momo安全漏洞库

共聚合 7076 条情报漏洞监控 4607 / 网安开源项目 2469

来自 GitHub Issues、仓库检索和关键词命中的 CVE / RCE / POC 动态。

Missing ch.logback.core.util.VersionUtil class on classpath. The version of logback-core is probably older than 1.5.26.

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49249 发布时间 2026-02-25 入库 2026-02-25 11:15

After upgradin my project to `spring-boot-starter-parent 4.0.2` the following WARN appears in the log during executing Tests: ``` WARN in ch.qos.logback.classic.util.ContextInitializer@42e3ede4 - Missing ch.logback....

TFTP Path Traversal

Microsoft MSRC CVE-2026-21620 发布时间 2026-02-25 入库 2026-02-27 20:29

Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

Microsoft MSRC CVE-2026-27211 发布时间 2026-02-25 入库 2026-02-27 20:29

khadafigans/React2Shell

GitHub Repos/search khadafigans/React2Shell 发布时间 2026-02-25 入库 2026-03-14 02:42

React2Shell - CVE-2025-66478 RCE Exploit | topics: exploit, nextjs, rce, react2shell, react2shell-exploitation | language: Python

Upgrade to Kafka 3.9.2 for Spring Boot 3.5.

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49317 发布时间 2026-02-24 入库 2026-02-25 07:14

Upgrade to [Kafka 3.9.2](https://downloads.apache.org/kafka/3.9.2/RELEASE_NOTES.html) to fix various CVEs in the transitive dependencies.

joshuavanderpoll/CVE-2021-3129

GitHub Repos/search joshuavanderpoll/CVE-2021-3129 发布时间 2026-02-24 入库 2026-03-14 06:55

Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection) | topics: cve, cve-2021-3129, exploit, exploits, laravel, pentest-tool, pentesting, python, rce, scanner, security, security-tools...

Unable to run nativeTests when non-constant value is passed as command-line app args

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#49316 发布时间 2026-02-24 入库 2026-02-25 05:14

Hi, I find out that when I have CLI application and wan to test `nativeTest` mode of it, it fails badly on following application. I am not using standard `@SpringBootTest` annotation because one of the CLI parameters is ...

Rickidevs/CVE-2026-26717

GitHub Repos/search Rickidevs/CVE-2026-26717 发布时间 2026-02-24 入库 2026-03-14 02:41

I discovered a Timing Attack vulnerability in the Richie LMS, developed by France Université Numérique (OpenFUN), and it was assigned the ID CVE-2026-26717 by MITRE.

muhammad-taher/RCE_Prevention_System_LINUX

GitHub Repos/search muhammad-taher/RCE_Prevention_System_LINUX 发布时间 2026-02-24 入库 2026-03-14 02:42

language: C

Add support for OpenTelemetry OTLP SDK exporter environment variables

GitHub Issues/spring-projects/spring-boot spring-projects/spring-boot#48799 发布时间 2026-02-24 入库 2026-02-25 02:13

### Problem Statement Spring Boot 4's `spring-boot-starter-opentelemetry` supports `OTEL_RESOURCE_ATTRIBUTES` (general configuration) but doesn't support standard OTLP exporter environment variables defined in the [Open...

优先展示中文安全团队维护的开源项目，兼顾工具落地场景和最近更新时间。

当前条件下没有命中网安开源项目。

github安全推送