Malicious code in java-validate-monitor-link-private (npm)

The package java-validate-monitor-link-private was found to contain malicious code...

MAL-2025-17448 Malicious code in compile-dog-resolve-java-slow (npm)

The package compile-dog-resolve-java-slow was found to contain malicious code...

MAL-2025-16342 Malicious code in bundle-minify-query-void-java (npm)

The package bundle-minify-query-void-java was found to contain malicious code...

CVE-2019-2989 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk, openjdk-11-openj9...

CVE-2019-2978 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk, openjdk-11-openj9...

GHSA-Q9RX-VPRP-MMRF vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk, openjdk-11-openj9...

CVE-2019-2983 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk, openjdk-11-openj9...

CVE-2019-2964 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk, openjdk-11-openj9...

GHSA-VP36-CHC4-89VW vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk, openjdk-11-openj9...

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon's Reach to Linux and macOS

Japan's CERT coordination center JPCERT/CC on Thursday revealed it observed incidents that involved the use of a command-and-control C2 framework called CrossC2, which is designed to extend the functionality of Cobalt Strike to other platforms like Linux and Apple macOS for cross-platform system...

GHSA-Q32P-XHJG-25F8 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-X58F-J988-8PPF vulnerabilities

Vulnerabilities for packages: openjdk...

CVE-2019-2978 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-9Q7R-HH98-V46J vulnerabilities

Vulnerabilities for packages: openjdk...

Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Tivoli Application Dependency Discovery Manager TADDM. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a...

CVE-2025-8931

A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

SUSE CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

litemall 安全漏洞

litemall is a small mall system for linlinjava individual developers. A security vulnerability exists in litemall 1.8.0 and earlier versions, which stems from the incorrect manipulation of the parameter SECRET in the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.jav...

IBM WebSphere Application Server Liberty 17.0.0.3 < 25.0.0.9 (7242027)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7242027 advisory. - IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : OpenJDK 17 vulnerabilities (USN-7690-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7690-1 advisory. It was discovered that the 2D component of OpenJDK 17 did not properly manage memory under certain...