apache__rocketmq_CVE-2019-17572_4-6-0

Apache RocketMQ Apache RocketMQ is a distributed messaging and streaming platform with low latency, high performance and reliability, trillion-level capacity and flexible scalability. It offers a variety of features: Pub/Sub messaging model Financial grade transactional message A variety of cross...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

This repository does not have a README...

CVE-2023-33246-Copy

1. Reference Learning CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Local Environment Setup 2.1 Download Image root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Start broker, namesrv, console Start namesrv root@kitploit: docker...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution CVE-2023-33246 Exploit Usage: java -jar CVE-2023-33246.jar -ip "127.0.0.1" -cmd "open -a calculator" Disclaimer: This detection tool is intended only for security testing by security testers of major security companies. Do not use it to invade ...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept：introduce basic concepts in RocketMQ. Feature：introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture：introduce...

apache__rocketmq_CVE-2023-33246_5-1-0

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept: introduce basic concepts in RocketMQ. Feature: introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture: introduce...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution OVERVIEW Apache RocketMQ is one of the most popular and widely used distributed messaging and streaming platforms. A command execution vulnerability has been recently reported in Apache RocketMQ affecting version 5.1.0 and below. A remote...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation This project is a Maven-based demonstration of mitigating CVE-2023-33246, a vulnerability in Apache RocketMQ. Project Structure org/example/Main.java: The main program file. org/apache/rocketmq/common/BrokerConfig.java: Modified version of the official RocketMQ 4.9.5...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246: Apache RocketMQ Remote Command Execution Vulnerability Detection Tool Tool Features Simple Usage Run ./apacherocketmqcve202333246scannerlinuxamd64 scan Output: Whether the vulnerability exists: Yes or VulnFound: true indicates the vulnerability exists, and the Versi...

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Apache RocketMQ Arbitrary File Write Vulnerability Exploit Demo Overview In fact, the Arbitrary file write vulnerabilityCVE-2023-37582 in Apache RocketMQ has already been addressed in the CVE-2023-33246 RCE vulnerability. However, the fix provided for CVE-2023-33246 RCE is n...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool...

EUVD-2020-0539

Malware in sbrugna...

CVE-2019-17572

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...

Apache RocketMQ < 4.9.6 / 5.0.x < 5.1.1 RCE

The version of Apache RocketMQ installed on the remote host is prior to 4.9.6 or 5.1.1. It is, therefore, affected by a remote code execution vulnerability. - For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of...

CVE-2023-33246

A vulnerability was found in Apache RocketMQ where, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification. This flaw allows an attacker to use...

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Misconfigured and vulnerable Linux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software. "Perfctl is particularly elusive and persistent, employing several sophisticated...

Apache RocketMQ < 5.3.0 Information Disclosure (CVE-2024-23321)

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

Apache RocketMQ Information Disclosure Vulnerability

Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. An information disclosure vulnerability exists in Apache RocketMQ, which can be exploited by an attacker to obtain an administrator's account and password via a specific...

GHSA-Q9W2-H4CW-8GHP Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...