CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

CVE-2026-16723

🚨 CVE-2026-16723 — RCE über die @JSONType-Ressourcen-Erkennungskette in fastjson 1.2.83 Reproduktionsprojekt für Remote-Klassenladen / Befehlsausführung RCE bei fastjson 1.2.66 1.2.83 über@JSONType-Annotation + ungültigen Klassennamen + jar:-Protokoll. ⚠️ Haftungsausschluss Dieses Projekt dient...

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's...

CVE-2026-82078

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBC-Treiber Remote Code Execution RCE Der Amazon JDBC-Treiber für Redshift ist ein Type 4 JDBC-Treiber, der Datenbankkonnektivität über die standardmäßigen JDBC-Anwendungsprogrammierschnittstellen APIs bereitstellt, die in der Java Platform, Enterprise Edition...

CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

EUVD-2026-67714

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

CVE-2026-82078

CVE-2026-82078 is an unsafe dynamic class loading vulnerability (CWE-470, CVSS 9.4 Critical) in the database connection utilities of PaperCut NG and PaperCut MF . The application instantiates database driver classes from configurable names without an allowlist, allowing arbitrary Java bytecode to...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet POC per CVE-2020-2551 da utilizzare su Internet POC di test utilizzabile per test su Internet python CVE-2020-2551.py HOST IP Tentativo di modifica del codebase per il caricamento remoto delle classi fallito python CVE-2020-TEST.py HOST IP Breve discussione sull...

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF-zu-RCE-JAR-Exploit Komponentenlink https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Verwendung Ändere die Zeile 11 in...

java-remote-class-loader

Mit diesem Tool können Sie Java-Bytecode in Form von Class-Dateien an Ihre Clients oder potenzielle Ziele senden, um ihn mit Java ClassLoader und der Reflect API zu laden und auszuführen. Der Client empfängt die Class-Datei vom Server und gibt die entsprechende Ausgabe zurück. Payloads müssen in...

yaml-payload

yaml-payload Un payload di deserializzazione SnakeYAML per CVE-2022-1471 , adattato da artsploit/yaml-payload basato originariamente su mbechler/marshalsec. Cosa fa Quando caricato tramite l'uso non sicuro di Yaml.load di SnakeYAML, questo payload prende il controllo dell'applicazione in esecuzio...

graylog-cve-2024-24824-exploit

Sfruttare il caricamento arbitrario di classi sulla JVM Questo repository contiene l'exploit proof-of-concept presentato nel mio talk: Sfruttare il caricamento arbitrario di classi sulla JVM Guardalo qui se sei interessato: Youtube L'exploit ha come bersaglio CVE-2024-24824 un piccolo refuso nell...

CVE-2021-44228

CVE-2021-44228 मुझे लगता है कि यह कहानी अधिक व्यावहारिक है रोते हुएchristophetd/log4shell-vulnerable-app मैंने केवल उत्सुकता और आवेग में जांच की है, इसलिए संभव है कि कुछ अस्पष्ट स्थान या गलतियाँ हों। कृपया, अपनी जिम्मेदारी पर कार्य करें। पुनरुत्पादन वातावरण बनाना। linux वातावरण में काम करना चाहिए...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNUNG Dieser Code führt beliebige Befehle auf deinem System aus. NUR in virtuellen Maschinen oder isolierten Containern verwenden. Beschreibung Funktionaler PoC für CVE-2026-0848. Demonstriert, wie eine bösartige JAR-Datei beliebigen Code...

CVE-2026-47856

Spring Integration's JSON to object conversion uses the jsonTypeId header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0...

CVE-2019-2725

CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Befehlsausgabe 10.3.6 12.1.3 ResultBaseExec.java Wird zum Testen von defineClass verwendet, dekodiert die schadhafte Klasse aus Base64 und führt den Code aus. Hauptsächlich der Einfachheit halber kann verwendet werden oder nicht...

hka-seminar-log4shell

Seminararbeit - Log4Shell-Schwachstellen-Demonstration CVE-2021-44228 Sicherheitshinweis Dieses Repository dient ausschließlich zu Bildungs- und Demonstrationszwecken im Rahmen einer sicherheitsbezogenen Seminararbeit. Verwenden Sie diesen Code nicht in Produktionsumgebungen oder gegen Systeme oh...

Deserialization Of Untrusted Data

RabbitMQ Java client library is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the javaReturnType value from an untrusted system.describe response being passed to Class.forName with class initialization enabled, which allows an attacker capable of intercepting or...

cve-2026-47856 - MEDIUM - JsonToObjectTransformer resolves the json__TypeId__ message header to an arbitrary class without an allow-list

cve-2026-47856 - MEDIUM - JsonToObjectTransformer resolves the jsonTypeId message header to an arbitrary class without an allow-list...