10 matches found
EUVD-2024-54429
Malicious code in bioql PyPI...
CVE-2024-56518
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...
CVE-2024-56518
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...
CVE-2024-56518
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...
CVE-2024-56518
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...
Hazelcast Management Center 安全漏洞
Hazelcast Management Center is a unified real-time data platform from Hazelcast USA. A security vulnerability exists in Hazelcast Management Center 6.0 and prior versions that stems from a JndiLoginModule configuration leading to remote code execution...
CVE-2024-56518: Improper Control of Generation of Code
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...
CVE-2024-56518
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...
CVE-2024-56518
Hazelcast Management Center versions prior to 6.0 are vulnerable to remote code execution (RCE) . The root cause is a configuration flaw involving the JndiLoginModule user.provider.url within a hazelcast-client XML document . An attacker can exploit this by uploading a malicious client configurat...
PT-2025-17196 · Hazelcast · Hazelcast Management Center
Name of the Vulnerable Software and Affected Versions: Hazelcast Management Center versions prior to 6.0 Description: The issue allows remote code execution through a JndiLoginModule user.provider.url in a hazelcast-client XML document, which can be uploaded at the "/cluster-connections" API...