Lucene search
+L

71 matches found

Kitploit
Kitploit
added 2026/09/15 8:38 p.m.8 views

CVE-2023-46604

Resumen Técnico del Ataque: CVE-2023-46604 El script explota una vulnerabilidad de deserialización insegura en Apache ActiveMQ CVE-2023-46604 para lograr la ejecución remota de código en el servidor objetivo. Descripción del Proceso de Explotación root@kitploit: Objetivo de la Vulnerabilidad: La...

10CVSS7.8AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 9:44 a.m.7 views

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudo-Shell Este script aprovecha CVE-2023046604 Apache ActiveMQ para generar un pseudo shell. La vulnerabilidad permite la ejecución remota de código debido a una deserialización insegura dentro del protocolo OpenWire. Descripción CVE-2023-46604 es una vulnerabilidad de...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 7:01 a.m.7 views

CVE-2023-46604

CVE-2023-46604 This repository contains an exploit script and a Proof of Concept PoC XML file for the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The vulnerability allows for remote code execution due to unsafe deserialization practices within the OpenWire protocol. Description...

10CVSS7.5AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 2:01 a.m.9 views

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

10CVSS7.5AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 1:00 a.m.13 views

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

프로젝트 참조 이 프로젝트는 https://github.com/X1r0z/ActiveMQ-RCE 프로젝트의 exp를 참조하여 다시 작성한 python 버전의 exp입니다. 사용법 root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 -p 매개변수는 기본적으로 activeMQ의 기본 포트입니다. -x 매개변수는 프로토콜 접두사를 추가해야 합니다. 소개 여기에 openwire 프로토콜의 그림을 첨부하면 이해...

10CVSS7.6AI score0.99723EPSS
SaveExploits33References1
Kitploit
Kitploit
added 2026/09/12 3:19 p.m.6 views

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ y OpenWire 1 Descripción general de Apache ActiveMQ y OpenWire ActiveMQ es un broker que incluye clientes compatibles con JMS y permite la comunicación entre sistemas que utilizan diversos lenguajes, no solo Java. También es un servidor de mensajería de código...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/12 8:53 a.m.10 views

CVE-2023-46604

CVE-2023-46604 Exploit para CVE-2023-46604 Esta herramienta ayuda a explotar esta vulnerabilidad. Consulta de Shodan para encontrar el objetivo: root@kitploit: product:"ActiveMQ" port:"61616" Uso de la herramienta: root@kitploit: for read targets from the file: python3 exploit.py -f targets -c...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/11 7:54 a.m.7 views

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.11 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS0.0046EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.9 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS0.0046EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/10 5:17 a.m.8 views

CVE-2026-67593

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

9.1CVSS0.0046EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/10 4:40 a.m.7 views

CVE-2026-67593 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

0.0046EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 4:40 a.m.22 views

CVE-2026-67593

CVE-2026-67593 allows an unauthenticated remote attacker to delete arbitrary durable queues on Apache Artemis (2.50.0–2.56.0) and Apache ActiveMQ Artemis (1.0.0–2.44.0) by crafting a malicious OpenWire RemoveSubscriptionInfo command. The root cause is the processRemoveSubscription() method, which...

9.1CVSS0.0046EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 4:40 a.m.9 views

EUVD-2026-75245

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

9.1CVSS0.0046EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 4:40 a.m.39 views

CVE-2026-67593 Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion

A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authentication and authorization stage or at any time thereafter. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ...

0.0046EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 5:14 p.m.10 views

CVE-2023-46604-LAB

CVE-2023-46604 – Apache ActiveMQ RCE Protocolo OpenWire Este repositorio documenta un entorno de laboratorio utilizado para comprender y detectar la vulnerabilidad CVE-2023-46604 que afecta a Apache ActiveMQ. El objetivo de este proyecto: Comprender cómo se comporta el exploit a nivel de protocol...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/08 11:51 p.m.7 views

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Descargo de responsabilidad Este repositorio contiene código de prueba de concepto para CVE-2023-466064 y está destinado estrictamente a fines educativos. Los autores y colaboradores no respaldan ninguna actividad ilegal. La información aquí presentada es para fines...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
CVE
CVE
added 2026/06/30 9:53 a.m.58 views

CVE-2026-50734

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, and Apache ActiveMQ All allows an unauthenticated network attacker to cause a broker DoS by sending a crafted WireFormatInfo frame with a malicious large size value. The broker may allocate memor...

7.5CVSS5.7AI score0.0074EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/30 9:51 a.m.58 views

CVE-2026-50750 Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated attacker can now cause broker OOM by sending an repeated BrokerInfo commands without sending a ConnectionInfo, until the broke...

0.00686EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/30 9:49 a.m.74 views

CVE-2026-53917

CVE-2026-53917 describes an unbounded memory allocation vulnerability in OpenWire property unmarshalling in Apache ActiveMQ and related builds. An authenticated user can send a crafted OpenWire Message with a very large encoded size value for a message property map, causing OpenWire maps to be un...

7.5CVSS5.7AI score0.0074EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder