fernflower

fernflower Quickly decompile class files in the terminal Usage: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: No more need for jd-gui, it is more powerful than jd-gui...

android_application_analyzer

Android Application Analyzer The tool is used to analyze the content of the android application in local storage. Install the dependency using following command chmod +x setup.sh ./setup.sh Use the following command to run the tool using python3 python -m venv androidapplicationanalyzer...

EUVD-2023-30059

Malicious code in bioql PyPI...

EUVD-2023-30060

Malicious code in bioql PyPI...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

Design/Logic Flaw

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

Deserialization of untrusted data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

JD-GUI code-related vulnerabilities

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originated when the program allowed an attacker to deserialize it via UIMainWindowPreferencesProvider.singleInstanc...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235: Improper Neutralization of Input During Web Page Generation

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

CVE-2023-26234: Deserialization of Untrusted Data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

PT-2023-20552

Name of the Vulnerable Software and Affected Versions JD-GUI version 1.6.6 Description The issue allows deserialization via UIMainWindowPreferencesProvider.singleInstance. Recommendations For JD-GUI version 1.6.6, at the moment, there is no information about a newer version that contains a fix fo...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

PT-2023-20553

Name of the Vulnerable Software and Affected Versions JD-GUI version 1.6.6 Description The issue allows for XSS via the util/net/InterProcessCommunicationUtil.java file. Recommendations For JD-GUI version 1.6.6, consider restricting access to the util/net/InterProcessCommunicationUtil.java file a...

CVE-2023-26234

CVE-2023-26234 affects JD-GUI 1.6.6 and is caused by deserialization via UIMainWindowPreferencesProvider.singleInstance. Several connected records (NVD, Red Hat, OSV, CNNVD, etc.) corroborate the issue, with CVSS 3.1/3.1 base score 9.8 (CRITICAL) and potential full impact on confidentiality, inte...

CVE-2023-26235

JD-GUI 1.6.6 is affected by an XSS vulnerability that originates in util/net/InterProcessCommunicationUtil.java, as described across multiple sources (e.g., CVE-2023-26235). The vulnerability details consistently show an XSS flaw enabling injection via the specified InterProcessCommunicationUtil....

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...