javajive

JavaJive English | 简体中文 | Website A portable, pure-Go Java toolkit — extracted and trimmed from yaklang — that does three things and nothing else: Decompile — .class / .jar / .war / .zip → readable Java source. Parse classes — inspect the structure of a .class file constant pool, fields, methods,...

Linux Distros Unpatched Vulnerability : CVE-2021-37819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. CVE-2021-37819 Note that Nessus relies on the...

CVE-2024-24569

The Pixee Java Code Security Toolkit is a set of security APIs meant to help secure Java code. ZipSecurityisBelowCurrentDirectory is vulnerable to a partial-path traversal bypass. To be vulnerable to the bypass, the application must use toolkit version =1.1.1, use ZipSecurity as a guard against...

CVE-2021-44441

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code ...

CVE-2021-44447

A vulnerability has been identified in JT Utilities All versions V13.0.3.0, JTTK All versions V11.0.3.0. JTTK library in affected products contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

GHSA-QV32-7R6P-XHHH Moderate severity vulnerability that affects com.adobe.xmp:xmpcore

XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2016-4216

XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

The vulnerability of the Java Development Kit application development tool allows a remote attacker to compromise data confidentiality and integrity.

The vulnerability of the Java Development Kit application development tool relates to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the JAXB subcomponent...

Possible XSS vuln in VCard4J

Timberlake Advisory 2004010109h. Program: http://sourceforge.net/projects/vcard4j/ vCard4J is a complete toolkit to manipulate vCards RFC 2426 in Java. It contains a parser to read vCard files. It is strange and fearsome to touch. It also includes a compiler to extend the library. And it contains...