apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept：introduce basic concepts in RocketMQ. Feature：introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture：introduce...

apache__rocketmq_CVE-2019-17572_4-6-0

Apache RocketMQ Apache RocketMQ is a distributed messaging and streaming platform with low latency, high performance and reliability, trillion-level capacity and flexible scalability. It offers a variety of features: Pub/Sub messaging model Financial grade transactional message A variety of cross...

CVE-2023-33246-mitigation

CVE-2023-33246-mitigation このプロジェクトは、Apache RocketMQ の脆弱性である CVE-2023-33246 を緩和するための Maven ベースのデモンストレーションです。 プロジェクト構成 org/example/Main.java：メインプログラムファイル。 org/apache/rocketmq/common/BrokerConfig.java：公式 RocketMQ 4.9.5 ソースコードの修正版。 主な機能 1. 攻撃テスト ：Main.java の updateConfig メソッドは攻撃テスト用に使用されます。 2. 検証の強化...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246: Apache RocketMQ Remote Command Execution Vulnerability Detection Tool Tool Features Simple Usage Run ./apacherocketmqcve202333246scannerlinuxamd64 scan Output: Whether the vulnerability exists: Yes or VulnFound: true indicates the vulnerability exists, and the Versi...

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Apache RocketMQ Arbitrary File Write Vulnerability Exploit Demo Overview In fact, the Arbitrary file write vulnerabilityCVE-2023-37582 in Apache RocketMQ has already been addressed in the CVE-2023-33246 RCE vulnerability. However, the fix provided for CVE-2023-33246 RCE is n...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool...

go-exploit

go-exploit: Go Exploit Framework go-exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits. The framework was developed to simplify large scale scanning, exploitation, and integration with other...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Ejecución Remota de Código CVE-2023-33246 - Apache RocketMQ config Exploit de Ejecución Remota de Código Resumen RocketMQ es una plataforma de mensajería y streaming distribuida. Las versiones de RocketMQ 5.1.0 y anteriores son vulnerables a la Inyección de Código...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 Exploit de Ejecución Remota de Código en RocketMQ CVE-2023-33246 Exploit de Ejecución Remota de Código en RocketMQ Resumen RocketMQ es una plataforma de mensajería y transmisión distribuida. Las versiones de RocketMQ 5.1.0 y anteriores son vulnerables a la Inyección Arbitraria de...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Vulnerabilidad de ejecución remota de código CVE-2023-33246 Exploit Uso: java -jar CVE-2023-33246.jar -ip "127.0.0.1" -cmd "open -a calculator" Descargo de responsabilidad: Esta herramienta de detección está destinada únicamente al uso de los testers de seguridad de...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

このリポジトリには README がありません。...

CVE-2023-33246-Copy

1. Aprendizaje de referencia CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Configuración del entorno local 2.1 Descargar la imagen root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Iniciar broker, namesrv, console Iniciar namesrv...

apache__rocketmq_CVE-2023-33246_5-1-0

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept: introduce basic concepts in RocketMQ. Feature: introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture: introduce...

CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246RocketMQRCEEXP CVE-2023-33246 Exploit de Execução Remota de Código do RocketMQ Visão Geral As versões do RocketMQ 5.1.0 e anteriores são vulneráveis a Injeção Arbitrária de Código. O componente Broker do RocketMQ é exposto na extranet e não possui verificação de permissão. Um atacan...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution ÜBERBLICK Apache RocketMQ ist eine der beliebtesten und am weitesten verbreiteten Plattformen für verteiltes Messaging und Streaming. Kürzlich wurde eine Befehlsausführungslücke in Apache RocketMQ gemeldet, die die Version 5.1.0 und darunter...

cve-2026-59271 - MEDIUM - Admin password disclosed in BrokerNotAliveException message

cve-2026-59271 - MEDIUM - Admin password disclosed in BrokerNotAliveException message...

EUVD-2020-0539

Malware in sbrugna...

EUVD-2024-2402

Malicious code in bioql PyPI...

CVE-2019-17572

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...

CVE-2023-37582

The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...