93 matches found
ActiveMQ_CVE-2015-5254
ActiveMQ デシリアライゼーション CVE-2015-5254 脆弱性の説明：Apache ActiveMQ 5.13.0 より前の 5.x バージョンに安全上の脆弱性が存在します。この脆弱性は、プログラムがブローカーでシリアライズ可能なクラスを制限していないことに起因します。リモートの攻撃者は、特別に細工されたシリアライズ化された Java Message Service JMS ObjectMessage オブジェクトを利用して、任意のコードを実行する可能性があります。 影響を受けるバージョン：Apache ActiveMQ 5.13.0 より前の 5.x バージョン 0x01...
CVE-2020-5254
This repository does not have a README...
Exploitation-de-la-vuln-rabilit-CVE-2015-5254-
CVE-2015-5254脆弱性の悪用- CVE-2015-5254脆弱性は、アプリケーション間の通信に広く使用されるオープンソースのメッセージサーバーApache ActiveMQにおけるセキュリティホールです。この脆弱性はActiveMQバージョン5.13.0までに影響し、送信されるJMS ObjectMessage入力データのフィルタリング不足に起因します。 ネットワークスキャン： nmap -p 61616 -Pn -T5 -n -sC -sV 172.17.0.1 ダウンロードしたフォルダからDockerを使ってActiveMQ 2015を起動します：...
CVE-2020-5254
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:06+00:00| seen| Telegram/GzyKsU-CxmNA-7iUVuYxhuK-1O2CwrIjduDN5C54bM7TtfM 2026-09-15 00:00:29+00:00| published-proof-of-concept| Telegram/GzyKsU-CxmNA-7iUVuYxhuK-1O2CwrIjduDN5C54bM7TtfM...
MINI-5254-R8R8-26VM
Bulletin has no description...
CVE-2015-5254
creationtimestamp| type| source ---|---|--- 2026-04-20 04:00:04+00:00| seen| https://t.me/GithubRedTeam/81019 2026-04-20 09:00:05+00:00| published-proof-of-concept| Telegram/pmzKbihchBYeJvBnkfYLk5LESIxSAVi0zGHv3QahmixUjs 2026-09-02 01:00:08+00:00| seen|...
CVE-2026-5254
A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by this issue is some unknown functionality of the file /ui/app/components/AppJsonTreeView.vue of the component Webhook Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2026-5254 welovemedia FFmate Webhook AppJsonTreeView.vue cross site scripting
A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by this issue is some unknown functionality of the file /ui/app/components/AppJsonTreeView.vue of the component Webhook Handler. The manipulation leads to cross site scripting. The attack may be initiated...
EUVD-2022-4703
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-5254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NetHack before 3.6.6, some out-of-bound values for the hilitestatus option can be exploited. NetHack 3.6.6 resolves this issue. CVE-2020-5254 Note that Nessu...
CVE-2025-5254
creationtimestamp| type| source ---|---|--- 2025-07-25 11:39:03+00:00| seen| Telegram/NRPbLeXQJ155fAJBUbCx-u-vtZkbhnQdXRI6piUZVrjnw...
CVE-2010-5254
Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730 2009 Home Edition allows local users to gain privileges via a Trojan horse ArmAccess.dll file in the current working directory, as demonstrated by a directory that contains a .gbc or .gbt file. NOTE: some of these details are...
Cambium EPMP 1000 Account Password Reset
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cambium ePMP 1000 Account Password Reset', 'Description' = % This module exploits an access control vulnerability in Cambium ePMP device manageme...
CVE-2024-5254
creationtimestamp| type| source ---|---|--- 2024-07-17 09:51:35+00:00| seen| https://t.me/cvedetector/1061...
Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management
Summary Multiple vulnerabilities were addressed in IBM Application Performance Management 8.1.4.0 IF15 patch Vulnerability Details CVEID:CVE-2020-13920 DESCRIPTION: Apache ActiveMQ is vulnerable to a man-in-the-middle attack, caused by improper authentication validation when connecting to the JMX...
CVE-2019-5254
creationtimestamp| type| source ---|---|--- 2024-03-12 09:41:33+00:00| seen| https://t.me/ctinow/205427...
CVE-2014-5254
creationtimestamp| type| source ---|---|--- 2024-02-26 09:12:09+00:00| seen| https://t.me/ctinow/193179...
CVE-2023-5254
CVE-2023-5254 affects the AI ChatBot WordPress plugin. The vulnerability is an unauthenticated Sensitive Information Exposure via the qcld_wb_chatbot_check_user function, impacting versions up to and including 4.8.9. An attacker can confirm whether a username exists and view order information for...
WordPress ChatBot Plugin <= 4.8.9 is vulnerable to Sensitive Data Exposure
Software ChatBot Type Plugin Vulnerable versions = 4.8.9 Fixed in 4.9.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5254 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a08bb4253476 Credits Marco Wotschka Required privilege...
