5959 matches found
GravitLauncher LaunchServer <=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read
LaunchServer's Netty FileServerHandler computes the served path by stripping one leading character on the assumption that every request-target begins with '/'. Netty's HttpServerCodec accepts a request-target without a leading slash verbatim, so a request without a leading slash bypasses path...
mallet
Mallet, a framework for creating proxies Mallet is a tool for creating proxies for arbitrary protocols, along similar lines to the familiar intercepting web proxies, just more generic. It is built upon the Netty framework, and relies heavily on the Netty pipeline concept, which allows the graphic...
spring_cloud_gateway_memshell
CVE-2022-22947 memshell This script is incomplete, for learning purposes only, do not use illegally. Based on c0ny1 senior's blog, this is a learning script that can write netty and spring memory shells. Test environment is vulhub eg:xx.py http://127.0.0.1:8080 netty whoami...
CVE-2026-40859
camel-netty-http / camel-vertx-http HTTP-Response Unsafe Deserialization Reproducer CVE-2026-40859 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-netty-http and camel-vertx-http components, tracked as CVE-2026-40859. When a producer endpoint is configured...
CVE-2022-22947
CVE-2022-22947 Memory Shell Injection Supports injection of three types of memory shells Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Taking Godzilla shell injection as an example python3 -t godzilla -u...
CVE-2026-49365
CVE-2026-49365 — camel-netty-http / camel-undertow muteException Stack-Trace Disclosure Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Components shown ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...
Ratpack-1
What is Ratpack? Ratpack is a simple, capable, toolkit for creating high performance web applications. Ratpack is built on Java and the Netty event-driven networking engine. The API is optimized for Groovy and Java 8. Optional Google Guice integration provides a foundation for scaling your...
ROOT-APP-MAVEN-CVE-2026-50010 CVE-2026-50010 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-50010 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-44249 CVE-2026-44249 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-44249 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-45416 CVE-2026-45416 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-45416 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
netty-resolver-dns-check
netty-resolver-dns-check Offline checker for three DNS cache poisoning CVEs in io.netty:netty-resolver-dns — CVE-2026-45674 , CVE-2026-47691 and CVE-2026-45673 — and for the question the version number cannot answer: is your application actually using that resolver? If you use Spring WebClient, t...
CVE-2026-80343
CVE-2026-80343 — camel-netty-http: security-constraint case-sensitivity bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-netty-http security constraint compared the request path against the configured context path using a case-sensitive match, while t...
netty-http-check
netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...
netty-http2-check
netty-http2-check Offline checker for the 7io.netty:netty-codec-http2 CVEs. Tells you which ones you are actually exposed to — and the single version that fixes all of them: 4.1.136.Final / 4.2.16.Final, a number that appears on none of the seven advisories. CVE-2025-55163 · CVE-2026-33871 ·...
CLEANSTART-2026-OG34037 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the solr package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-GP48303 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the solr package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-GP83393 Netty's HTTP/3 codec (io
Security vulnerability affects the strimzi-kafka-operator package. Netty's HTTP/3 codec io...
CLEANSTART-2026-BD49027 Netty's HTTP/3 codec (io
Security vulnerability affects the strimzi-kafka-operator package. Netty's HTTP/3 codec io...