log4j-remediation-tools

log4j-remediation-tools Strumenti per trovare e riprodurre la vulnerabilità CVE-2021-44228 di log4j2 Strumenti find-vulnerabilities: determina euristicamente se una JVM in esecuzione è vulnerabile confirm-vulnerabilities: determina con precisione al 100% se una JVM in esecuzione è vulnerabile Uso...

SerialKillerBypassGadgetCollection

SerialKiller: Bypass-Gadget-Sammlung Beschreibung Sammlung von Bypass-Gadgets, die in JVM-Deserialisierungs-Gadget-Ketten verwendet werden können, um defensive Deserialisierung mit "Look-Ahead ObjectInputStreams" zu umgehen. Veröffentlicht im Rahmen des RSA-2016-Vortrags "SerialKiller: Silently...

RHSA-2026:55787 Red Hat Security Advisory: java-21-openjdk security update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2026-59949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len...

A Bootiful Podcast: JRuby lead Charles Nutter

In this episode, we sit down with the lead of the JRuby project for a fascinating look at how Ruby and the JVM came together, how JRuby became a production-ready powerhouse, and why it still matters today. We dig into threading, performance, Invoke Dynamic, Project Loom, Panama, Valhalla, and the...

CVE-2026-61273

creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-16440

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault...

UBUNTU-CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-59949

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...

CVE-2026-59949

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...

CVE-2026-59949 yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...