java vulnerability scanner

Java Web Development-persistent/storage-type XSS vulnerability1. What is an XSS vulnerability attack?XSS is the abbreviation for cross site scripting attacks (Scripting), which is known as XSS rather than CSS, which is to be distinguished from cascading style sheets (cascading style sheets,css).2. The principle of XSS vulnerability attackA malicious attacker inse

Release date:Updated on: Affected Systems:Oracle Java Virtual Machine (JVM)Description:--------------------------------------------------------------------------------Bugtraq id: 55501Cve id: CVE-2012-4416 Oracle Java Virtual Machine is a Virtual Machine that can execute Java bytecode. Oracle Java Virtual Machine (J

Yuantong's website server fell (java deserialization vulnerability) Yuantong's website server fell (java deserialization vulnerability) The java deserialization vulnerability exists when a Site Server of yuantong falls down.Vuln

SAP NetWeaver Java as xss Vulnerability (CVE-2016-3975)SAP NetWeaver Java as xss Vulnerability (CVE-2016-3975) Release date:Updated on:Affected Systems: SAP NetWeaver Java AS 7.4 Description: CVE (CAN) ID: CVE-2016-3975SAP NetWeaver is the integrated technology platfor

Apache Struts ActionServlet. java XSS Vulnerability (CVE-2016-1182)Apache Struts ActionServlet. java XSS Vulnerability (CVE-2016-1182) Release date:Updated on:Affected Systems: Apache Group Struts 1 1.x-1.3.10 Description: CVE (CAN) ID: CVE-2016-1182Struts is the open source code used to build Web applications.In

Affected Systems:Sun JDK Sun JRE Sun JRE Sun SDK Unaffected system:Sun JDK 5.0 Update 10Sun JRE 5.0 Update 10Sun JRE 1.4.2 _ 15Sun SDK 1.4.2 _ 15Description:Sun's Java Runtime Environment (JRE) provides a reliable runtime environment for JAVA applications.The JRE Font Parsing Code has a vulnerability, which may cause unauthorized applets to perform operations wit

my blog:Java Anti-Serialization vulnerability detectionThird, Java Anti-serialization Vulnerability Defense:1, the white list check mechanism of the class:In fact, the principle is simple, that is, for all incoming deserialization objects, before the deserialization process begins, the type name to do a check, non-compliant class does not deserialize the operati

A Java deserialization command execution vulnerability in Digital China can be found in GETSHELL. Getshell is supported. The database configuration information is hard-coded and connected to the database successfully. There is a risk of information leakage. Http: // 219.143.213.248/ Deployed weblogic middleware: Java deserialization command execution

10.3.6 version of WebLogic requires patches to 10.3.6.0.171017 (October 2017 patch, Java deserialization vulnerability upgrade), Oracle official recommends at least October 2017 patch; 10.3.6 The following versions need to be upgraded to 10.3.6 and then in the patch upgrade.First, view version1. Use the following command to re-match environment variablesD:\Oracle\Middleware\wlserver_10.3\server\binSetwlsenv

Java deserialization vulnerability in WebLogic implements binary file upload and Command Execution 0x00 Introduction Java deserialization vulnerability has been detected on famous servers such as WebLogic and JBoss for a long time. The breenmachine of the FoxGlove Security team provides a detailed analysis, but does n

critical information, it is possible to obtain the current logged-in user's information from the session and prevent the user's personal information from being modified after the account is logged in as 3000001.　　4. Order Details Interface: If it is to query the user's order details, only through the order ID query, even if the interface name plus/user, interception of users who are not logged in, it is possible that other users can log in to find the details of non-personal orders. In this cas

Release date:Updated on: Affected Systems:Apache Group Tomcat 5.0-7.0.6IBM Websphere Application Server 6.1.0.27-6.1. 33Sun SDK 1.3.1-1.4.2 _ 24IBM Runtimes for Java technological 5.0Unaffected system:Apache Group Tomcat 7.0.8Apache Group Tomcat 6.0.32IBM Runtimes for Java Technology 5.0 SR12 FP 4Description:--------------------------------------------------------------------------------Bugtraq id: 46091Cve

Oracle Java "JFileChooser" Security Policy Bypass Vulnerability Release date:Updated on: Affected Systems:Ubuntu Linux 9.10-10.04Description:--------------------------------------------------------------------------------Bugtraq id: 46223 The Java Runtime Environment (JRE) provides a reliable runtime environment for JAVA