tomcat85-check

tomcat85-check Still running Tomcat 8.5? This tool tells you exactly which 2025 CVEs you're affected by — because on this question, you can't get a complete answer from the official page, NVD, or scanners. Zero-dependency single jar, runs offline, no network, uploads nothing. What it solves Tomca...

CVE-2026-43921 FOSSBilling vulnerable to arbitrary PHP code injection via unescaped config serialization

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code injection vulnerability in FOSSBilling's Config::prettyPrintArrayToPHP method. When configuration values are updated, string values are written into config.php without escaping...