CVE-2026-82265

A flaw was found in Zipkin. Unauthenticated attackers can exploit exposed Spring Boot Actuator endpoints on the tracing API port to access sensitive information. This allows them to read environment variables, bean configurations, and storage credentials. Additionally, attackers can modify log...

CLEANSTART-2026-AY54291 Security fixes in spring-boot 4.1.0-r0

Package spring-boot version 4.1.0-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

CLEANSTART-2026-TM54369 Security fixes in spring-boot 4.0.7-r0

Package spring-boot version 4.0.7-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

SUSE CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

SUSE CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function through the Spring Boot Actuator endpoints exposed on the tracing API port in zipkin-server/src/main/resources/zipkin-server-shared.yml. An attacker can read sensitive runtime data by sending...

SUSE CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

CVE-2026-19702

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

EUVD-2026-68526

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702

CVE-2026-19702 is an OS command injection vulnerability in TÜBİTAK BİLGEM's Pardus Boot Repair , caused by improper neutralization of special elements used in an OS command. The issue affects versions 1.0.7 through 1.0.7 (fixed in 1.0.8 ). The CVSS 3.1 score is 7.8 (HIGH) with a local attack vect...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-82629

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

EUVD-2026-68389

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

CVE-2026-82629 jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

CVE-2026-82629

CVE-2026-82629 affects the doUpload Endpoint in the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the jeecgboot jeewx-boot project (rolling release, up to commit 641ab52). Manipulating the File argument in the MyJwWebJwid3Controller.doUpload...

CVE-2026-82629 jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

CVE-2026-82629 jeecgboot jeewx-boot doUpload Endpoint MyJwWebJwid3Controller.java MyJwWebJwid3Controller.doUpload unrestricted upload

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

seans-surf-and-skate

Sean's Surf & Skate Co. — सील सिक्योरिटी डेमो Maven / Java स्प्रिंग बूट के साथ बनाया गया एक छोटा लेकिन वास्तविक दिखने वाला ई-कॉमर्स स्टोरफ्रंट "Sean's Surf & Skate Co."। यह ज्ञात कमज़ोरियों वाली ओपन-सोर्स डिपेंडेंसियों के साथ आता है ताकि इसका उपयोग यह प्रदर्शित करने के लिए किया जा सके कि Seal...

Java-Example

Seal Security — Java Maven उदाहरण एक न्यूनतम, जानबूझकर कमजोर Spring Boot एप्लिकेशन जिसका उपयोग यह प्रदर्शित करने के लिए किया जाता है कि कैसे Seal Security एक ज्ञात CVE को एक कमजोर निर्भरता को सील बैकपोर्टेड, ड्रॉप-इन संस्करण से बदलकर ठीक करता है — आपके घोषित निर्देशांक या आपके कोड में कोई बदलाव क...