CVE-2020-13151

CVE-2020-13151 POC Aerospike Database 5.1.0.3 Host Command Execution Full writeup @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html poc.lua shows manual exploitation of the server cve2020-13151.py for automated exploitation run-poc.sh sets up a docker...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...

EUVD-2016-9871

Malware in sbrugna...

EUVD-2016-9872

Malware in sbrugna...

EUVD-2016-9874

Malware in sbrugna...

EUVD-2016-9870

Malware in sbrugna...

EUVD-2019-0345

Malware in sbrugna...

EUVD-2023-2318

Malicious code in bioql PyPI...

Malicious code in django-aerospike-sessions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47758 Malicious code in django-aerospike-sessions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

The vulnerability of the Java client of the Aerospike Database management system allows a hacker to execute arbitrary code.

The vulnerability of the Java client of the Aerospike Database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Arbitrary Code Execution

com.aerospike:aerospike-client is vulnerable to Arbitrary Code Execution. The vulnerability is due untrusted deserialization during client side message validation, which allows for an attacker to trick a client into connecting to a malicious server, which will then execute arbitrary code when the...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

CVE-2023-36480

CVE-2023-36480 affects the Aerospike Java Client. The vulnerability arises from unsafe deserialization of server-provided data: messages may contain Java objects that the client deserializes via JBLOB payloads using Java’s ObjectInputStream, without sufficient validation. This can lead to Remote ...

CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

Deserialization of Untrusted Data

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...