dubbo-rce

CVE-2023-23638 학습 및 연구 목적으로만 제공 ZooKeeper는 별도로 준비 필요 테스트 환경은 Java 8이며, 다른 버전은 테스트되지 않았고, 사용 가능성을 보장하지 않습니다. 재현 시 DemoConsumer에 VM 매개변수를 추가해야 합니다: -Ddubbo.hessian.allowNonSerializable=true, 자세한 내용은 https://su18.org/post/hessian/serializable를 참조하세요. 분석 글:...

dubbo-CVE-2023-23638

CVE-2023-23638 À des fins d'étude et de recherche uniquement ZooKeeper à fournir par vos soins L'environnement de test est Java 8, les autres versions n'ont pas été testées, la disponibilité n'est pas garantie. Pour reproduire, il faut ajouter le paramètre VM pour DemoComsumer :...

CVE-2014-085

CVE-2014-085 PoC и полигон для уязвимости неавторизованного доступа ZooKeeper CVE-2014-085 usage ./nuclei -duc -t zookeeper-unauth.yaml -u ip...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Concert Operate version 5.2.0 Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, strimzi-kafka-oauth, cassandra, flyway, trino, gradle, scala, ruby4.0-jrjackson, wildfly, zipkin, kafka, ruby3.4-jrjackson, infinispan, strimzi-kafka-operator, cassandra-reaper, spdx-tools-java, opensearch, akhq, keycloak-config-cli,...

CVE-2026-59969

A flaw was found in Apache ZooKeeper. When operating in FIPS Federal Information Processing Standards mode with specific Transport Layer Security TLS settings enabled, ZooKeeper's quorum communication fails to properly verify the hostname of peer certificates. This vulnerability allows a maliciou...

CVE-2026-84501

A flaw was found in Apache ZooKeeper. An unauthenticated attacker can inject arbitrary fake log lines into the operational log by sending a specially crafted request containing newline characters. This vulnerability allows the attacker to forge complete log entries, including timestamps, log...

CVE-2026-59739

A flaw was found in Apache ZooKeeper. This vulnerability allows a remote attacker to discover paths that should be restricted by Access Control Lists ACLs. By registering watches on non-existent paths and then reconnecting after these paths are created with restricted ACLs, the attacker can bypas...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: kafka, zookeeper, druid, opensearch, apache-pulsar, spark, akhq...

CVE-2026-77421 vulnerabilities

Vulnerabilities for packages: kafka, zookeeper, druid, opensearch, apache-pulsar, spark, akhq...

GHSA-R2XF-8XR9-62GW vulnerabilities

Vulnerabilities for packages: pinot, kafka-fips, ghidra, pinot-fips, druid, wazuh-indexer, hadoop-fips, kafka, hadoop-client-modules, spark-fips, apache-nifi, scala, zookeeper-fips, apache-pulsar-fips, opensearch-fips, apache-camel-karavan-devmode, akhq, zookeeper, opensearch, spark, apache-pulsa...

CVE-2026-77421 vulnerabilities

Vulnerabilities for packages: pinot, kafka-fips, ghidra, pinot-fips, druid, wazuh-indexer, hadoop-fips, kafka, hadoop-client-modules, spark-fips, apache-nifi, scala, zookeeper-fips, apache-pulsar-fips, opensearch-fips, apache-camel-karavan-devmode, akhq, zookeeper, opensearch, spark, apache-pulsa...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: pinot, kafka-fips, ghidra, pinot-fips, druid, wazuh-indexer, hadoop-fips, kafka, hadoop-client-modules, spark-fips, apache-nifi, scala, zookeeper-fips, apache-pulsar-fips, opensearch-fips, apache-camel-karavan-devmode, akhq, zookeeper, opensearch, spark, apache-pulsa...

CVE-2026-77422 vulnerabilities

Vulnerabilities for packages: pinot, kafka-fips, ghidra, pinot-fips, druid, wazuh-indexer, hadoop-fips, kafka, hadoop-client-modules, spark-fips, apache-nifi, scala, zookeeper-fips, apache-pulsar-fips, opensearch-fips, apache-camel-karavan-devmode, akhq, zookeeper, opensearch, spark, apache-pulsa...

CVE-2026-77420 vulnerabilities

Vulnerabilities for packages: pinot, kafka-fips, ghidra, pinot-fips, druid, wazuh-indexer, elasticsearch, hadoop-fips, kafka, hadoop-client-modules, spark-fips, apache-nifi, scala, elasticsearch-fips, apache-pulsar-fips, opensearch-fips, zookeeper-fips, apache-camel-karavan-devmode, akhq,...