CVE-2019-0232

CVE-2019-0232 针对 Apache Tomcat - CGIServlet enableCmdLineArguments 远程代码执行（RCE）漏洞的分析与 PoC 视频 PoC 可在 https://www.youtube.com/watch?v=RA7kzuHOWqA 观看 详细信息 Apache Tomcat 的 CGI Servlet 存在一个漏洞，可被利用以实现远程代码执行（RCE）。只有在 Windows 上以非默认配置并结合批处理文件运行时，该漏洞才能被利用。 通用网关接口（CGI）是一种标准协议，允许 Web 服务器通过 Web...

CVE20131491-JIT

========================= 标题 ========================================= CVE-2013-1491 PoC，利用 JIT-Spray 技术，作者：Yuki Chen（古河） +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 微博: http://weibo.com/u/1874932054 ========================= 关于此 PoC...

CVE-2025-9435

ADManager Plus Build 7230 权限提升 CVE-2025-9435 要求 一个拥有"修改用户常规属性"角色的技术人员用户，并且能够登录到安装了ADManager的服务器。 描述 如果该技术人员用户拥有对服务器的登录权限，则可以将权限提升至运行ADManager的高权限服务帐户或用户帐户。用户可以通过Web应用程序创建任意目录，然后将DLL文件复制到该目录中。当ADManager重启时，该DLL文件将以运行ADManager的用户的权限执行。 概念验证 1. 以技术人员用户身份登录，点击"配置文件属性"。 2...

joern

Joern クエリデータベース "Joern-Scan" これはオープンソースコード解析プラットフォーム Joern の中央クエリデータベースです。目的は2つあります: Joernをすぐに使えるコードスキャンツールにするために必要なバッテリー（機能）を提供します。 そのクエリは、独自のクエリを作成しようとしている人にとって有用な例として機能します。 JDK11上でビルド されていますが、JRE = 1.8 で動作します。...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...

buherablog-cve-2013-1488

Java Pwn2Own 漏洞利用 - CVE-2013-1488 由 axt 基于 James Forshaw 的文章 编写的概念验证漏洞利用 影响 7u21 之前的 JRE 版本...

CVE-2012-1889

CVE-2012-1889 ここには、CVE-2012-1889の脆弱性の悪用を学習するために使用したファイルが保存されています。 1.txt 1回目のモジュール情報 2.txt 2回目のモジュール情報 c2javascript.c C言語形式のシェルコードをJavaScript形式のシェルコードに変換するためのもの cve-2012-1889.html 脆弱性悪用ウェブページ cve-2012-1889-test-poc.html システムにCVE-2012-1889脆弱性が存在するかテストするPoCウェブページ ImmunityDebugger185setup.exe...

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, wazuh-indexer, kafbat-ui, ruby4.0-jrjackson, apicurio-registry, kayenta-fips, keycloak-config-cli, apache-polaris, strimzi-kafka-operator, cruise-control, nextflow, camunda-zeebe, jenkins, neo4j, druid, s3proxy-fips, apache-activemq-fips,...

CLSA-2026-1775608281 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.2...

CLSA-2026-1774484488 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.1...

CLSA-2026-1773188139 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 27.1-jre-tuxcare.1...

BIT-JRE-2024-21147

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

BIT-JRE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

BIT-JRE-2021-35586

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

Apache Log4j Core's XmlLayout, in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification, producing invalid XML output whenever a log message or MDC value contains such characters. The impact depends on the StAX implementation in use: JRE built-in...