jfrog-CVE-2022-21449

CVE-2022-21449 概述 该工具允许对编译后的代码归档文件（.jar、.war 等）进行快速扫描，通过查找指示使用 ECDSA 算法的字符串，以检查是否存在 CVE-2022-21449 漏洞。该工具使用 Python3，无需额外依赖。 用法 root@kitploit: python cve202221449.py root-folder -quiet -exclude folder1 folder2 .. 或 root@kitploit: python cve202221449.py root-archive -quiet -exclude folder1 folder2...

zipdefrag

Este volcado es un rompecabezas o parseo avanzado a escopetazos para necios y rebeldes érase una vez Érase una vez, querido lector, en una noche oscura y tormentosa, su fiel autor se topó con una situación desconcertante y misteriosa: un sistema donde lo único que impedía el análisis de memoria p...

[SECURITY] [DSA 6431-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 11, 2026 https://www.debian.org/security/faq -...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

Debian dsa-6425 : openjdk-21-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6425 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/securit...

EUVD-2026-9875

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

EUVD-2012-2188

Malware in sbrugna...

EUVD-2005-4797

Malware in sbrugna...

EUVD-2015-7708

Malware in sbrugna...

EUVD-2007-0412

Malware in sbrugna...

EUVD-2011-3625

Malware in sbrugna...

EUVD-2008-5337

Malware in sbrugna...

EUVD-2019-2209

Malware in sbrugna...

EUVD-2013-1921

Malware in sbrugna...

EUVD-2023-31594

Malicious code in bioql PyPI...

EUVD-2024-0948

Malicious code in bioql PyPI...

EUVD-2025-12500

Malicious code in bioql PyPI...

EUVD-2025-9025

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-38807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be...