undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow is a Java web server based on non-blocking IO. It consists of a few different parts: A core HTTP server that supports both blocking and non-blocking IO A Servlet 3.1 implementation A JSR-356 compliant web socket implementation Website: http://undertow.io Issues:...

io.undertow:undertow-http2-test-suite (>=1.2.0.beta1, <=1.2.0.beta2), io.undertow:undertow-servlet (>=1.2.0.beta1, <=1.2.0.beta2) +2 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.2.0.beta1, <=1.2.0.beta2)

io.undertow:undertow-core MAVEN version =1.2.0.beta1, =1.2.0.beta1, =1.2.0.beta1, =1.2.0.beta1, =1.0.0.alpha9, =1.0.0.alpha10 Source cves: CVE-2014-7816 Source advisory: GHSA-H6P6-FC4W-CQHX...

co.paralleluniverse:comsat-actors-undertow (0.1.1), com.github.wuic:wuic-test (>=0.5.0.rc1, <=0.5.2) +91 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.0.0.final, <=1.0.16.final)

io.undertow:undertow-core MAVEN version =1.0.0.final, =0.5.0.rc1, =1.0, =0.4.1, =0.4.1, =0.4.4 - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 - com.mpay24.payment:mpay24-soap-client 1.0.0.0 - de.chkal.backset:backset-core 1.0.0.alpha1 -...

co.paralleluniverse:comsat-test-utils (0.2.0), io.undertow:undertow-http2-test-suite (>=1.1.0.beta7, <=1.1.0.beta8) +4 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.1.0.beta1, <=1.1.0.cr4)

io.undertow:undertow-core MAVEN version =1.1.0.beta1, =1.1.0.beta7, =1.1.0.beta1, =1.1.0.beta1, =1.0.0.alpha1, =1.0.0.alpha8 Source cves: CVE-2014-7816 Source advisory: OSV:GHSA-H6P6-FC4W-CQHX...

co.paralleluniverse:comsat-actors-undertow (0.1.1), com.github.wuic:wuic-test (>=0.5.0.rc1, <=0.5.2) +91 more potentially affected by CVE-2014-7816 via io.undertow:undertow-core (>=1.0.0.final, <=1.0.16.final)

io.undertow:undertow-core MAVEN version =1.0.0.final, =0.5.0.rc1, =1.0, =0.4.1, =0.4.1, =0.4.4 - com.mpay24.payment:mpay24-payment-sdk 1.0.0.0 - com.mpay24.payment:mpay24-soap-base 1.0.0.0 - com.mpay24.payment:mpay24-soap-client 1.0.0.0 - de.chkal.backset:backset-core 1.0.0.alpha1 -...

CVE-2014-7816

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wildflytraversal.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:32+00:00| seen|...

Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution Vulnerabilities

Exploit for windows platform in category remote exploits I have recently been playing with Apache ActiveMQ, and came across a simple but interesting directory traversal flaw in the fileserver upload/download functionality. I have only been able to reproduce this on Windows, i.e. where "" is a pat...

Apache ActiveMQ 5.11.1/5.13.2 - Directory Traversal / Command Execution

I have recently been playing with Apache ActiveMQ, and came across a simple but interesting directory traversal flaw in the fileserver upload/download functionality. I have only been able to reproduce this on Windows, i.e. where "" is a path delimiter. An attacker could use this flaw to upload...

CVE-2014-7816

Directory traversal vulnerability in JBoss Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.Beta3, when running on Windows, allows remote attackers to read arbitrary files via a .. dot dot in a resource URI...

WildFly Directory Traversal

This module exploits a directory traversal vulnerability found in the WildFly 8.1.0.Final web server running on port 8080, named JBoss Undertow. The vulnerability only affects to Windows systems. Module Options msf use auxiliary/scanner/http/wildfly/traversal msf undefinedtraversal show actions...