apache_skywalking

Apache SkyWalking SkyWalking ：一个 APM（应用程序性能监控）系统，专为 微服务、云原生和基于容器（Docker、Kubernetes、Mesos）的架构而设计。 简介 SkyWalking 是一个开源 APM 系统，为云原生架构下的分布式系统提供监控、追踪和诊断能力。 核心功能如下。 服务、服务实例、端点指标分析 根因分析。在运行时对代码进行剖析。 服务拓扑图分析 服务、服务实例和端点依赖分析 检测慢服务和慢端点 性能优化 分布式追踪和上下文传播 数据库访问指标。检测慢数据库访问语句（包括 SQL 语句）。 告警 SkyWalking...

CVE-2020-9483

CVE-2020-9483 SQL注入漏洞CVE-2020-9483,Apache SkyWalking的PoC Usage:python3 CVE-2020-9483.py -ip 127.0.0.1 你可以通过SQL注入使用此脚本获取数据库版本 如果你喜欢这个脚本，请点个star 如果觉得这个PoC帮助了你，希望能点个star Result： XD...

cve-2019-9978

cve-2019-9978 このスクリプトは、CVE-2019-9978の脆弱性を簡単に悪用できるように設計されており、Capture The Flag CTF チャレンジやペネトレーションテストの概念実証として使用することを目的としています。 前提条件 Python 3 Requestsライブラリ pip install requests でインストール 使用方法 1. このリポジトリをクローンまたはダウンロードします。 2. ターミナルを開き、スクリプトのディレクトリに移動します。 3. 以下のオプションを使用してスクリプトを実行します： ./cve-2019-9978.py -u...

SkyWalking SQLI

When using H2/MySQL/TiDB as Apache SkyWalking storage and a metadata query through GraphQL protocol, there is a SQL injection vulnerability which allows access to unexpected data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQ...

CVE-2021-47928

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:41+00:00| seen| https://t.me/shimiscyberworld/1340...

CVE-2026-85229

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

CVE-2026-71216

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

EUVD-2026-70950

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

CVE-2026-85229 Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

CVE-2026-85229

Apache SkyWalking UI versions 10.2.0 through 10.4.0 are vulnerable to a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) in the Booster UI dashboard widgets . This issue is characterized as an incomplete fix of CVE-2025-54057, involving the improper neutralization of input during web page...

CVE-2026-85229 Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

EUVD-2026-70923

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216

Apache SkyWalking (versions 9.6.0 through 11.0.0) is vulnerable to the cleartext transmission of sensitive information. The PagerDuty alarm hook transmits the integration routing key over unencrypted HTTP. Although PagerDuty serves this endpoint over HTTPS and provides a redirect for plain HTTP, ...

CVE-2026-85229: Improper Neutralization of Input During Web Page Generation

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

CVE-2026-71216: Cleartext Transmission of Sensitive Information

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

PT-2026-85427

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

PT-2026-85431

UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...

CVE-2022-36203

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:25+00:00| seen| https://t.me/hackingAttack/67590 2026-09-02 01:01:39+00:00| seen| https://t.me/hackingAttack/67590 2026-09-05 11:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/67590 2026-09-06 00:00:50+00:00|...