658 matches found
CVE-2026-23903 Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems
Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users are recommended to upgrade to version 2.0.7, which fixes the issue. The issue only effects static files. If static files are served from a case-insensitive filesystem, such ...
Apache Shiro 安全漏洞
Apache Shiro is the United States Apache Apache Foundation set of Java security framework for performing authentication, authorization, encryption and session management . An authentication bypass vulnerability exists in Apache Shiro versions prior to 2.0.7. The vulnerability stems from an...
PT-2026-7017
Name of the Vulnerable Software and Affected Versions Apache Shiro versions prior to 2.0.7 Description An authentication bypass issue exists in Apache Shiro. The issue relates to bypassing authentication when accessing static files on case-insensitive filesystems by varying the case of the filena...
PT-2026-7016
Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to version 2.0.7 or later, which fixes the issue. Prior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough, tha...
GHSA-4HR2-XF7W-JF76 Central Dogma's Login Function Has an Open Redirect Vulnerability
Impact Successful exploitation of this vulnerability could allow an attacker to craft a malicious link that, when clicked by a victim, redirects them to a phishing website designed to mimic the legitimate Central Dogma login page. This could result in the compromise of user accounts and...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect in the Shiro web login for logged-in users with incorrect permissions. An attacker can redirect users to malicious websites by crafting specially designed URLs. Remediation Upgrade...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
PT-2025-41265
Name of the Vulnerable Software and Affected Versions redragon-erp version 1.0 Description The software contains a Shiro deserialization issue stemming from the use of a default Shiro key. This could allow for unauthorized access or control of the system. Recommendations Replace the default Shiro...
CVE-2025-60830
The CVE-2025-60830 entry affects redragon-erp v1.0, where a Shiro deserialization vulnerability arises from the default Shiro key. The issue enables deserialization-based impact on the application as described in multiple sources (Red Hat, NVD, CNNVD), with impact: partial integrity and low avail...
Redragon ERP 安全漏洞
Redragon ERP is an enterprise management system for redragon individual developers. A security vulnerability exists in redragon-erp version 1.0 that stems from the default Shiro key and could lead to a deserialization attack...
EUVD-2025-33166
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
CVE-2025-60830
redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...
EUVD-2020-11136
Malware in sbrugna...
EUVD-2014-0167
Malware in sbrugna...
EUVD-2021-0788
Malware in sbrugna...