13 matches found
yaml-payload
yaml-payload Un payload de explotación de deserialización SnakeYAML para CVE-2022-1471 , adaptado de artsploit/yaml-payload basado originalmente en mbechler/marshalsec. Qué hace Cuando se carga mediante el inseguro Yaml.load de SnakeYAML, este payload toma el control de la aplicación en ejecución...
yaml-payload
yaml-payload Un payload di deserializzazione SnakeYAML per CVE-2022-1471 , adattato da artsploit/yaml-payload basato originariamente su mbechler/marshalsec. Cosa fa Quando caricato tramite l'uso non sicuro di Yaml.load di SnakeYAML, questo payload prende il controllo dell'applicazione in esecuzio...
CVE-2023-38647
An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. This unbounded deserialization can likely lead to remote code execution. The code can be run...
CVE-2021-21249 Post-Auth Unsafe Yaml deserialization
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can lead to post-auth remote code execution. In order to parse and process YAML files, OneDev uses SnakeYaml which by default when not using SafeConstructor allows the...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
Oracle Java ScriptEngineManager Sandbox Bypass Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ScriptEngineManager...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...