log4shell-docker-lab

Laboratorio docker Log4Shell para CVE-2021-44228 Los componentes Este laboratorio docker utiliza tres componentes: La aplicación vulnerable spring-boot Un servidor HTTP que aloja archivos .class utilizados para la ejecución remota de código Un servidor de referencia LDAP que redirige consultas LD...

mi-laboratorio-log4shell

🚀 自动化 Log4Shell CVE-2021-44228 即插即用实验室 一个自动化、单命令的安全研究实验室，旨在演示和审计 Log4Shell CVE-2021-44228 远程代码执行（RCE）漏洞。 本项目使用 Docker Compose 将所有必要组件（易受攻击的应用程序、恶意 LDAP 引用服务器和攻击者工具）整合到一个统一且隔离的网络基础设施中。 ⚙️ 主要特性 100% 即插即用： 无需手动配置 IP、编辑 .env 文件或进行网络对齐。一切都通过 Docker 的内部 DNS 自动解析。 字节码兼容性： 漏洞利用代码会自动进行交叉编译，以强制兼容受害者的旧版 Java...

CVE-2026-3048 Nexus Repository 3 - Improper LDAP Referral Handling

An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server...

Important: java-1.7.0-openjdk

Issue Overview: DerValue unbounded memory allocation: It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive...

August 8, 2017—KB4034664 (Monthly Rollup)

None None...

EulerOS 2.0 SP1 : java-1.8.0-openjdk (EulerOS-SA-2017-1150)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attack...

RHEL 6 / 7 : java-1.8.0-openjdk (RHSA-2017:1789)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1789 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...