198 matches found
cve-2021-44228
CVE-2021-44228 Log4J（CVE-2021-44228）の試行に対して、通知を発行し、HTTP接続にタグを付け、オプションでログを生成するZeekパッケージ。 HTTPヘッダーに含まれるペイロードを検出します。詳細は Simplifying Detection of Log4Shell を参照してください。 Zeekシグネチャ を使用して、LDAP検索中にJavaファイルが返されたときに通知を生成します。詳細は Detecting Log4j via Zeek & LDAP traffic を参照してください。...
dex2jar
dex2jar プロジェクトはGitHub に移行しました | ミラー| Wiki| ダウンロード| 課題 ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| リリース| 課題 sf| https://sourceforge.net/p/dex2jar| 旧| 旧| 旧 bb| https://bitbucket.org/pxb1988/dex2jar| 旧| 旧| 旧 gc| https://code.google.com/p/dex2jar| 旧| 旧| 旧 Android の .dex ファイルと Ja...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ 警告 此代码会在你的系统上执行任意命令。仅在虚拟机或隔离容器中使用。 描述 CVE-2026-0848 的功能性 PoC。演示了恶意 JAR 文件在被 NLTK 加载时如何执行任意代码。 要求 Python 3.8+ Java JDK 8+（用于编译 payload） NLTK 3.9.2（将自动安装） 安装与执行 root@kitploit: 克隆 git clone https://github.com/tu-usuario/CVE-2026-0848-PoC.git cd...
CVE-2022-22965-Spring4Shell-Security-Operations-Analysis
CVE-2022-22965 — Spring4Shell セキュリティ運用分析 ハンズオン形式のセキュリティ運用センター（SOC）シミュレーションです。情報セキュリティアナリストの役割を担い、活発なSpring4Shell悪用試行に対応しました。このリポジトリは、初期検知から分析、緩和に至るまでの完全なインシデント対応ライフサイクルを文書化しています。 免責事項: 本プロジェクトは教育目的でForageのサイバーセキュリティ職務シミュレーションの一環として完了しました。すべての分析は管理されたシミュレーション環境で実施されました。...
CVE-2018-1000861
CVE-2018-1000861 用于利用CVE-2018-1000861的简单脚本，使用Python 3编写 使用说明： root@kitploit: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help 显示帮助信息并退出 -u URL, --url URL 目标Jenkins服务器 -c CMD, --cmd CMD 要执行的命令 -r, --revshell 执行反弹shell -i IP, --ip IP 反弹shell回调的IP地址 -p PORT, --port PORT...
CVE-2021-44228-Apache-Log4j
CVE-2021-44228Apache Log4j Remote Code Execution） Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: 1. 下载该项目，编译InjectClazz.java root@kitploit: download git clone...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
UBUNTU-CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-46562
Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...
EUVD-2026-44958
Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...
UBUNTU-CVE-2026-14759
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
MITRE ATT&CK Threat Detection with Splunk Detection engineeri...
CVE-2023-37525
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
EUVD-2023-41412
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
CVE-2025-70974
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an...
EUVD-2014-8730
Malware in sbrugna...
EUVD-2002-1969
Malware in sbrugna...