java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

CVE-2014-0094

CVE-2014-0094 For verification. Refer to https://piyolog.hatenadiary.jp/entry/20140417/1397750197, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 reproduced. The classLoader is working, but the crucial log is percent-encoded, so it does not lead to RCE Windows version also added but only 7u191...

struts1-patch

struts1-patch Detailed description and usage, see: http://security.tencent.com/index.php/blog/msg/50 struts1 CVE-2014-0114 classLoader manipulation vulnerability patch struts.jar...

ARTful

Description ARTful is a native Android library the allows developers to modify the Android Runtime ART on Android 13 + 14. With this tool, you can dynamically change the implementation of any static method within your application or the Android Framework to affect methods called from within your...

Spring4Shell-POC

Spring4Shell CVE-2022-22965 - Remote Code Execution Proof of Concept A fully containerized Proof of Concept PoC demonstrating the exploitation of Spring4Shell CVE-2022-22965 , resulting in Remote Code Execution RCE against a vulnerable Spring Framework application deployed on Apache Tomcat. The...

CVE-2026-75430_PowerJob_worker_deployContainer_RCE

PowerJob Worker Unauthenticated Remote Code Execution via /worker/deployContainer Arbitrary JAR Loading 1. Summary The PowerJob Worker exposes the deployContainer handler on its HTTP transport port 27777 with no authentication whatsoever. An attacker submits an arbitrary URL; the Worker downloads...

SSE4-CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 Getting Started 1. Run docker compose up --build to build and start the vulnerable application. 2. Run curl -H "Accept: text/html;"...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

Spring4Shell

Spring RCE CVE-2022-22965 Vulnerability Environment Environment Information springboot jdk11 tomcat9.0.30 payload Request Header Configuration "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Request Body Data...

CVE-2022-22965-PoC

CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run the exploit...

java-remote-class-loader

Esta herramienta te permite enviar bytecode de Java en forma de archivos de clase a tus clientes o potenciales objetivos para cargarlos y ejecutarlos usando ClassLoader de Java junto con la API Reflect. El cliente recibe el archivo de clase del servidor y devuelve la salida de ejecución...

Spring4Shell RCE (CVE-2022-22965)

Exploits CVE-2022-22965 Spring Framework classLoader parameter binding to write a JSP webshell via Tomcat access log manipulation, then executes the configured reverse CMD payload. !/usr/bin/env python3 -- coding: utf-8 -- """Spring4Shell parameter binding RCE CVE-2022-22965.""" import random...

Astra Linux – Vulnerability in Commons-BeanUtils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added, which enables suppressing the ability for an attacker to access the classloader through the class property available on all Java objects. However, we did not use this feature by default, as it is a characteristic of...

Astra Linux – Vulnerability in Commons-BeanUtils

Apache Commons has a vulnerability related to improper access control. A special BeanIntrospector class was added in version 1.9.2. This can be used to prevent attackers from using the declared class property of Java enum objects to gain access to the classloader. However, this protection was not...

CVE-2026-92142 Apache Karaf: Authorization bypass in JMX MBean lifecycle operations

Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which enforces role-based access control RBAC on MBean operations invoked over the remote JMX connector RMI registry/server, enabled by default on ports 1099 and 44444. The guard is implemented as a...

PT-2026-102459

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 4.4.12 Apache Karaf versions prior to 4.5.0 Description Apache Karaf contains a flaw in the KarafMBeanServerGuard which fails to enforce role-based access control RBAC on specific MBean lifecycle operations. The...

Missing Release of Memory after Effective Lifetime

Overview org.apache.karaf:org.apache.karaf.util is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime due to improper...

CVE-2026-92230 Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle that created it, repeated bundle or feature install, update, or refresh operations can leave successive bundle...

EUVD-2026-78662

ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/database with language: js because PolyglotQueryEngine.command, PolyglotQueryEngine.analyze, and PolyglotQueryEngine.registerFunctions do not enforce database-administrator authorization...

Fastjson 1.2.83 Remote Code Execution

Fastjson versions 1.2.68 through 1.2.83 contain a remote code execution vulnerability that can allow an attacker to cause a vulnerable application to load attacker-controlled Java classes. This proof of concept generates a malicious JAR containing a reverse shell payload, serves the JAR over HTTP...