kcatcher

Catch what's lurking in your Kafka clusters. Introduction Kcatcher is a command-line utility for enumerating and evaluating Kafka cluster configurations. It connects to Apache Kafka clusters and retrieves detailed information about brokers, topics, ACLs, and even samples messages. Perfect for...

CVE-2023-52251-POC

CVE-2023-52251-POC provectus/kafka-ui에 원격 코드 실행RCE 취약점이 있습니다. 이 글을 작성하는 시점에는 패치가 없지만, 공급업체에는 저희와 VINCE 팀이 통보했지만 응답이 없었습니다. 보고서는 2023년 9월 27일에 이메일과 GitHub security를 통해 provectus에 전송되었습니다. 해결 방법 최소한 전체 groovy 필터 함수를 주석 처리하거나 인증을 추가할 것을 제안합니다. 메타데이터 제목| 값 ---|--- CVSS 문자열|...

CVE-2026-49098

CVE-2026-49098 — camel-kafka kafka.OVERRIDETOPIC ヘッダーインジェクション 同じ Apache Camel の脆弱性に対する実行可能な概念実証（PoC）再現コードです。ランタイムごとに 1 つずつ用意しています： Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36....

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

Provectus kafka-ui <=0.7.2 - Remote Code Execution

Provectus kafka-ui versions 0.7.0 through 0.7.2 are vulnerable to code injection in the /api/smartfilters/testexecutions endpoint. The filterCode parameter is evaluated as a Groovy expression without sandboxing, allowing an unauthenticated attacker to execute arbitrary code and operating-system...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, logstash, apache-tika, trino, spark, keycloak-config-cli, akhq, strimzi-kafka-operator, wildfly, druid, gradle, apache-nifi, opensearch, sonarqube, dependency-track, flyway, scala, infinispan, apicurio-registry, cass-config-builder,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, logstash, apache-tika, trino, spark, keycloak-config-cli, akhq, strimzi-kafka-operator, wildfly, druid, gradle, apache-nifi, opensearch, sonarqube, dependency-track, flyway, scala, infinispan, apicurio-registry, cass-config-builder,...

cve-2023-34040

CVE-2023-34040 Spring Kafka 역직렬화 원격 코드 실행 POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36 Accept:...

CVE-2023-34040

CVE-2023-34040 이 PoC는 https://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040 에서 클론되었습니다. 분석 과정에 대해서는 메인 저장소의 PDF 파일을 방문하십시오...

CVE-2025-27817

면책 조항: 본 문서에서 설명하는 취약점 및 재현 절차는 사이버 보안 연구 및 교육 목적으로만 사용됩니다. 누구든지 본 문서에서 제공된 정보를 불법적인 목적이나 승인되지 않은 시스템 테스트에 사용해서는 안 됩니다. 작성자는 본 문서의 정보를 사용하여 발생하는 직간접적인 손해에 대해 책임을 지지 않습니다. 저작권 침해와 관련된 경우 신속히 연락해 주시기 바랍니다. 최대한 빨리 처리하고 관련 내용을 삭제하겠습니다. 블로그 주소:...

kroxylicious-pqc-filter

Kroxylicious PQC 레코드 암호화 필터 Apache Kafka를 위한 투명한 양자 내성 암호화PQC 레코드 수준 암호화를 제공하는 Kroxylicious 필터 플러그인으로, ML-KEMFIPS 203 키 캡슐화와 AES-256-GCM 대칭 암호화를 사용합니다. Kafka 프로듀서와 컨슈머는 코드 변경이 전혀 필요 없습니다. Kroxylicious 프록시가 트래픽을 가로채서 Produce 시 암호화하고 Fetch 시 자동으로 복호화합니다. Producer ──plaintext── Kroxylicious...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: cassandra-fips, wildfly, ontop, gradle, cass-config-builder, solr, seata, hadoop-fips, flink-kubernetes-operator, kafka-bridge, knative-kafka-broker, neo4j, s3proxy-fips, kafbat-ui, opensearch-fips, camunda-zeebe, kates, ontop-fips, traccar-fips, wavefront-proxy,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: cassandra-fips, wildfly, ontop, gradle, cass-config-builder, solr, seata, hadoop-fips, flink-kubernetes-operator, kafka-bridge, knative-kafka-broker, neo4j, s3proxy-fips, kafbat-ui, opensearch-fips, camunda-zeebe, kates, ontop-fips, traccar-fips, wavefront-proxy,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: cassandra-fips, wildfly, ontop, gradle, cass-config-builder, solr, seata, hadoop-fips, flink-kubernetes-operator, kafka-bridge, knative-kafka-broker, neo4j, s3proxy-fips, kafbat-ui, opensearch-fips, camunda-zeebe, kates, ontop-fips, traccar-fips, wavefront-proxy,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: cassandra-fips, wildfly, ontop, gradle, cass-config-builder, solr, seata, hadoop-fips, flink-kubernetes-operator, kafka-bridge, knative-kafka-broker, neo4j, s3proxy-fips, kafbat-ui, opensearch-fips, camunda-zeebe, kates, ontop-fips, traccar-fips, wavefront-proxy,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: spdx-tools-java, logstash, strimzi-kafka-operator, akhq, wildfly, wavefront-proxy, cassandra-reaper, management-api-for-apache-cassandra-5.0, neo4j, gradle, opensearch, thingsboard, jenkins-plugin-manager, dependency-track, celeborn, cass-config-builder,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, logstash, strimzi-kafka-operator, akhq, wildfly, wavefront-proxy, cassandra-reaper, management-api-for-apache-cassandra-5.0, neo4j, gradle, opensearch, thingsboard, jenkins-plugin-manager, dependency-track, celeborn, cass-config-builder,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, logstash, strimzi-kafka-operator, akhq, wildfly, wavefront-proxy, cassandra-reaper, management-api-for-apache-cassandra-5.0, neo4j, gradle, opensearch, thingsboard, jenkins-plugin-manager, dependency-track, celeborn, cass-config-builder,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, logstash, strimzi-kafka-operator, akhq, wildfly, wavefront-proxy, cassandra-reaper, management-api-for-apache-cassandra-5.0, neo4j, gradle, opensearch, thingsboard, jenkins-plugin-manager, dependency-track, celeborn, cass-config-builder,...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...