CVE-2026-102509

The Apache PLC4X (PLC4J) Java implementation is vulnerable to pre-authentication resource exhaustion in the OPC UA driver and the Java SPI parser . The root causes include memory allocation with excessive size values, allocation of resources without limits, and uncontrolled recursion. Specificall...

EUVD-2026-89678

Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the Java implementation of Apache PLC4X PLC4J allow a malicious or impersonated device to exhaust the memory or stack of the client application, causing a denial of service. In the O...

cve-2017-12149-playground

多くの重要産業（銀行、医療、製造業）は、JBoss 5 または 6 専用に構築されたレガシーミドルウェアに依存しています。これらのアプリケーションは、多くの場合、WildFly（JBossの後継）の最新バージョンへの移行には脆弱すぎるため、組織はパッチを適用する代わりに「エアギャップ」を設けたり、VPNの背後に隠したりすることを選択します。そのような境界防御が失敗すると、脆弱性はそのまま生存し、パッチ未適用のまま残ります。 JBoss AS 6.1.0 脆弱性研究ラボ このリポジトリは、セキュリティ研究と脆弱性検証のために特別に構成された、コンテナ化されたJBoss Applicatio...

ddc

ddc — DEX → Java 反编译器（Rust） English | 简体中文 ddc 把 Android DEX 字节码反编译回可读的 Java —— 真实 App 级别的速度、 可以像数据库一样查询，并且经过 javac 验证 ：七个真实 APK 共 909,689 个输出文件全部零语法错误。 特性 快 —— 226MB/20 dex 的 weibo（9.8 万个类）全量反编译 5.0s ， 398MB 的飞书 5.5s ；病态类跑在带截止期的受控线程上，不会拖死 整个运行。 能编译 —— 七个基准...

CVE-2024-23897

CVE-2024-23897 環境構築 1. Java インストール sudo apt update sudo apt install openjdk-11-jdk -y 2. Jenkins WARファイルのダウンロード wget https://get.jenkins.io/war/2.441/jenkins.war 3. デフォルトJavaバージョンの変更 - Java 11を選択 sudo update-alternatives --config java 4. バージョン確認 - openjdk version "11.x.x" 確認 java -version 5...

CVE-2023-43208

CVE-2023-43208 — Mirth Connect RCE CVE-2023-43208 のProof-of-Conceptエクスプロイトです。これは、Mirth Connect のバージョン 4.4.1 未満における、認証不要のリモートコード実行（RCE）脆弱性です。 説明 Mirth Connectは広く使われているオープンソースのヘルスケア統合エンジンです。この脆弱性は、Apache Commons Collectionsのガジェットをチェーン化した細工されたXMLペイロードを使用して、/api/users...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

SAP NetWeaver Application Server Java 7.5 - Local File Inclusion

SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload Visual Composer の完全に認証不要のファイルアップロードエンドポイントにより、誰でも任意のファイル（例: JSP ウェブシェル）をサーバーにアップロードできます。 SAP NetWeaver Visual Composer の「Metadata Uploader」コンポーネントにおける、認証不要のファイルアップロード脆弱性（CVE-2025-31324）を検査・悪用するための Proof-of-Concept ツールです。 免責事項:...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.19 Update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System CVSS base score, which gives a detailed severity rating, ...

com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects

A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...

CVE-2023-51444

このREADMEは、GeoServer開発の開始を支援します。ソースコードのチェックアウト、コンパイル、実行のプロセスを案内します。 GeoServerの開発には、Java 8、Maven、gitが必要です。Javaクラスライブラリの微妙な変更のため、現時点ではJava 8での開発が必要です（ただし、結果はJava 11でテストされています）。 参考資料: http://docs.geoserver.org/latest/en/developer/index.html == Linux == 1. 前提条件のインストール LinuxディストリビューションからOpenJDK...

PT-2026-103519

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT CONFIG , DOTNET STARTUP HOOKS, and JAVA TOOL OPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet...

CentOS Linux 7 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-devel-debug / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1742319123)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1742319123 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...

CentOS Linux 8 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1767028399)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1767028399 advisory. - Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.19 Update (Important) (RHSA-2026:73644)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73644 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

CentOS Linux 6 [TuxCare] Security Update: java-1.7.0-openjdk / java-1.7.0-openjdk-demo / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1787222376)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1787222376 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RM...