GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, logstash,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

CVE-2019-0232

CVE-2019-0232 Análisis de vulnerabilidad y PoC para Apache Tomcat - CGIServlet enableCmdLineArguments Ejecución Remota de Código RCE Vídeo PoC disponible en https://www.youtube.com/watch?v=RA7kzuHOWqA Detalles Apache Tomcat tiene una vulnerabilidad en el Servlet CGI que puede ser explotada para...

CVE20131491-JIT

========================= 标题 ========================================= CVE-2013-1491 PoC，利用 JIT-Spray 技术，作者：Yuki Chen（古河） +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 微博: http://weibo.com/u/1874932054 ========================= 关于此 PoC...

buherablog-cve-2013-1488

Java Pwn2Own exploit - CVE-2013-1488 Exploit de prueba de concepto por axt basado en el informe de James Forshaw Afecta a versiones de JRE anteriores a 7u21...

CVE-2012-1889

CVE-2012-1889 这里保存着我学习CVE-2012-1889这个漏洞的利用所用到的文件 1.txt 第一次模块信息 2.txt 第二次模块信息 c2javascript.c 用于将C语言形式的shellcode转化成javascript形式的shellcode cve-2012-1889.html 漏洞利用网页 cve-2012-1889-test-poc.html 测试系统是否存在cve-2012-1889漏洞的poc网页 ImmunityDebugger185setup.exe ImmunityDebbug，用于生成rop链与查找某些指令地址自行下载 jre-6u37.zi...

CVE-2025-9435

ADManager Plus Build 7230 Escalada de Privilegios CVE-2025-9435 Requisitos Un usuario técnico con el rol 'Modify user general properties' y acceso de inicio de sesión al servidor donde está instalado ADManager. Descripción Si el usuario técnico tiene derechos de inicio de sesión en el servidor,...

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

joern

Base de datos de consultas de Joern "Joern-Scan" Esta es la base de datos central de consultas para la plataforma de análisis de código abierto Joern. Tiene dos propósitos: Proporciona las baterías necesarias para convertir Joern en una herramienta de escaneo de código lista para usar. Sus...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, logstash,...

CLSA-2026-1775608281 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.2...

CLSA-2026-1774484488 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.1...

CLSA-2026-1773188139 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 27.1-jre-tuxcare.1...

BIT-JRE-2024-21147

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

BIT-JRE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

BIT-JRE-2021-35586

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

Apache Log4j Core's XmlLayout, in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification, producing invalid XML output whenever a log message or MDC value contains such characters. The impact depends on the StAX implementation in use: JRE built-in...