10126 matches found
openrasp
OpenRASP 背景 最近几年，Web攻击手段开始变得复杂，攻击面也越来越广。传统的安全防护手段，WAF、IDS 等等，大多是基于规则，已经不能满足企业对安全的基本需求。Gartner 在2014年提出了 "应用自我保护" 技术的概念，即 "对应用服务的保护，不应该依赖于外部系统；应用应该具备自我保护的能力"。 为此，百度推出了开源的自适应安全产品 -- OpenRASP，希望通过开源免费的形式，让更多的人参与进来，并让互联网变得更加安全 里程碑 点击这里查看 roadmap 项目简介 RASP...
JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization
The JMS over HTTP Invocation Layer in JBossMQ, as implemented in HTTPServerILServlet.java in JBoss Application Server AS 4.x and earlier, does not properly restrict the classes that can be deserialized from the raw POST body. This allows remote attackers to execute arbitrary code or cause a denia...
jexboss
JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...
CVE-2026-87266
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...
CVE-2026-87256
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability...
CVE-2026-87252
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where...
CVE-2026-83461
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...
CVE-2026-87266
Oracle Agile PLM (Oracle Supply Chain), specifically the Application Server component in version 9.3.6 , is vulnerable to an easily exploitable, unauthenticated network attack via HTTP . A successful attack can result in unauthorized access to critical data or complete access to all Agile PLM-acc...
EUVD-2026-79918
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...
EUVD-2026-79909
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. While the vulnerability...
CVE-2026-87256
Oracle Agile PLM version 9.3.6 (component: Application Server) is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Due to scope change , attacks may significantly impact additional products beyond Agile P...
EUVD-2026-79906
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Application Server. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where...
CVE-2026-87252
CVE-2026-87252 affects Oracle Agile PLM (Oracle Supply Chain, component: Application Server ), version 9.3.6 . The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the hardware where Agile PLM executes to compromise the application. It...
CVE-2026-83463
Oracle Mobile Application Server (MWA Terminal Server component of Oracle E-Business Suite , versions 12.2.3–12.2.15) is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to achieve full takeover of the server, impacting...
EUVD-2026-79761
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...
clusterd
clusterd clusterd 是一个开源的应用服务器攻击工具包。由于对当前的指纹识别和利用方法感到不满，clusterd 自动化了应用服务器攻击中的指纹识别、侦察和利用阶段。更多信息请参见 wiki。 需求 Python = 2.7.x Requests = 2.2.x 安装 推荐的 clusterd 安装方式是克隆 Github 仓库 root@kitploit: git clone https://github.com/hatRiot/clusterd.git clusterd 特性 clusterd 目前支持六种不同的应用服务器平台，还有几种正处于开发和研究阶段 JBoss ...
CVE-2025-31324
CVE-2025-31324 此检测方法如何工作？ 该模板向目标的基本 URL 发送 HTTP GET 请求，并检查响应头以识别 SAP NetWeaver Application Server 实例。此信息有助于评估系统是否可能受 CVE-2025-31324 影响。 如何运行此脚本？ 1. 从 此处 下载 Nuclei 2. 将模板复制到你的本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考 https://nvd.nist.gov/vuln/detail/CVE-2025-31324...
SAP NetWeaver Application Server Java 7.5 - Local File Inclusion
SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...