1253 matches found
Tiny Java Web Server - Cross-Site Scripting
A reflected cross-site scripting vulnerability in the web server TTiny Java Web Server and Servlet Container TJWS =1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page. id: CVE-2021-37573 info: name: Tiny Java Web Server - Cross-Site Scripting author:...
undertow-io__undertow_CVE-2014-7816_1-0-16-Final
Undertow Undertow — это веб-сервер на Java, основанный на неблокирующем вводе-выводе. Он состоит из нескольких частей: Основной HTTP-сервер, поддерживающий как блокирующий, так и неблокирующий ввод-вывод Реализация Servlet 3.1 Реализация веб-сокетов, совместимая с JSR-356 Веб-сайт:...
apache-struts-cve-2017-9805
Le framework web Apache Struts Le framework web Apache Struts est une solution open source gratuite pour créer des applications web Java. Les applications web se distinguent des sites web conventionnels par le fait qu'elles peuvent générer une réponse dynamique. De nombreux sites web ne diffusent...
log4shell-homework9
होमवर्क 9 – Log4Shell शोषण के विरुद्ध सिस्टम को सुरक्षित करना अवलोकन यह परियोजना Dockerized Java वेब एप्लिकेशन का उपयोग करके Log4Shell भेद्यता CVE-2021-44228 के शोषण और शमन को प्रदर्शित करती है, जिसमें कमजोर Log4j 2.14.1 शामिल है। सेटअप में JNDI इंजेक्शन हमले के पथ को प्रदर्शित करने के लिए एक...
l4s-vulnapp
تطبيق Log4Shell الضعيف l4s-vulnapp هذا تطبيق ويب Java يحتمل أن يكون ضعيفًا ويحتوي على Log4j 2.14.1 المتأثر بـ log4shell CVE-2021-44228. البيئة المثبتة والإصدارات المختلفة AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1 التحضير قم بتنزيل واستخراج ملف z...
web-inf-path-trav
WebXMLExp.py أداة للمساعدة في استغلال ثغرات اجتياز المسار Path Traversal في تطبيقات الويب بلغة Java. تمت الإشارة إلى هذه الأداة في الورقة التقنية الصادرة عن Invicti Security استغلال ثغرات اجتياز المسار في تطبيقات الويب بلغة Java. التثبيت يتطلب تشغيل هذه الأداة توفّر Python3. قم بتشغيل الأمر التال...
DeliberatelyVulnerableWebApp
Application Web Volontairement Vulnérable Struts 2 Ce projet est une application web Java utilisant le framework Struts 2. Il est construit avec Maven et peut être exécuté avec le serveur Jetty. Prérequis Java Development Kit JDK 8 ou supérieur Apache Maven 3.6.0 ou supérieur Pour commencer...
CVE-2026-70906
Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...
BIT-JAVA-2026-47034
Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...
BIT-JAVA-2026-47030
Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...
openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)
A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...
EUVD-2026-46888
Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...
PT-2026-62195
Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491 openjfx versions prior to 17.0.20.0-1.1 Description A flaw in the JavaFX component allows an unauthenticated attacker with network access to compromise the system. Exploitation requires human interaction and affect...
CVE-2026-10845
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications...
CVE-2026-10845 IBM WebSphere Application Server is affected by an authentication bypass vulnerability
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications...
CVE-2026-40128
SAP NetWeaver Application Server Java Web Container allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Processing the included file could allow the attacker to view or...
CVE-2026-40128 Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)
SAP NetWeaver Application Server Java Web Container allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Processing the included file could allow the attacker to view or...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a remote code execution vulnerability (CVE-2026-9319)
Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a remote code execution vulnerability when using JAX-WS endpoints with WS-Security. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...
Cross-site Scripting (XSS)
Overview org.springframework:spring-web is a package that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper...