Lucene search
+L

43 matches found

Kitploit
Kitploit
•added 2026/10/10 4:35 p.m.•17 views

Ratpack-1

¿Qué es Ratpack? Ratpack es un kit de herramientas simple y capaz para crear aplicaciones web de alto rendimiento. Ratpack está construido sobre Java y el motor de redes basado en eventos Netty. La API está optimizada para Groovy y Java 8. La integración opcional de Google Guice proporciona una...

5.9AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/07/28 3:40 p.m.•26 views

Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...

5.7CVSS6.9AI score0.02632EPSS
SaveExploits0References2
osv-suse
osv-suse
•added 2026/07/28 3:40 p.m.•14 views

SUSE-SU-2026:3390-1 Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: + Add SystemProperties.getPathString, Supplier + Add JavaVersion.JAVA25 + Add JavaVersion.JAVA26 + Add SystemUtils.ISJAVA25 + Add...

5.3CVSS6.5AI score0.02632EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/28 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2026-56091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/06/25 10:16 a.m.•13 views

Authentication Bypass by Alternate Name

Overview org.apache.shiro:shiro-web is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name in the shiro-guice module when...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
•added 2026/06/25 10:16 a.m.•2 views

com.axelor:axelor-core (>=8.0.0, <=8.2.4), com.axelor:axelor-web (>=8.0.0, <=8.2.4) +18 more potentially affected by CVE-2026-56091 via org.apache.shiro:shiro-guice (>=2.0.0-alpha-1, <=2.2.1)

org.apache.shiro:shiro-guice MAVEN version =2.0.0-alpha-1, =8.0.0, =8.0.0, =2.0.0-alpha-1, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.4 and more Source cves: CVE-2026-56091 Source advisory: SNYK:JAVA-ORGAPACHESHIRO-17756770...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1
Snyk
Snyk
•added 2026/06/25 10:16 a.m.•20 views

Authentication Bypass by Alternate Name

Overview Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name in the shiro-guice module when deployed in a web servlet context. An attacker can gain unauthorized access by sending specially crafted HTTP requests. Remediation Upgrade...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
osv-debian
osv-debian
•added 2026/06/25 9:16 a.m.•18 views

DEBIAN-CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
NVD
NVD
•added 2026/06/25 9:16 a.m.•31 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS0.00669EPSS
SaveExploits1References1
osv-ubuntu
osv-ubuntu
•added 2026/06/25 9:16 a.m.•25 views

UBUNTU-CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/06/25 9:16 a.m.•21 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.7AI score0.00669EPSS
SaveExploits1References2
CVE
CVE
•added 2026/06/25 8:45 a.m.•81 views

CVE-2026-56091

CVE-2026-56091 involves Apache Shiro when used with the shiro-guice module in a web servlet context. A specially crafted HTTP request may cause an authentication bypass. Affected: all Apache Shiro versions through 2.x; 3.0.0-alpha-1 is affected when using shiro-guice in this context. Remediation:...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/06/25 8:45 a.m.•63 views

CVE-2026-56091 Apache Shiro: Authentication bypass in Guice-Web integration

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS0.00669EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/06/25 8:45 a.m.•22 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2026/06/25 8:45 a.m.•53 views

EUVD-2026-39230

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

9.8CVSS8AI score0.23326EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2026/06/25 8:45 a.m.•15 views

CVE-2026-56091 Apache Shiro: Authentication bypass in Guice-Web integration

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2026/06/25 8:45 a.m.•34 views

CVE-2026-56091

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•30 views

PT-2026-52220

CVE-2026-56091: Apache Shiro: Authentication bypass in Guice-Web integration https://t.co/tNgFNw4p66 CVE-2026-56130: Apache Shiro: Remember-me cookie isn't checked for expiry on the server https://t.co/wMSxMMxBZs...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•4 views

CVE-2026-56091: Authentication Bypass by Alternate Name

When using Apache Shiro with the shiro-guice module in a web servlet context, a specially crafted HTTP request may cause an authentication bypass. This vulnerability is similar to https://vulners.com/cve/CVE-2020-1957 https://www.cve.org/CVERecord , except that it affects the shiro-guice module...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•44 views

PT-2026-52222

CVE-2026-56091: Apache Shiro: Authentication bypass in Guice-Web integration https://t.co/tNgFNw4p66 CVE-2026-56130: Apache Shiro: Remember-me cookie isn't checked for expiry on the server https://t.co/wMSxMMxBZs...

8.2CVSS5.8AI score0.00669EPSS
SaveExploits1References1
Rows per page
Query Builder