751 matches found
CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the pe...
splinter
splinter splinter è un toolkit di analisi della jvm, che permette all'utente di visualizzare classi, metodi, campi, pool costanti e bytecode in esecuzione. è stato creato e testato su openjdk build 22.0.2+9-70 cos'è splinter? di solito, quando si pensa a un toolkit di analisi per la jvm, si pensa...
CVE-2026-47860 Unbounded decompression of attacker-supplied compressed message bodies
An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...
CVE-2026-47860
CVE-2026-47860 affects Spring AMQP and stems from unbounded decompression of attacker-supplied compressed message bodies. An attacker with the ability to publish to a queue consumed by an application with message decompression enabled can crash the consumer JVM using a single message of approxima...
cve-2021-44228
Dieses Ansible-Playbook wendet global 'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true' auf alle Benutzer an. Dies entschärft den CVE-2021-44228-Exploit für alle JVM-Anwendungen auf den Hosts im Inventar. Zum Ausführen: root@kitploit: ansible-playbook playbook.yml -i inventory...
Linux Distros Unpatched Vulnerability : CVE-2026-79675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM...
PT-2026-82354
An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...
CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function. Attackers can inject dangerous JVM flags such as -agentpath , -javaagent , or @argfile into Stanford wrapper classes, achieving arbitrary code execution . The vulnerability is ra...
EUVD-2026-65525
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
CVE-2026-79675 NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
CVE-2026-79675 NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
jdwp-shellifier
Script di sfruttamento per JDWP Cos'è? Questo script di sfruttamento è pensato per essere usato dai pentester contro un servizio JDWP attivo, al fine di ottenere l'esecuzione remota di codice Remote Code Execution. Come funziona? In modo abbastanza standard, lo script richiede solo un interprete...
PT-2026-81356
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
RHSA-2026:55787 Red Hat Security Advisory: java-21-openjdk security update
Bulletin has no description...
A Bootiful Podcast: JRuby lead Charles Nutter
In this episode, we sit down with the lead of the JRuby project for a fascinating look at how Ruby and the JVM came together, how JRuby became a production-ready powerhouse, and why it still matters today. We dig into threading, performance, Invoke Dynamic, Project Loom, Panama, Valhalla, and the...
Linux Distros Unpatched Vulnerability : CVE-2026-59949
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len...
