UBUNTU-CVE-2026-93542

An out-of-bounds read in libXis XI2 class parsing via sizeclasses...

UBUNTU-CVE-2026-93543

An out-of-bounds read in libXis XI2 class parser in libXi before 1.8...

CVE-2026-93543

An out-of-bounds read in libXis XI2 class parser in libXi before 1.8...

EUVD-2026-85418

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to...

Moderate: Red Hat Security Advisory: java-1.8.0-ibm security update

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

hka-seminar-log4shell

Seminararbeit - Log4Shell漏洞演示 CVE-2021-44228 安全提示 本仓库仅供教育和演示用途 ，用于安全相关的研讨会论文。请勿在生产环境中或未经明确许可的情况下对系统使用此代码。该构建旨在提升安全意识，并展示当看似无害的功能（如日志记录、名称解析和动态类加载）组合在一起时，可能产生复杂漏洞。 目录 1. 项目描述 1.1 研讨会论文目标 1.2 演示概述 2. 什么是 Log4Shell？ 3. 技术组件详解 3.1 Log4j - 工作原理 3.2 JNDI - 查找机制 3.3 LDAP - 结构与作用 3.4 Log4Shell 一般流程 4...

The vulnerability of the printing control software in PaperCut MF and PaperCut NG, related to insecure dynamic class loading, allows a violator to execute arbitrary code.

The vulnerability of printing control software in PaperCut MF and PaperCut NG lies in the unsafe dynamic loading of classes, due to the lack of checks to ensure that the loaded classes comply with the list of allowed drivers. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the `NioPathHelper.deserialize` method in the Jackson-Databind library allows a hacker to load arbitrary files.

The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...

CVE-2022-24760

CVE-2022-24760 flujo Por defecto no se necesita clave para añadir, eliminar o modificar las clases en la base de datos. Diff commit https://github.com/parse-community/parse-server/commit/886bfd7cac69496e3f73d4bb536f0eec3cba0e4d La contaminación de prototipos ocurre en la función...

MAL-2026-16540 Malicious code in style-class-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

openjdk-orb: unauthed class loading via IIOP in EAP

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

openjdk-orb: unauthed class loading via IIOP in EAP

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

openjdk-orb: unauthed class loading via IIOP in EAP

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

CVE-2021-44228-Apache-Log4j

CVE-2021-44228Apache Log4j Remote Code Execution） Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: 1. 下载该项目，编译InjectClazz.java root@kitploit: download git clone...

Spring Framework Unsafe Deserialization via Jackson JMS Converters

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to unauthorized actions via gadget class deserialization. Affect...

CVE-2024-42327_Zabbix_SQLI

CVE-2024-42327 - Zabbix SQL注入漏洞 SQLI 非盲注且非时间型 针对CVE-2024-42327的POC，该漏洞为Zabbix中通过user.get API方法的认证后SQL注入。 此POC并非像我在其他地方看到的某些POC那样基于时间。 CVE描述 该漏洞存在于user.get API端点，可由具有API访问权限的非管理员用户利用，包括具有默认用户角色的帐户。 SQL注入缺陷存在于CUser类的addRelatedObjects函数中。该函数由CUser.get函数调用，而后者可供具有API访问权限的用户使用。 攻击者可通过操纵API调用来注入SQL命令。...

log4shelldetect

log4shelldetect 递归扫描文件或文件夹，寻找可能受以下漏洞影响的Java程序： CVE-2021-44228 Log4Shell v2.0.x - v2.14.x CVE-2021-45046 v2.15.x CVE-2021-45105 v2.16.x1 通过检查文件内部的类路径。 如果只想打印可能受影响的文件而非所有文件，请使用 -mode list 运行。 用法 root@kitploit: Usage: log4shelldetect options Options: -include-zip include zip files in the scan -mode...

CVE-2021-44228

CVE-2021-44228 Creo que esta historia es más práctica llorandochristophetd/log4shell-vulnerable-app Solo lo investigué por impulso y curiosidad, por lo que probablemente haya partes ambiguas o errores. Por favor, hazlo bajo tu propia responsabilidad. Crear el entorno de reproducción. Se espera qu...

Log4JShell-Bytecode-Detector

🔍 Log4JShell 字节码检测器 Log4JShell 字节码检测器是一款开源工具，可帮助识别 jar 文件是否受严重漏洞 CVE-2021-44228 影响。该工具扫描 jar 文件，并将其中的类与一组预先计算好的易受攻击类的哈希值进行比对。这些哈希值已针对 Maven Central 上的工件预先计算。 重要更新：我们扩展了 Maven Central 上受影响工件列表。该列表包含 18,816 个工件。这些工件要么将 log4j-core 声明为依赖项，要么我们在其中识别出与受影响版本的 log4j-core 相匹配的 .class 文件。 📝 运行方法 1. 在发布页面下载...

CVE-2016-4437

shiro-1.2.4-漏洞工具 解rememberMe值并导出对应的class文件 使用方式 xk-mt-rememberMe解码.py 运行讲解：运行后先输入密钥或者回车默认密钥为‘kPH+bIxk5D2deZiIxcaaaA==’，在输入请求包里面的rememberMe值，解析后会提示输入导出文件名会自动加class,如果不导出则直接回车。 运行启动：python xk-mt-rememberMe解码.py xk-mt-单个域名单个密钥检测.py...