Apache-RocketMQ-RCE-CVE-2023-37582-poc

このリポジトリには README がありません。...

CVE-2023-33246

CVE-2023-33246 - RocketMQ 원격 코드 실행 CVE-2023-33246 - Apache RocketMQ 설정 원격 코드 실행 익스플로잇 개요 RocketMQ는 분산 메시징 및 스트리밍 플랫폼입니다. RocketMQ 5.1.0 및 이하 버전은 임의 코드 인젝션Arbitrary Code Injection에 취약합니다. RocketMQ의 브로커 구성 요소가 외부 네트워크에 노출되어 있으며 권한 검증이 부족합니다. 공격자는 업데이트 구성 기능을 사용하여 RocketMQ가 실행 중인 시스템 사용자 권한으로 명령을 실행...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246：Инструмент обнаружения уязвимости удалённого выполнения команд в Apache RocketMQ Функции инструмента Простое использование Запустите ./apacherocketmqcve202333246scannerlinuxamd64 scan Вывод: если «Существует ли уязвимость: да» или VulnFound: true, это указывает на...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation Этот проект представляет собой демонстрацию на базе Maven по устранению уязвимости CVE-2023-33246 в Apache RocketMQ. Структура проекта org/example/Main.java: Основной файл программы. org/apache/rocketmq/common/BrokerConfig.java: Модифицированная версия официального...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ удаленное выполнение кода уязвимость CVE-2023-33246 Exploit Использование: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Особенности этого инструмента Из-за механизма поддержания активности heartbeat, который инициирует...

apache__rocketmq_CVE-2023-33246_5-1-0

Apache RocketMQ...

apache__rocketmq_CVE-2019-17572_4-6-0

Apache RocketMQ Apache RocketMQ — это распределённая платформа обмена сообщениями и потоковой обработки данных с низкой задержкой, высокой производительностью и надёжностью, ёмкостью триллионного уровня и гибкой масштабируемостью. Она предлагает множество возможностей: Модель обмена сообщениями...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Удалённое выполнение кода в Apache RocketMQ ОБЗОР Apache RocketMQ — одна из самых популярных и широко используемых распределённых платформ обмена сообщениями и потоковой передачи данных. Недавно была опубликована информация об уязвимости выполнения команд в Apache RocketMQ,...

CVE-2023-33246-Copy

1. Справочные материалы CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Локальная настройка окружения 2.1 Загрузка образов root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Запуск broker, namesrv, console Запуск namesrv...

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Демонстрация эксплуатации уязвимости произвольной записи файлов в Apache RocketMQ Обзор По сути, уязвимость произвольной записи файлов CVE-2023-37582 в Apache RocketMQ уже была устранена в рамках уязвимости удаленного выполнения кода CVE-2023-33246. Однако исправление,...

EUVD-2020-0539

Malware in sbrugna...

CVE-2019-17572

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...

Apache RocketMQ < 4.9.6 / 5.0.x < 5.1.1 RCE

The version of Apache RocketMQ installed on the remote host is prior to 4.9.6 or 5.1.1. It is, therefore, affected by a remote code execution vulnerability. - For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of...

CVE-2023-33246

A vulnerability was found in Apache RocketMQ where, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification. This flaw allows an attacker to use...

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Misconfigured and vulnerable Linux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software. "Perfctl is particularly elusive and persistent, employing several sophisticated...

Apache RocketMQ < 5.3.0 Information Disclosure (CVE-2024-23321)

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

Apache RocketMQ Information Disclosure Vulnerability

Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. An information disclosure vulnerability exists in Apache RocketMQ, which can be exploited by an attacker to obtain an administrator's account and password via a specific...

GHSA-Q9W2-H4CW-8GHP Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

CVE-2024-23321

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...