CVE-2024-21006_PoC

CVE-2024-21006 PoC La CVE-2024-21006 est une vulnérabilité critique d'exécution de code à distance RCE affectant Oracle WebLogic Server. La faille est liée à l'utilisation non sécurisée du protocole IIOP Internet Inter-ORB Protocol et de JNDI Java Naming and Directory Interface, permettant à un...

CVE-2026-27830 c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and javax.naming.Reference instances. Several c3p0 ConnectionPoolDataSource implementations have a property called userOverridesAsString which conceptually represents a Map. Prior to...

CVE-2026-27727 mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an...