Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 dork 和 shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl 漏洞验证命令 curl -v...

CVE-2026-78844

Resumen javadelight delight-nashorn-sandbox 0.5.5 sufre de Consumo de Recursos No Controlado. El sandbox aplica límites de maxCPUTime inyectando estáticamente comprobaciones de interrupción en los bucles de JavaScript, pero el sandbox no logra deshabilitar la evaluación dinámica de código. Un...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 是一个广泛被利用的漏洞，出现在 CISA 的 KEV 列表中。该 Go 语言实现的利用工具可以通过 Nashorn 有效载荷在目标上执行反向 shell，或者下载二进制文件到目标并执行。 编译 将利用工具构建到一个 Docker 镜像中，只需： make docker 如果你手头有 Go 编译环境，也可以直接使用 make： albinolobster@mournland:/cve-2023-46604$ make gofmt -d -w cve-2023-46604.go golangci-li...

CVE-2022-26134

Confluence CVE-2022-26134 的主动利用 概述 CVE-2022-26134 是一个影响 Atlassian Confluence 的严重 远程代码执行 RCE 漏洞。该漏洞允许未经认证的攻击者通过向易受攻击的端点注入 OGNL 表达式来执行任意代码。 受影响版本 所有在补丁发布前的 Atlassian Confluence Server 和 Data Center 受支持版本。 漏洞利用详情 以下 curl 命令演示了该漏洞的主动利用，使用 Java 的 Nashorn 引擎执行反向 Shell： curl -v...

cve-2023-51467

Go-Exploit para CVE-2023-51467 Este repositorio contiene un go-exploit para Apache OFBiz CVE-2023-51467. La implementación incluye verificación del objetivo, un escáner de versiones y una reverse shell Nashorn en memoria como payload requiere que el Java en uso admita Nashorn. El proceso de...

log4j2-rce-poc

POC de Vulnerabilidad RCE en Log4j2 Una prueba de concepto mínima para la vulnerabilidad de Ejecución Remota de Código JNDI en Log4j2 CVE-2021-44228. Está destinada a fines educativos para ayudar a personas que no son investigadores de seguridad a entender cómo funciona y qué tan grande es el...

java-1.8.0-openjdk: Fix of 6 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity integrity flaw in TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity flaw in JPEG handling - CVE-2026-47021: 2D,...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.502.b07-1.1.el8 (AXSA:2026-1388:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1388:12 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK:...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8...

Important: Red Hat Security Advisory: OpenJDK 8u502 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

Important: Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit...

Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM image support CVE-2026-47021 JDK: Enhance...

RHEL 7 : java-1.8.0-openjdk (RHSA-2026:42876)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42876 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Important) (RHSA-2026:42880)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42880 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

EUVD-2026-44958

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...