CVE-2023-50780

CVE-2023-50780: Gefährliche MBeans über die Jolokia-API in Apache ActiveMQ Artemis zugänglich Durch Auflisten und Untersuchen der von der Jolokia-API unter http://127.0.0.1:8161/console/jolokia bereitgestellten MBeans wurden die folgenden Angriffsvektoren identifiziert: Beliebiges Schreiben von...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 La descrizione di CVE-2018-14324 non spiega completamente l'impatto di questa vulnerabilità. TLDR hai accesso a Java Management Extensions JMX tramite credenziali hardcoded admin:admin. Mentre l'impatto è elencato come " potenzialmente informazioni...

CVE-2026-34197

CVE-2026-34197 — RCE in Apache ActiveMQ Classic tramite API Jolokia TL;DR Una vulnerabilità di esecuzione remota di codice in Apache ActiveMQ Classic che consente a un attaccante di eseguire codice arbitrario invocando l'operazione MBean addNetworkConnectorString tramite l'API Jolokia...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Sicherheitserkennungstool Dies ist ein auf Verteidigung und interne Netzwerküberprüfung ausgerichtetes Apache ActiveMQ Classic Expositionserkennungswerkzeug, das zur Unterstützung der Bewertung von Risiken im Zusammenhang mit CVE-2026-34197 dient. Dieses Projekt...

CVE-2026-34197

CVE-2026-34197 विवरण Apache ActiveMQ Broker, Apache ActiveMQ में अनुचित इनपुट सत्यापन, कोड के निर्माण का अनुचित नियंत्रण ‘कोड इंजेक्शन’ भेद्यता। Apache ActiveMQ Classic Jolokia JMX-HTTP ब्रिज को वेब कंसोल पर /api/jolokia/ पर उजागर करता है। डिफ़ॉल्ट Jolokia एक्सेस नीति सभी ActiveMQ MBeans...

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

Log4Jolokia

Log4Jolokia Descrizione: Implementazione Python3 per sfruttare gli MBean di Log4J tramite Jolokia Utilizzo: Aiuto generico: root@kitploit: usage: log4jolokia.py -h -u USER -p PASSWD --proxy PROXY -H HEADER execjar,writefile,readfile,execscript execjar,writefile,readfile,execscript ... target targ...

SCAT

SCAT Strumento di acquisizione credenziali HP SiteScope Che cos'è? Uno strumento che sfrutta una vulnerabilità di esecuzione remota di codice nelle installazioni predefinite di HP SiteScope v11.32 e successive per rubare le credenziali memorizzate in SiteScope. Quale vulnerabilità di esecuzione...

Exploit for Improper Input Validation in Apache Activemq

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This...

CVE-2026-41044

The CVE describes an authenticated RCE/Code Injection in Apache ActiveMQ (Classic) and related brokers via the admin web console. An attacker can craft a malicious broker name (bypassing validation) that embeds an xbean binding, which a VM transport can later load through a DestinationView MBean ...

CVE-2026-41044 Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by Jolokia

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to...

Apache ActiveMQ 安全漏洞

Apache ActiveMQ Broker is an open source message broker and integration pattern server . A security vulnerability exists in Apache ActiveMQ Broker. The vulnerability stems from the Jolokia JMX-HTTP bridge default policy that allows exec operations on MBeans, which can be exploited by an attacker ...

EUVD-2006-0429

Malware in sbrugna...

EUVD-2006-4126

Malware in sbrugna...

EUVD-2007-1154

Malware in sbrugna...

EUVD-2004-2313

Malware in sbrugna...

CVE-2024-32656

Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.6.0 through 2.8.2 allows any unprivileged operating system user account to escalate privileges to the root user account on the system. This vulnerability arises from Ant Media...

GHSA-443J-GRXV-2PGV Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans

Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could...

Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans

Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could...

CVE-2023-50780

Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could...