Project-Vuln-Detection-N-Mitigation_101

Project-Vuln-Detection-N-Mitigation101 RCE por deserialización en Apache ActiveMQ CVE-2023-46604 – Proyecto de la Fase 2 Arquitecturas de Seguridad y Administración de Sistemas Autor: Vaishnavu C V · Fecha: 17 Sep 2025 Estado: ⌀ Entregables de la Fase 2 completados Resumen Este repositorio...

apache-activemq-rce-research

Apache ActiveMQ Classic — Investigación de RCE Archivo de investigación privado para la cadena de ejecución remota de código Apache ActiveMQ Classic Jolokia → addNetworkConnector → xbean/Spring-XML CVE-2026-34197 y su evasión del parche CVE-2026-42588, además de una auditoría completa de...

CVE-2026-34197-Lab

CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab Overview This repository is a local Docker lab for studying CVE-2026-34197 , an Apache ActiveMQ Classic remote code execution issue reachable through the Jolokia JMX-HTTP API. The lab compares two ActiveMQ Classic instances side by side:...

CVE-2026-41044

CVE-2026-41044 Note: Educational Purposes Only From Advisory to RCA in an Afternoon: How AI Collapses N-Day Analysis A short, honest walkthrough of CVE-2026-41044 in Apache ActiveMQ using the exact pre and post patch code. CVE-2026-41044 was disclosed on April 24, 2026. It's a remote code executi...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

CVE-2026-34197

Herramienta de detección de seguridad para ActiveMQ Classic CVE-2026-34197 Esta es una herramienta de detección de superficie de exposición para Apache ActiveMQ Classic, orientada a la defensa y a la investigación en redes internas, que se utiliza para ayudar a evaluar los riesgos relacionados co...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ Jolokia: Ejecución Remota de Código RCE CVE-2026-34197 es una vulnerabilidad de ejecución remota de código RCE de alta severidad que afecta a Apache ActiveMQ Classic. El problema se encuentra dentro del puente Jolokia JMX-HTTP, que expone operaciones de gestión a...

CVE-2026-34197

Laboratorio ActiveMQ Classic CVE-2026-34197 Este repositorio contiene un laboratorio local para estudiar CVE-2026-34197 en Apache ActiveMQ Classic y para comparar una instancia vulnerable con una compilación parcheada. El repositorio está organizado para respaldar dos objetivos: Reproducir el...

Exploit for Code Injection in Apache Activemq

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector...

Exploit for Improper Input Validation in Apache Activemq

Apache ActiveMQ Classic — RCE Research Private research archi...

CVE-2026-54475 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover

Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Apache ActiveMQ Classic temporary destinations are expected to be isolated to the connection that created them. The isolation can be broken as this is only checked in the client, allowing...

PT-2026-53846

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.8 Apache ActiveMQ versions 6.0.0 through 6.2.6 Description An authorization flaw exists in the handling of temporary destinations. While these destinations are intended to be isolated to the connection th...

Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This...

PT-2026-34867

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.19.6 Apache ActiveMQ versions 6.0.0 through 6.2.4 Apache ActiveMQ Broker versions prior to 5.19.6 Apache ActiveMQ Broker versions 6.0.0 through 6.2.4 Apache ActiveMQ All versions prior to 5.19.6 Apache...

Exploit for CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API...

Exploit for CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE vía Jolokia API Descr...

Exploit for Deserialization of Untrusted Data in Apache Activemq

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ D...

PT-2021-16958

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 2.16.0 Apache ActiveMQ versions prior to 5.16.1 Apache ActiveMQ versions prior to 5.15.14 Description The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP serve...