damn-vulnerable-log4j-app

SnapAttack Log4j / CVE-2021-44228 / log4shell 리소스 포함 내용 Damn Vulnerable Log4j App damn-vulnerable-log4j-app에는 log4j를 사용하여 User Agent, HTTP GET 및 POST 파라미터를 기록하는 기본적인 취약한 Java Servlet이 포함되어 있습니다. 이 앱은 .war 파일로 패키징되어 있으며 Tomcat과 같은 서버에 배포할 수 있습니다. 자세한 내용은 README를 참조하세요. 공격 아티팩트 attack-artifacts에는...

CVE-2012-4431

Добро пожаловать в Apache Tomcat! Что это такое? Apache Tomcat® — это реализация с открытым исходным кодом технологий Java Servlet, JavaServer Pages, Java Expression Language и Java WebSocket. Спецификации Java Servlet, JavaServer Pages, Java Expression Language и Java WebSocket разрабатываются в...

EUVD-2011-0409

Malware in sbrugna...

EUVD-2011-0410

Malware in sbrugna...

EUVD-2000-0952

Malware in sbrugna...

EUVD-2000-0768

Malware in sbrugna...

EUVD-2011-0414

Malware in sbrugna...

EUVD-2014-3719

Malware in sbrugna...

EUVD-2022-4979

Malicious code in bioql PyPI...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 8 : tomcat (RHSA-2025:11333)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11333 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Incomplete fix for...

ALSA-2025:11332 Important: tomcat9 security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

RHEL 9 : tomcat (RHSA-2025:3647)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3647 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: RCE due to TOCTOU...

Moderate: Red Hat Security Advisory: pki-servlet-engine security update

An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Cross-site Scripting (XSS)

Overview org.apache.felix:org.apache.felix.webconsole is a web based management console for OSGi frameworks. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderContent function in ServicesServlet.java, which allows attackers to inject scripts into services...

[SECURITY] Fedora 41 Update: tomcat-9.0.98-1.fc41

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

[SECURITY] Fedora 40 Update: tomcat-9.0.98-1.fc40

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

RHEL 9 : pki-servlet-engine (RHSA-2024:8528)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8528 advisory. Tomcat is the servlet engine that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java...

Important: Red Hat Security Advisory: pki-servlet-engine security update

An update for pki-servlet-engine is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Eclipse Jetty 安全漏洞

Eclipse Jetty is an open source, Java-based web server and Java Servlet container from the Eclipse Foundation. A security vulnerability exists in Eclipse Jetty that originates from an attacker being able to launch a remote denial of service attack by exhausting server memory...