CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kitploit: root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true"...

CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0-5.5.5 e 6.0.0-6.6.5 Questa è una PoC preliminare della RCE di Apache Solr Da https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI consente di configurare il server JMX di Solr tramite una richiesta HTTP POST. Puntandolo a un server RMI malevolo, un...

CVE-2023-26269

CVE-2023-26269: Apache James में गलत कॉन्फ़िगर किया गया JMX डिफ़ॉल्ट रूप से, Apache James एक JMXRMI सेवा खोलता है जो लोकलहोस्ट, पोर्ट 9999 पर सुनती है। JMX को बिना प्रमाणीकरण पहुँच की अनुमति देने के लिए गलत कॉन्फ़िगर किया गया है, इसलिए James चलाने वाली मशीन पर स्थानीय पहुँच रखने वाला एक हमलावर...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 La descrizione di CVE-2018-14324 non spiega completamente l'impatto di questa vulnerabilità. TLDR hai accesso a Java Management Extensions JMX tramite credenziali hardcoded admin:admin. Mentre l'impatto è elencato come " potenzialmente informazioni...

GHSA-43X2-G84Q-FMQX OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Summary Description A Deserialization of Untrusted Data CWE-502 issue in OpenDJ's JMX RMI connector allows an unauthenticated remote attacker to deserialize arbitrary Java objects on the server. The vulnerability exists because the platform reads and processes attacker-controlled bytes prior to...

BIT-ACTIVEMQ-2020-13920

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...

EUVD-2018-3287

Malware in sbrugna...

EUVD-2019-17256

Malware in sbrugna...

EUVD-2020-25208

Malware in sbrugna...

EUVD-2022-6906

Malicious code in bioql PyPI...

EUVD-2022-2477

Malicious code in bioql PyPI...

EUVD-2022-1253

Malicious code in bioql PyPI...

CVE-2024-28211

nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker...

CVE-2022-37022

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will...

CVE-2020-3943

vRealize Operations for Horizon Adapter 6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1 uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code ...

TIBCO JasperReports Server 8.0.2 Community Edition Code Execution Vulnerability

Due to JMX/RMI services in TIBCO JasperReports Server version 8.0.2 Community Edition performing unsafe deserialization, it is possible to execute arbitrary code and system commands on the server system. Product: JasperReports Server Manufacturer: TIBCO Software Inc. Tested Versions: 8.0.2...

TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

Advisory ID: SYSS-2022-041 Product: JasperReports Server Manufacturer: TIBCO Software Inc. Tested Versions: 8.0.2 Community Edition Vulnerability Type: CWE-502: Deserialization of Untrusted Data Risk Level: High Solution Status: Fixed Manufacturer Notification: 2022-06-10 Solution Date: 2022-08-1...

Deserialization Of Untrusted Data

apache-geode is vulnerable to deserialization of untrusted data. The vulnerability exists because the serialization filtering is not properly configured for JMX/RMI which allows an attacker to to inject and execute arbitrary code through the untrusted data...

PT-2022-4609 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 Description: The issue is related to the deserialization of untrusted data when using JMX over RMI on Java 8, which can allow a remote attacker to execute arbitrary code. To protect agains...

Improper Authentication in Apache ActiveMQ

Apache ActiveMQ uses LocateRegistry.createRegistry to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and call the rebind method to rebind jmxrmi to something else. If an attacker creates another server to...