Lucene search
+L

118 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution Exploit für CVE-2007-4560 ClamAV Milter Sendmail 0.91.2 Remote Code Execution Der Exploit dient ausschließlich zu Bildungszwecken und sollte nicht für böswillige Zwecke verwendet werden...

7.6CVSS5.4AI score0.83539EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/24 9:08 p.m.2 views

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python-RCE-Exploit für Sendmail mit ClamAV-Milter 0.91.2 CVE-2007-4560. Remote-Root-Befehlseinschleusung über SMTP-RCPT-TO-Header. Über Python-Port des klassischen Sendmail/ClamAV-Milter-Remote-Root-Exploits, ursprünglich in Perl von Eliteboy...

7.6CVSS5.2AI score0.83539EPSS
SaveExploits13
ATTACKERKB
ATTACKERKB
added 2026/02/20 6:40 a.m.7 views

CVE-2017-4560

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.10 views

CVE-2026-24656

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...

3.7CVSS5.8AI score0.00665EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/26 12:30 p.m.16 views

GHSA-JMW5-58C7-587H Apache Karaf Decanter has Deserialization of Untrusted Data in its Log Socket Collector

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter Log Socket Collector exposes port 4560 without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. The Log Socket Collector is vulnerable to deserialization of...

3.7CVSS5.8AI score0.00665EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/01/26 12:30 p.m.17 views

Apache Karaf Decanter has Deserialization of Untrusted Data in its Log Socket Collector

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter Log Socket Collector exposes port 4560 without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. The Log Socket Collector is vulnerable to deserialization of...

3.7CVSS5.8AI score0.00665EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
added 2026/01/26 10:50 a.m.7 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the log-socket collector process. An attacker can execute arbitrary code or cause a denial of service by sending specially crafted serialized objects to the exposed port 4560 when the allowed classe...

8.7CVSS6.2AI score0.00665EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/26 10:16 a.m.14 views

CVE-2026-24656

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...

3.7CVSS0.00665EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/26 9:41 a.m.11 views

CVE-2026-24656 Apache Karaf: Decanter log-socket collector has deserialization vulnerability

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...

3.7CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/01/26 9:41 a.m.38 views

CVE-2026-24656

Concretely, CVE-2026-24656 affects Apache Karaf Decanter before 2.12.0, specifically the Decanter log socket collector that exposes port 4560 without authentication. If the collector exposes the allowed-classes property, this configuration can be bypassed, allowing deserialization of untrusted da...

3.7CVSS5.8AI score0.00665EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/26 9:41 a.m.4 views

CVE-2026-24656

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...

3.7CVSS5.8AI score0.00665EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/26 9:41 a.m.45 views

CVE-2026-24656 Apache Karaf: Decanter log-socket collector has deserialization vulnerability

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...

0.00665EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/26 9:41 a.m.14 views

EUVD-2026-4680

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...

3.7CVSS5.8AI score0.00665EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/25 12:00 a.m.31 views

PT-2026-4647

Name of the Vulnerable Software and Affected Versions Apache Karaf Decanter versions prior to 2.12.0 Description The Decanter log socket collector in Apache Karaf has a deserialization issue. The collector operates on port 4560 without authentication. If the allowed classes property is exposed, i...

3.7CVSS5.9AI score0.00665EPSS
SaveExploits0References14
EUVD
EUVD
added 2026/01/24 7:26 a.m.9 views

EUVD-2026-4560

The Administrative Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'login' and 'logout' shortcode attributes in all versions up to, and including, 0.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00236EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-0114

Malware in sbrugna...

7.5CVSS6.1AI score0.04156EPSS
SaveExploits0References16
RedhatCVE
RedhatCVE
added 2025/05/14 7:11 a.m.30 views

CVE-2025-4560

The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...

6.9CVSS7.2AI score0.00339EPSS
SaveExploits0References4
Circl
Circl
added 2025/05/12 10:15 a.m.13 views

CVE-2025-4560

creationtimestamp| type| source ---|---|--- 2025-05-12 10:15:36+00:00| seen| https://t.me/cvedetector/25067...

6.9CVSS4.8AI score0.00339EPSS
SaveExploits0References1
Circl
Circl
added 2025/05/09 8:26 p.m.11 views

RHSA-2025:4560

creationtimestamp| type| source ---|---|--- 2025-05-09 20:26:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15833 2025-05-09 20:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15835...

4.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/17 12:00 a.m.28 views

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2024-4560)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4560 advisory. - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144...

7.4CVSS6.6AI score0.01257EPSS
SaveExploits0References7
Rows per page
Query Builder