tomcat85-check

tomcat85-check 还在跑 Tomcat 8.5?这个工具告诉你到底中了哪些 2025 年的 CVE —— 因为这个问题,你在官方页面、NVD、扫描器那里都问不出完整答案。 零依赖单 jar,离线跑,不联网、不上传任何东西。 它解决什么 Tomcat 8.5 于 2024-03-31 EOL ,终版是 8.5.1002024-03-19 发布。 之后 Apache 仍在 CVE 记录里逐条声明「8.5 也中招」,而说这话的地方最少人去看 。 Apache 官方 9.x 安全页列出的CVE-2025- 共 17 条,其中 14 条逐字写着: The following...

msxml4-remediation

MSXML 4.0 Remediation PowerShell Microsoft XML Core Services MSXML 4.0 와 관련된 보안 결과를 수정하는 PowerShell 스크립트입니다. MSXML 4.0은 지원이 종료되었으며 취약점 스캐너에서 흔히 플래그됩니다. 이 스크립트는 MSXML 4의 .dll 파일을 등록 해제하고 이름을 변경합니다. 이렇게 하면 취약점이 수정되어 더 이상 Qualys 스캔에 나타나지 않습니다. 배경 MSXML 4.0은 EOL지원 종료 상태이며 현재는 주로 MSXML 6을 사용합니다. 이 스크립...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == 문제 고객이 EOL지원 종료된 오래된 CentOS7 박스를 보유하고 있습니다. CentOS7은 link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712에 의해 영향을 받는 이전 openssl을 실행 중입니다. 오래된 CentOS7의 openssl을 CVE에 대해 어떻게 패치해야 합니까? == 단계 1. link:./docs/1.CVE-2021-3712-analysis.adocNVD, CVSS/EPSS 점수 및 CISA KEV...

jetty-line-check

jetty-line-check あなたのこの Jettyまたは Spring Boot に持ち込まれた Jettyは、2026 年のこの 5 件の CVE のうちどれに該当するのか —— そして公式がアップグレードしろと言うそのバージョンは、Maven Central に本当に存在するのか? 主軸は CVE-2026-2332GHSA-355h-qmc2-wpwf、high / CVSS v3 7.4:jetty-http の chunked リクエストスマグリング。 最も硬い事実:9.4 / 10 / 11 という EOL の 3 本の旧ラインには、公開された修正版がそもそも存在しな...

EUVD-2026-68911

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

Exploit for CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injec...

[SECURITY] [DLA 4548-1] distro-info-data database update

Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 25, 2026 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u11 This is a routine update of the distro-info-data database for Debian LTS users. It updates t...

Debian dla-4548 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4548 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview UmbracoForms is a tool that makes creating contact forms, entry forms and questionnaires just as easy as using Word. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the dynamic SOAP client generation...

EUVD-2017-16965

Malware in sbrugna...

EUVD-2024-51082

Malicious code in bioql PyPI...

EUVD-2025-12381

Malicious code in bioql PyPI...

EUVD-2024-0512

Malicious code in bioql PyPI...

EUVD-2022-32839

Malicious code in bioql PyPI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the msdia140.dll process. An attacker can execute arbitrary code by supplying specially crafted input that triggers an integer overflow and subsequent heap-bas...

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

CVE-2025-52982

Juniper Junos OS MX Series with MS-MPC SIP ALG is affected. When two or more SIP-processing service sets run, an improper resource shutdown can cause the MS-MPC to crash and restart, enabling unauthenticated network-based DoS. Affected versions: all before 21.2R3-S9; 21.4 from 21.4R1; 22.2 before...

CVE-2025-7326

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry...

CVE-2025-7326

CVE-2025-7326 is an elevation-of-privilege weakness described in IBM’s security bulletin as affecting IBM Robotic Process Automation products running on ASP.NET Core (the vulnerable ASP.NET Core component used by IBM RPA). The IBM page confirms weak authentication in EOL ASP.NET Core can let an u...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-6543

Severity - Critical Description of Problem A vulnerability has been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affecte...