ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

Enterprise Security API for Java Legacy OWASP® ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers t...

ESAPI-SQLinjection-CVE-2025-5878-Exploit

Affected: ESAPI.encoder.encodeForSQL method and OracleCodec class Affected versions: 2.2.0.0-2.6.2.0 Usage: similar to sqlmap usage: esapi-sqlinjection.py -h -u URL -c COOKIE --dbs --tables --columns -D DB -T TABLE -C COLUMN --dump esapi-sqlinjection.py: error: the following arguments are require...

ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1

Java용 엔터프라이즈 보안 API Legacy OWASP® ESAPIThe OWASP Enterprise Security API는 무료 오픈 소스 웹 애플리케이션 보안 제어 라이브러리로, 프로그래머가 더 낮은 위험의 애플리케이션을 더 쉽게 작성할 수 있게 해줍니다. Java용 ESAPI 라이브러리는 프로그래머가 기존 애플리케이션에 보안을 쉽게 추가retrofit할 수 있도록 설계되었습니다. Java용 ESAPI는 새로운 개발을 위한 견고한 기반 역할도 합니다. --- OWASP ESAPI 위키 페이지는 어디에 있나요? OWA...

Security Bulletin: Weaker than expected SQL injection protection may affect IBM Business Automation Workflow traditional - CVE-2025-5878

Summary IBM Business Automation Workflow embedded Navigator packages a vulnerable library of ESAPI. Vulnerability Details CVEID:CVE-2025-5878 DESCRIPTION: A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of t...

EUVD-2021-1544

Malware in sbrugna...

EUVD-2022-4332

Malicious code in bioql PyPI...

EUVD-2022-1809

Malicious code in bioql PyPI...

EUVD-2025-28693

Malicious code in bioql PyPI...

EUVD-2022-1678

Malicious code in bioql PyPI...

EUVD-2022-1979

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-5878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection...

[SECURITY] [DLA 4246-1] libowasp-esapi-java security update

Debian LTS Advisory DLA-4246-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 22, 2025 https://wiki.debian.org/LTS Package : libowasp-esapi-java Version : 2.4.0.0-0+deb11u1 CVE ID : CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Debian Bug : 1010339 1109378...

Debian: Security Advisory (DLA-4246-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4246 : libowasp-esapi-java - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4246 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4246-1 [email protected]...

DLA-4246-1 libowasp-esapi-java - security update

Bulletin has no description...

Security update for rust-keylime

This update for rust-keylime fixes the following issues: CVE-2024-12224: idna: Fixed improper validation in punycode bsc1243861 Update to version 0.2.7+70: builddeps: bump wiremock from 0.6.2 to 0.6.3 builddeps: bump uuid from 1.16.0 to 1.17.0 lib: Introduce AgentIdentity structure gitignore: Add...

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

DEBIAN-CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

UBUNTU-CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

Improper Neutralization of Special Elements

Overview org.owasp.esapi:esapi is an OWASP project to create simple strong security controls for every web platform. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements via the encodeForSQL function in th Encoder.java file. An attacker can manipulate SQ...