CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 Laboratorio de Deserialización Insegura en Java Aplicación Java REST básica vulnerable a Deserialización Insegura, que conduce a RCE. El proyecto debe ejecutarse en Java 8u45 Basado en Maven con las siguientes dependencias: jackson-databind 2.2.2 commons-collections 3.1...

dromara__hutool_CVE-2018-17297_4-1-1111

Un conjunto de herramientas que mantienen Java dulce. -- Inicio: http://hutool.cn/ -- -- QQ Grupo ②: 871141901 -- Introducción Hutool es un paquete de herramientas para Java, y solo eso; nos ayuda a simplificar cada línea de código, reducir cada método y hacer que el lenguaje Java también sea...

Linux Distros Unpatched Vulnerability : CVE-2026-85719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and...

Linux Distros Unpatched Vulnerability : CVE-2026-85720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and...

Linux Distros Unpatched Vulnerability : CVE-2026-85721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and...

ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping para Java ✨✨✨ Codacy Badge FF4j es una implementación del patrón Feature Toggle. 🤘Características Feature Toggle: Habilita y deshabilita funciones en tiempo de ejecución, sin despliegues. En tu código, implementa múltiples rutas protegidas por predicados dinámicos...

apache__jspwiki_CVE-2022-46907_2-11-3

Apache JSPWiki 2.11 - Documentación root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

CVE-2022-22965

🚨 CVE-2022-22965 — "Spring4Shell" Vulnerabilidad crítica de ejecución remota de código RCE Divulgada públicamente: 31 de marzo de 2022 📖 Índice de contenidos Descripción general Componentes afectados Causa raíz técnica Condiciones de explotación Impacto Severidad y CVSS Mitigación y parches...

nahsra__antisamy_CVE-2022-29577_1-6-6-1

AntiSamy Una biblioteca para realizar una limpieza rápida y configurable de HTML proveniente de fuentes no confiables. Compatible con Java 7+. Otra forma de decirlo podría ser: es una API que te ayuda a asegurarte de que los clientes no proporcionen código malicioso en el HTML que envían para su...

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy Una librería para realizar una limpieza rápida y configurable de HTML proveniente de fuentes no confiables. Compatible con Java 8+. Otra forma de decirlo podría ser: es una API que te ayuda a asegurarte de que los clientes no suministren código malicioso en el HTML que proporcionan para ...

cve_2011_3556

CVE-2011-3556 — Prueba de concepto PoC Descargo de responsabilidad Esta herramienta es una implementación en Python 3 de una prueba de concepto PoC existente, creada por mihi para Metasploit Framework. Requisitos previos Para usar el módulo, simplemente sigue las instrucciones que se indican a...

CVE-2026-85058 Moquette: Missing Authorization in io.moquette:moquette-broker

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client-controlled Last Will message through publish2Subscribers without invoking the authorizator.canWrite check used by normal PUBLISH paths. When anonymous access is enabled and topic ACLs restrict...

CVE-2026-10751

IBM MQ Java and JMS client libraries are vulnerable to remote code execution via a deserialization filter bypass in exception handling (CWE-502). An authenticated attacker can execute arbitrary code on client applications. The CVSS 3.1 base score is 7.5 (HIGH) , with a high attack complexity and ...

CVE-2026-10751 IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

CVE-2026-10751 IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Service Registry and Repository due to August 2026 CPU

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in August 2026. These issues are also addressed by WebSphere Application Server shipped with WebSphere...

Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog and IBM Master Data Management Neo4j On Cloud Pak for Data

Summary Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog Neo4j On Cloud Pak for Data Multiple Vulnerabilities in Java affectingIBM Master Data Management Neo4j On Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-70906 DESCRIPTION: Easily exploitable vulnerability allows...

DEBIAN-CVE-2026-93561

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

DEBIAN-CVE-2026-93563

A flaw was found in Netty's SmtpResponseDecoder component. A remote attacker, acting as a malicious or man-in-the-middle MITM SMTP server, could exploit this by sending a specially crafted, unbounded multi-line SMTP response without a terminator. This vulnerability leads to unbounded memory...

UBUNTU-CVE-2026-93561

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...