dubbo-rce

CVE-2023-23638 Pour usage éducatif et de recherche uniquement ZooKeeper requis L'environnement de test est Java 8 ; les autres versions n'ont pas été testées et leur fonctionnalité n'est pas garantie. Pour la reproduction, ajoutez le paramètre VM suivant à DemoComsumer :...

dubbo-CVE-2023-23638

CVE-2023-23638 À des fins d'étude et de recherche uniquement ZooKeeper à fournir par vos soins L'environnement de test est Java 8, les autres versions n'ont pas été testées, la disponibilité n'est pas garantie. Pour reproduire, il faut ajouter le paramètre VM pour DemoComsumer :...

CVE-2014-085

CVE-2014-085 PoC и полигон для уязвимости неавторизованного доступа ZooKeeper CVE-2014-085 usage ./nuclei -duc -t zookeeper-unauth.yaml -u ip...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Concert Operate version 5.2.0 Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, zipkin, ruby3.4-jrjackson, celeborn, cassandra, ruby3.2-jrjackson, strimzi-kafka-oauth, thingsboard, keycloak-config-cli, neo4j, apache-pulsar, wavefront-proxy, cassandra-reaper, tez, apicurio-registry, kafka, gradle, logstash, apache-tik...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, zipkin, ruby3.4-jrjackson, celeborn, cassandra, ruby3.2-jrjackson, strimzi-kafka-oauth, thingsboard, keycloak-config-cli, neo4j, apache-pulsar, wavefront-proxy, cassandra-reaper, tez, apicurio-registry, kafka, gradle, logstash, apache-tik...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, zipkin, ruby3.4-jrjackson, celeborn, cassandra, ruby3.2-jrjackson, strimzi-kafka-oauth, thingsboard, keycloak-config-cli, neo4j, apache-pulsar, wavefront-proxy, cassandra-reaper, tez, apicurio-registry, kafka, gradle, logstash, apache-tik...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, zipkin, ruby3.4-jrjackson, celeborn, cassandra, ruby3.2-jrjackson, strimzi-kafka-oauth, thingsboard, keycloak-config-cli, neo4j, apache-pulsar, wavefront-proxy, cassandra-reaper, tez, apicurio-registry, kafka, gradle, logstash, apache-tik...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, zipkin, ruby3.4-jrjackson, celeborn, cassandra, ruby3.2-jrjackson, strimzi-kafka-oauth, thingsboard, keycloak-config-cli, neo4j, apache-pulsar, wavefront-proxy, cassandra-reaper, tez, apicurio-registry, kafka, gradle, logstash, apache-tik...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: sonarqube, opensearch, akhq, zipkin, ruby3.4-jrjackson, celeborn, cassandra, ruby3.2-jrjackson, strimzi-kafka-oauth, thingsboard, keycloak-config-cli, neo4j, apache-pulsar, wavefront-proxy, cassandra-reaper, tez, apicurio-registry, kafka, gradle, logstash, apache-tik...

CVE-2026-59969

A flaw was found in Apache ZooKeeper. When operating in FIPS Federal Information Processing Standards mode with specific Transport Layer Security TLS settings enabled, ZooKeeper's quorum communication fails to properly verify the hostname of peer certificates. This vulnerability allows a maliciou...

CVE-2026-84501

A flaw was found in Apache ZooKeeper. An unauthenticated attacker can inject arbitrary fake log lines into the operational log by sending a specially crafted request containing newline characters. This vulnerability allows the attacker to forge complete log entries, including timestamps, log...

CVE-2026-59739

A flaw was found in Apache ZooKeeper. This vulnerability allows a remote attacker to discover paths that should be restricted by Access Control Lists ACLs. By registering watches on non-existent paths and then reconnecting after these paths are created with restricted ACLs, the attacker can bypas...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: zookeeper, opensearch, spark, kafka, akhq, druid, apache-pulsar...

CVE-2026-77421 vulnerabilities

Vulnerabilities for packages: zookeeper, opensearch, spark, kafka, akhq, druid, apache-pulsar...

GHSA-R2XF-8XR9-62GW vulnerabilities

Vulnerabilities for packages: scala, apache-pulsar-fips, zookeeper-fips, kafka-fips, hadoop-client-modules, zookeeper, kafka, opensearch, opensearch-fips, apache-nifi, ghidra, akhq, spark, apache-pulsar, pinot, apache-camel-karavan-devmode, wazuh-indexer, pinot-fips, hadoop-fips, spark-fips, drui...

CVE-2026-77421 vulnerabilities

Vulnerabilities for packages: scala, apache-pulsar-fips, zookeeper-fips, kafka-fips, hadoop-client-modules, zookeeper, kafka, opensearch, opensearch-fips, apache-nifi, ghidra, akhq, spark, apache-pulsar, pinot, apache-camel-karavan-devmode, wazuh-indexer, pinot-fips, hadoop-fips, spark-fips, drui...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: scala, apache-pulsar-fips, zookeeper-fips, kafka-fips, hadoop-client-modules, zookeeper, kafka, opensearch, opensearch-fips, apache-nifi, ghidra, akhq, spark, apache-pulsar, pinot, apache-camel-karavan-devmode, wazuh-indexer, pinot-fips, hadoop-fips, spark-fips, drui...

CVE-2026-77422 vulnerabilities

Vulnerabilities for packages: scala, apache-pulsar-fips, zookeeper-fips, kafka-fips, hadoop-client-modules, zookeeper, kafka, opensearch, opensearch-fips, apache-nifi, ghidra, akhq, spark, apache-pulsar, pinot, apache-camel-karavan-devmode, wazuh-indexer, pinot-fips, hadoop-fips, spark-fips, drui...

CVE-2026-77420 vulnerabilities

Vulnerabilities for packages: scala, apache-pulsar-fips, zookeeper-fips, elasticsearch, kafka-fips, hadoop-client-modules, zookeeper, kafka, opensearch, opensearch-fips, apache-nifi, ghidra, akhq, spark, apache-pulsar, pinot, apache-camel-karavan-devmode, elasticsearch-fips, wazuh-indexer,...