Flink_RCE

Apache Flink Web Dashboard: Unautorisierter Zugriff und Upload einer schädlichen JAR-Datei führen zu Remote-Code-Ausführung msf nc Python-Verwendung: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 Schwachstellenscanner für Windows-Betriebssysteme. Beispielverwendung Verwendung root@kitploit: .\log4j-scanner.exe Das Terminal wird zur Ausgabe der Ergebnisse verwendet. Stellen Sie dies über RMM auf Computern bereit und starten/melden Sie es von PowerShell...

log4j-patched

Dependência Corrigida do Log4J para o Log4Shell Este repositório tem como objetivo fornecer uma versão corrigida da biblioteca Log4J para sistemas legados que não podem ser atualizados imediatamente. O patch consiste em uma versão modificada do arquivo log4j-core.x.x.x.jar seguindo a recomendação...

log4j-checker

Log4j-Checker Questo repository contiene script che possono aiutare a identificare i file .jar che potrebbero essere vulnerabili a CVE-2021-44228, noto anche come Log4Shell. Log4Shell Hash Check Questo script trova i file .jar nel filesystem a partire da un percorso specifico, calcola un hash...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ अवलोकन CVE-2026-16723 Fastjson 1.x 1.2.68 – 1.2.83 में एक रिमोट कोड एक्ज़ीक्यूशन RCE भेद्यता है। जब Fastjson हमलावर-नियंत्रित JSON पार्स करता है, तो एक क्राफ्टेड @type मान checkAutoType के अंदर क्लास-संसाधन लुकअप में बदल जा...

hot-jar-swapping-urlclassloader

Sostituzione a caldo dei JAR con URLClassLoader Il seguente codice di esempio mostra la possibilità di sostituire a caldo un file JAR già caricato e ottenere l'esecuzione di codice abusando del fatto che le classi interne accedono ancora al file JAR quando vengono invocate, purché l'inode non...

Malicious code in totp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cebaa0a3370c12104ef2816420193171f431df0d113fdc5d8c9f1dc921deeb5 Package advertises itself as a TOTP utility but its postinstall script node./index.js --setup 2/dev/null || true and its exported validateSecret API...

MiracleLinux 9 : java-21-openjdk-21.0.12.0.8-1.2.el9.ML.1 (AXSA:2026-1580:09)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1580:09 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

Debian dsa-6431 : openjdk-25-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6431 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6431-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 6431-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 11, 2026 https://www.debian.org/security/faq -...

pt-esign__Damn-vulnerable-sca

SCA Goat Navigating SCA Vulnerabilities, Empowering Mastery...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

[SECURITY] [DSA 6425-1] openjdk-21 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 10, 2026 https://www.debian.org/security/faq -...

Astra Linux – Vulnerability in Firefox and Thunderbird

Incorrect boundary conditions in networking: JAR components. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Astra Linux – Vulnerability in Firefox and Thunderbird

Bypass of the same-origin policy in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...