← All credits
Matei "Mal" Badanoiu
14 vulnerability records and advisories credit this contributor.
CVE-2026-1770
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2022-41678
Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE
CVE-2025-6384
Improper Control of Dynamically-Managed Code Resources in Crafter Studio
CVE-2023-50780
Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans
CVE-2025-26865
Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE
CVE-2024-34693
Apache Superset: Server arbitrary file read
CVE-2023-40037
Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
CVE-2023-34468
Apache NiFi: Potential Code Injection with Database Services using H2
CVE-2023-34212
Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components
CVE-2023-26269
Apache James server: Privilege escalation through unauthenticated JMX