Lucene search
+L

2443 matches found

Kitploit
Kitploit
added 2026/08/27 8:19 p.m.2 views

Jetty_CVE

Ce depot n’a pas de fichier README...

5.3AI score
SaveExploits0
NVD
NVD
added 2026/08/27 6:17 a.m.7 views

CVE-2026-47889

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 5:52 a.m.4 views

CVE-2021-34429

CVE-2021-34429 إثبات المفهوم لـ CVE-2021-34429 - Eclipse Jetty 11.0.5 كشف الملفات الحساسة استخدام URIs المشفرة للوصول إلى الملفات داخل دليل WEB-INF إعداد بيئة الاختبار المتطلبات الأساسية: تثبيت docker و docker-compose على نظامك لتوزيعات مبنية على دبيان مثل Ubuntu و Kali Linux إلخ، استخدم الأوامر...

5.3CVSS6.5AI score0.99298EPSS
SaveExploits6
CVE
CVE
added 2026/08/27 5:21 a.m.33 views

CVE-2026-47889

CVE-2026-47889 affects Spring Framework WebFlux applications running on the Jetty 12 Core reactive adapter . The JettyCoreServerHttpResponse component serializes response cookies without the SameSite attribute , potentially weakening cookie-based session protection. Affected versions are Spring F...

7.5CVSS5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 5:21 a.m.5 views

EUVD-2026-66857

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

7.5CVSS5.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 4:31 a.m.1 views

jetty_9.4.31_CVE-2023-26048

Eclipse Jetty Canonical Repository 这是 Jetty 项目的官方仓库,欢迎随时 fork 并贡献代码! 想提交补丁或拉取请求? 请确保你已登记 Eclipse 贡献者协议(ECA)。 eclipse.org/legal/ecafaq 项目描述 Jetty 是一款轻量级、高度可扩展的基于 Java 的 Web 服务器和 Servlet 引擎。 我们的目标是以高吞吐量、低延迟的方式支持 HTTP、HTTP/2 和 WebSocket 等 Web 协议,在提供最大性能的同时,保留多年 Servlet 开发积累的易用性和兼容性。 Jetty 是一款现代的全异步...

5.3CVSS6.5AI score0.0326EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.150 views

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

8.6CVSS8.2AI score0.02885EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.29 views

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

8.8CVSS8.2AI score0.07148EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.125 views

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

9.8CVSS8.7AI score0.08086EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.32 views

Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution

Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...

8.8CVSS8.3AI score0.8581EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.93 views

CData Arc < 23.4.8839 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions. id: CVE-2024-31850 info: name: CData Arc 23.4.88...

9.8CVSS8.5AI score0.08086EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.59 views

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224 is susceptible to improper authorization. The default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. An attacker can access sensitive information regarding...

5.3CVSS6.4AI score0.82371EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.117 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.6AI score0.74881EPSS
SaveExploits16References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.73 views

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

5.3CVSS6.6AI score0.99298EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/08/27 4:17 a.m.1 views

jetty_9.4.31_CVE-2021-34428

Eclipse Jetty Canonical Repository Это канонический репозиторий проекта Jetty, не стесняйтесь делать форк и вносить вклад! Отправляете патч или pull request? Убедитесь, что у вас есть Eclipse Contributor Agreement ECA. eclipse.org/legal/ecafaq Описание проекта Jetty — это легковесный,...

3.6CVSS6.2AI score0.00963EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 4:16 a.m.3 views

Jetty-CVE-2020-27223

Jetty-CVE-2020-27223...

5.3CVSS6.5AI score0.7795EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 3:21 a.m.2 views

CVE-2024-31848-PoC

استغلال CData داخل خوادم Jetty - CVE-2024-31848/49/50/51 - اجتياز المسار وقراءة الملفات ما هو نموذج PoC أولي لأتمتة تحليل الثغرات على الأهداف التي تشغل تطبيقات CData على خادم Jetty مدمج. الاستخدام فقط استخدم -u أو --url لتحديد هدفك، سيحاول البرنامج النصي استرداد ملف getSettings.rsb? الموجود في جم...

9.8CVSS8.7AI score0.08086EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:48 p.m.3 views

CVE-2019-17638-Jetty

JETTY Il progetto Jetty è un server HTTP 100% Java, un client HTTP e un contenitore di servlet della Eclipse Foundation http://www.eclipse.org/jetty/ Jetty è open source ed è distribuito con doppia licenza: Apache 2.0 e Eclipse Public License 1.0. Puoi scegliere una qualsiasi delle due licenze...

9.4CVSS8.6AI score0.11138EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 8:25 p.m.2 views

-jettyCVE-2021-28164-

-jettyCVE-2021-28164- jetty /CVE-2021-28164/ Analyse und Ergebnisse...

5.3CVSS6.5AI score0.82371EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/26 1:24 a.m.3 views

Jetty-v9.4.31_CVE-2023-40167

Questo repository non contiene un README...

5.3CVSS6.5AI score0.01069EPSS
SaveExploits0
Rows per page
Query Builder