log4j2-web-vulnerable

log4j2-web-vulnerable log4j2 RCE（CVE-2021-44228）のエクスプロイトテスト用のシンプルな脆弱性Webアプリです。 起動 java -jar target/gs-handling-form-submission-0.1.0.jar を実行します。http://127.0.0.1/greeting にアクセスしてください。 自分でコンパイルしたい場合は、jdkバージョン 8u20 を使用してください。...

log4shell-homework9

과제 9 – Log4Shell 취약점으로부터 시스템 보호 개요 이 프로젝트는 Dockerized Java 웹 애플리케이션을 취약한 Log4j 2.14.1과 함께 사용하여 Log4Shell 취약점CVE-2021-44228의 공격 및 완화를 보여줍니다. 또한 시뮬레이션된 악성 LDAP 서버를 포함하여 JNDI 인젝션 공격 경로를 설명합니다. 공격 후, Log4j 업그레이드, 입력 검증, MITRE D3FEND 및 ATT&CK 권장 사항 적용을 통해 시스템을 강화합니다. 폴더 구조 log4shell-homework9/ ├──...

Tiny Java Web Server - Cross-Site Scripting

A reflected cross-site scripting vulnerability in the web server TTiny Java Web Server and Servlet Container TJWS =1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page. id: CVE-2021-37573 info: name: Tiny Java Web Server - Cross-Site Scripting author:...

apache-struts-cve-2017-9805

The Apache Struts Webフレームワーク Apache Struts Webフレームワークは、Java Webアプリケーションを作成するための無料のオープンソースソリューションです。 Webアプリケーションは、動的な応答を生成できるという点で従来のWebサイトとは異なります。多くのWebサイトは静的なページしか配信しません。Webアプリケーションは、データベースやビジネスロジックエンジンと連携して、応答をカスタマイズできます。 JavaServer...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow는 비동기non-blocking IO 기반의 Java 웹 서버입니다. 다음과 같은 몇 가지 다른 부분으로 구성됩니다: 동기blocking 및 비동기non-blocking IO를 모두 지원하는 코어 HTTP 서버 Servlet 3.1 구현 JSR-356 호환 웹 소켓 구현 Website: http://undertow.io Issues: https://issues.jboss.org/browse/UNDERTOW Project Lead: Stuart Douglas [email protected]...

l4s-vulnapp

Log4Shell 취약 애플리케이션l4s-vulnapp 이는 Log4j2.14.1를 포함한 잠재적으로 취약한 Java 웹 애플리케이션으로, log4shellCVE-2021-44228의 영향을 받습니다. 검증된 환경 및 다양한 버전 AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1 준비 사항 AdoptOpenJDK zip 파일을 다운로드하여 압축을 풉니다. PATH 및 JAVAHOME 변수를 설정합니다. java...

web-inf-path-trav

WebXMLExp.py Java Webアプリケーションにおけるパストラバーサル脆弱性の悪用を支援するツールです。 このツールは、Invicti Securityのホワイトペーパー Java Webアプリケーションにおけるパストラバーサル脆弱性の悪用 で紹介されています。 インストール このツールにはPython3が必要です。 次のコマンドを実行してください: pip install -r requirements.txt 使用方法: インストール後、以下のようにエクスプロイトURLを指定してください: usage: python WebXMLExp.py...

DeliberatelyVulnerableWebApp

意図的に脆弱なWebアプリケーション（Struts 2） このプロジェクトは、Struts 2フレームワークを使用したJava Webアプリケーションです。Mavenでビルドされ、Jettyサーバーを使用して実行できます。 前提条件 Java Development Kit（JDK）8以上 Apache Maven 3.6.0以上 はじめに プロジェクトのビルド mvn clean install Jettyでプロジェクトを実行 mvn jetty:run アプリケーションへのアクセス Webブラウザを開き、http://localhost:8080/dvwa にアクセスします。...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Libraries. The supported versions affected include Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, and 22.0.0.2. This easily...

CVE-2026-71054: Allocation of Resources Without Limits or Throttling

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can...

CVE-2026-70906

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

CVE-2026-70906: Uncontrolled Resource Consumption

Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

BIT-JAVA-2026-47034

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

BIT-JAVA-2026-47030

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

EUVD-2026-46888

Vulnerability in Oracle Java SE component: Installation. Supported versions that are affected are Oracle Java SE: 8u491 and 8u491-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE...

PT-2026-62195

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491 openjfx versions prior to 17.0.20.0-1.1 Description A flaw in the JavaFX component allows an unauthenticated attacker with network access to compromise the system. Exploitation requires human interaction and affect...

CVE-2026-60164: Protection Mechanism Failure

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

CVE-2026-47035: Improper Access Control

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...

CVE-2026-47030: Improper Access Control

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...