PT-2022-1531

Name of the Vulnerable Software and Affected Versions Apache Kylin 2 versions 2.6.6 and prior Apache Kylin 3 versions 3.1.2 and prior Apache Kylin 4 versions 4.0.0 and prior Description The issue is related to the use of Class.forName... which can load any class based on user input. This can...

ElasticSearch - Search Groovy Sandbox Bypass (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ElasticSearch Search Groovy Sandbox Bypass', 'Description' = %q This module exploits a remote command execution RCE vulnerability in...

CVE-2002-1287

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through 1 Class.forName or 2 ClassLoader.loadClass...

CVE-2002-1287

The CVE concerns Microsoft’s Java implementation used by Internet Explorer. A stack-based buffer overflow occurs in the Java runtime when handling long class names via Class.forName or ClassLoader.loadClass, allowing a remote attacker to cause a denial of service. The affected component is the Mi...

CVE-2002-1287: Undefined Security Weakness

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through 1 Class.forName or 2 ClassLoader.loadClass...