6 matches found
CVE-2022-41678
Apache ActiveMQ CVE-2022-41678 취약점 악용 도구 취약점 개요 참고 문서: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678은 Apache ActiveMQ의 원격 코드 실행 취약점입니다. 이 취약점을 통해 공격자는 JMXJava Management Extensions 인터페이스를 통해 Log4j 구성 또는 JFRJava Flight Recorder 구성을 수정하여 악성 JSP 웹셸을 서버의 웹 디렉토리에 작성하고, 최종적으로 원격 코드 실행을 달...
Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues
Summary Multiple vulnerabilities affect IBM Sterling External Authentication Server and are addressed in the latest release and ifix Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not...
Security Bulletin: IBM Operations Analytics Predictive Insights impacted by Apache Log4j vulnerabilities (CVE-2022-23302)
Summary IBM Operations Analytics Predictive Insights is affected by the Apache Log4j vulnerability in the JMSSink in all versions of Log4j 1. x allowing deserialization of untrusted data when the malicious attacker has write access to the Log4j configuration or if the configuration references an...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228Apache Log4j Remote Code Execution） all log...