jfrog-CVE-2022-21449

CVE-2022-21449 Übersicht Dieses Tool ermöglicht eine schnelle Überprüfung von kompilierten Code-Archiven .jar, .war usw., um die Anfälligkeit für CVE-2022-21449 zu prüfen, indem es nach dem String sucht, der die Verwendung des ECDSA-Algorithmus anzeigt. Das Tool verwendet Python3 ohne zusätzliche...

zipdefrag

Dieser Dump ist ein Puzzle oder fortgeschrittenes Shotgun-Parsing für Narren und Rebellen Es war einmal Es war einmal, liebe Leserin, lieber Leser, in einer dunklen und stürmischen Nacht: Dein treuer Autor stieß auf eine verwirrende und geheimnisvolle Situation – ein System, in dem das Einzige, w...

[SECURITY] [DSA 6431-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 11, 2026 https://www.debian.org/security/faq -...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

Debian dsa-6425 : openjdk-21-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6425 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/securit...

EUVD-2026-9875

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

EUVD-2005-4797

Malware in sbrugna...

EUVD-2012-2188

Malware in sbrugna...

EUVD-2011-3625

Malware in sbrugna...

EUVD-2007-0412

Malware in sbrugna...

EUVD-2008-5337

Malware in sbrugna...

EUVD-2015-7708

Malware in sbrugna...

EUVD-2019-2209

Malware in sbrugna...

EUVD-2013-1921

Malware in sbrugna...

EUVD-2024-0948

Malicious code in bioql PyPI...

EUVD-2023-31594

Malicious code in bioql PyPI...

EUVD-2025-9025

Malicious code in bioql PyPI...

EUVD-2025-12500

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-38807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be...