. copia poc.py nella directory dags di Airflow. 2. avvia il workflow poc dall'UI. 3. controlla i log delle attività per l'output dell'esecuzione...

CLSA-2026-1791482084 Fix of 7 CVEs

SECURITY UPDATE: modcharsetlite: heap overflow in finishpartialchar - debian/patches/CVE-2026-56153.patch: modcharsetlite: heap overflow in finishpartialchar - CVE-2026-56153 SECURITY UPDATE: modheartmonitor: NULL pointer dereference on malformed heartbeat - debian/patches/CVE-2026-46729.patch:...

Exploit for Improper Input Validation in Apache Unomi

Apache Unomi MVEL/OGNL Injection RCE CVE-2020-13942 Vulhub...

Exploit for Files or Directories Accessible to External Parties in Apache Flink

Apache Flink JobManager Directory Traversal CVE-2020-17519...

Exploit for Cleartext Transmission of Sensitive Information in Apache Jmeter

Apache JMeter RMI Deserialization RCE CVE-2018-1297 Vulhub...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq

ActiveMQ Fileserver Arbitrary File Write CVE-2016-3088 Vul...

Exploit for Path Traversal in Apache Http_Server

Apache HTTP Server 2.4.50 Path Traversal and RCE CVE-2021-420...

Exploit for Improper Privilege Management in Apache Couchdb

Apache CouchDB Privilege Escalation CVE-2017-12635 Vulhub...

CVE-2026-106449 vulnerabilities

Vulnerabilities for packages: solr, logstash, flink-kubernetes-operator-fips, solr-fips, sonarqube, spark-fips, elasticsearch-fips, nuxeo, apache-hop-fips, dd-trace-java, apache-nifi, automq-fips, traccar, automq, apache-pulsar-fips, elasticsearch, logstash-fips, metabase, knative-kafka-broker,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: solr, logstash, flink-kubernetes-operator-fips, solr-fips, sonarqube, spark-fips, elasticsearch-fips, nuxeo, apache-hop-fips, dd-trace-java, apache-nifi, automq-fips, traccar, automq, apache-pulsar-fips, elasticsearch, logstash-fips, metabase, knative-kafka-broker,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: solr, logstash, flink-kubernetes-operator-fips, solr-fips, sonarqube, spark-fips, elasticsearch-fips, nuxeo, apache-hop-fips, dd-trace-java, apache-nifi, automq-fips, traccar, automq, apache-pulsar-fips, elasticsearch, logstash-fips, metabase, knative-kafka-broker,...