artemis

Let AI assistants and test suites use real phones like a human. English • 中文文档 • Workflow Showcase • Quick Start • MCP for IDEs • Benchmarks • Discord Community Live Demo: Setup driving routes and calculate total durations in Google Maps, then open YouTube to play a Coldplay song. Key Highlights...

Artemis

Artemis is a modular vulnerability scanner. It's the tool that powers CERT PL scanning activities by checking various aspects of website security and building easy-to-read messages ready to be sent to the scanned organizations. Quick Start 🔨 | Docs 📚 If you want to use additional modules that...

Artemis

Artemis Overview A tools for Find APK Infrastructure . Brought to you by: HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized...

artemis2hashcat

artemis2hashcat Description Python3 implementation for converting Artemis PBKDF2WithHmacSHA1 hashes to hashcat format Usage The default configuration for Apache Artemis is to use the DefaultSensitiveStringCodec in order to store user passwords as PBKDF2WithHmacSHA1 hashes in the...

CVE-2023-50780

CVE-2023-50780: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ Artemis By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/console/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J indirectly resulting ...

Denial Of Service (DoS)

Apache ActiveMQ Artemis is vulnerable to a denial-of-service DoS. The vulnerability is due to the processing of unused method parameters, which allows an authenticated attacker with MANAGE permission to craft payloads that cause excessive computation and pin processing threads...

RHLW-2026-0A4E3CE968CB9794 Lightwell Security Advisory: spring-boot-autoconfigure 2.7.18.rhlw-00004

Red Hat Lightwell has released org.springframework.boot:spring-boot-autoconfigure 2.7.18.rhlw-00004 with a backported security fix. CVE-2026-41001: Predictable Temp Directory in Artemis Auto-configuration This patched artifact is a drop-in replacement for...

Apache Artemis Authentication Bypass

The vulnerability of asynchronous messaging systems like Apache ActiveMQ and Apache Artemis lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

Exploit for Missing Authentication for Critical Function in Apache Artemis

CVE-2026-57967 — Apache ActiveMQ Artemis Unauthenticated Sessi...

CVE-2026-101292

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...

dev.fpinbo:jms4s-active-mq-artemis_2.12 (>=0.0.1, <=0.4.0), dev.fpinbo:jms4s-active-mq-artemis_2.13 (>=0.0.1, <=0.4.0) +66 more potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-jms-client-all (>=2.11.0, <=2.31.2)

org.apache.activemq:artemis-jms-client-all MAVEN version =2.11.0, =0.0.1, =0.0.1, =0.0.0-notforuse-03, =0.0.0-notforuse-06, =2.11.0, =2.17.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.31.1 and more Source cves: CVE-2026-101292 Source advisory:...

org.apache.activemq:artemis-features (>=2.31.1, <=2.33.0) potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-jms-client-osgi (>=2.31.1, <=2.33.0)

org.apache.activemq:artemis-jms-client-osgi MAVEN version =2.31.1, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

org.apache.activemq:artemis-features (>=2.31.1, <=2.33.0) potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-core-client-osgi (>=2.31.1, <=2.33.0)

org.apache.activemq:artemis-core-client-osgi MAVEN version =2.31.1, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

CVE-2026-101292

Apache ActiveMQ Artemis versions before 2.34.0 are vulnerable to an unsafe reflection vulnerability within the FederationStreamConnectMessage.getFederationPolicy() method. The root cause is the direct reading of a class name from the CORE protocol wire buffer without proper type validation, which...

CVE-2026-101292 Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...

CVE-2026-101292 Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...

net.corda.corda-flows:corda-flows.corda.cpk (5.0.0-devpreview), net.corda:corda-application-internal (5.0.0-devpreview) +5 more potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-server-osgi (>=2.17.0, <=2.33.0)

org.apache.activemq:artemis-server-osgi MAVEN version =2.17.0, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

org.apache.activemq.examples.broker:queue-jakarta (>=2.19.0, <=2.31.1), org.apache.activemq:apache-artemis (>=2.19.0, <=2.23.1) +2 more potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-jakarta-client-all (>=2.19.0, <=2.32.0)

org.apache.activemq:artemis-jakarta-client-all MAVEN version =2.19.0, =2.19.0, =2.19.0, =4.4.2, =4.4.2, =4.4.3 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

EUVD-2026-88242

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...

CVE-2026-101292

Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...