ColdFusionPwn

ColdFusionPwn 针对 Adobe ColdFusion 11/12 的 CVE-2017-3066 利用工具。 描述 该工具允许您生成序列化的 AMF 载荷，以利用对允许类的输入验证缺失漏洞。 详情请参阅我们的博客文章。 安装 获取最新版本的 ysoserial。 从发布页面获取 ColdFusionPwn。 用法 java -cp ColdFusionPwn-0.0.1-SNAPSHOT-all.jar:ysoserial-master-SNAPSHOT.jar com.codewhitesec.coldfusionpwn.ColdFusionPwner -s|-e...

CVE-2017-3066

CVE-2017-3066 描述 Adobe ColdFusion 使用 Action Message Format AMF 消息格式。AMF 协议是一种自定义的二进制序列化协议。它有两种格式：AMF0 和 AMF3。Action 消息由头部和主体组成。有多种不同语言的 AMF 实现。对于 Java，我们有 Adobe BlazeDS（现在是 Apache BlazeDS），它也用于 Adobe ColdFusion。 Adobe ColdFusion 在其 Apache BlazeDS 库中处理不受信任的 Java 对象时，存在 Java...

coldfusion-amf

coldfusion-amf Coldfusion AMF PWN pwn http://localhost "nslookup burpcollab.net"...

AMFDSer-ngng

AMFDSer-ngng Un complemento de Burp Extender, que tomará objetos AMF deserializados y los codificará en XML usando la librería Xtream. Basado en el trabajo original de Khai Tran, todos lo aclamamos https://blog.netspi.com/ AMFDSer-ngng también utiliza parte del código fuente de Jmeter de Kenneth...

CVE-2025-29632

Author: HanyiLuo, Yuqi Huo CVE-2025-29632 关于CVE-2025-29632所涵盖漏洞的信息 受影响版本：4.0.0及更早版本 当free5gc处理InitialUEMessage时，它只检查nASPDU引用是否为nil（即是否为空指针），但未验证nASPDU的内容是否为空。这导致在后续消息解析中调用nassecurity.DecodePlainNasNoIntegrityChecknASPDU.Value时，传递了一个空的字节数组作为参数。在该函数中，由于值为空，访问NAS消息安全头失败，从而导致AMF出错并崩溃。 poc.py：一个利用脚本...

CVE-2020-2950

Oracle-BI CVE-2020-2950 Deserialización AMF Versión: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Instalación:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Referencia: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC...

CVE-2026-90707

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

EUVD-2026-77377

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

CVE-2026-90707

Open5GS up to 2.7.x is affected by a use after free vulnerability in the Old AMF Discovery Fallback component, specifically in the function amf_nnrf_try_old_amf_discovery_fallback (file src/amf/nnrf-handler.c). Manipulation of the discovery_option argument triggers the flaw. The attack is remote ...

CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

PT-2026-91158

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf nnrf try old amf discovery fallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discovery option results in use after free. The attack may ...

CVE-2026-90707: Use After Free

A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...

CVE-2026-86212

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

CVE-2026-86212 Open5GS AMF/MME improper authorization

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

EUVD-2026-72103

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

CVE-2026-86212

Open5GS 2.7.7/2.8.0 is affected by an improper authorization vulnerability in the AMF/MME component. The flaw allows a remote attacker with low privileges to manipulate authorization checks, resulting in a low availability impact (no confidentiality or integrity impact). A proof-of-concept exploi...

CVE-2026-86212 Open5GS AMF/MME improper authorization

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

CVE-2026-86212 Open5GS AMF/MME improper authorization

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

PT-2026-86511

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...