197 matches found
CVE-2018-1000861
CVE-2018-1000861 Einfaches Skript zur Ausnutzung von CVE-2018-1000861, geschrieben in Python 3 Verwendung: root@kitploit: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to...
cve-2021-44228
CVE-2021-44228 Un pacchetto Zeek che genera notifiche, contrassegna le connessioni HTTP e opzionalmente genera un log per i tentativi Log4J CVE-2021-44228. Rileva i payload contenuti negli header HTTP: vedi Simplifying Detection of Log4Shell per i dettagli. Usa le firme Zeek per generare notifich...
CVE-2021-44228-Apache-Log4j
CVE-2021-44228 Apache Log4j Esecuzione remota di codice Versioni interessate: tutte le versioni dalla 2.0-beta9 alla 2.12.1 e dalla 2.13.0 alla 2.15.0 Avvisi / bollettini di sicurezza collegati a Log4Shell CVE-2021-44228 Utilizzo: 1. Scarica il progetto, compila InjectClazz.java root@kitploit:...
dex2jar
dex2jar Projekt umgezogen nachGitHub | Mirror| Wiki| Downloads| Issues ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| Veröffentlichungen| Probleme sf| https://sourceforge.net/p/dex2jar| alt| alt| alt bb| https://bitbucket.org/pxb1988/dex2jar| alt| alt| alt gc|...
CVE-2022-22965-Spring4Shell-Security-Operations-Analysis
CVE-2022-22965 — Spring4Shell Security Operations Analyse Eine praktische Simulation eines Security Operations Centre SOC, bei der ich die Rolle eines Information Security Analyst übernommen habe und auf einen aktiven Spring4Shell-Exploit-Versuch reagiert habe. Dieses Repository dokumentiert den...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
UBUNTU-CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-46562
Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...
EUVD-2026-44958
Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...
UBUNTU-CVE-2026-14759
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
MITRE ATT&CK Threat Detection with Splunk Detection engineeri...
CVE-2023-37525
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
EUVD-2023-41412
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
CVE-2025-70974
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an...
EUVD-2005-1025
Malware in sbrugna...
EUVD-2014-0762
Malware in sbrugna...
EUVD-2002-1969
Malware in sbrugna...