Xstream-1.4.17

Xstream-1.4.17 O ambiente de demonstração Xstream acima foi montado por mim, o ambiente de exploração usa como referência o JDK1.8u131, e agora suporta teste local e envio remoto de pacotes HTTP XSTREAM=1.4.17 Reprodução de vulnerabilidades...

XStream-1

master: v-1.4.x: XStream Serialização Java para XML, e vice-versa Binários Todos os artefatos binários estão agrupados no arquivo -bin. Ele inclui os jars do XStream e qualquer outra biblioteca usada no momento da compilação, ou extras opcionais de tempo de execução. O Xpp3 é recomendado para uso...

xstream-CVE-2021-29505

xstream-CVE-2021-29505...

xstream-CVE-2020-26259

xstream-CVE-2020-26259...

XStream <1.4.14 - Remote Code Execution

XStream before 1.4.14 is susceptible to remote code execution. An attacker can run arbitrary shell commands by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of...

XStream <1.4.17 - Remote Code Execution

XStream before 1.4.17 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of...

XStream < 1.4.16 - Remote Code Execution

XStream before 1.4.16 is susceptible to remote code execution. An attacker who has sufficient rights can execute host commands via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operation...

XStream 1.4.18 - Remote Code Execution

XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

XStream 1.4.18 - Arbitrary Code Execution

XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

XStream <1.4.18 - Server-Side Request Forgery

XStream before 1.4.18 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream with a Java runtime version 14 to 8. This makes it possible to obtain sensitive information, modify...

XStream 1.4.18 - Remote Code Execution

XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

XStream <1.4.16 - Remote Code Execution

XStream before 1.4.16 is susceptible to remote code execution. An attacker can load and execute arbitrary code from a remote host via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative...

XStream <1.4.6/1.4.10 - Remote Code Execution

Xstream API before 1.4.6 and 1.4.10 is susceptible to remote code execution. If the security framework has not been initialized, an attacker can run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. This can allow an attacker to...

x-stream__xstream_CVE-2020-26217_1-4-14-java77

master: v-1.4.x: XStream Сериализация Java в XML и обратно Бинарные файлы Все бинарные артефакты включены в архив -bin. Он содержит JAR-файлы XStream и все остальные библиотеки, используемые во время сборки, или дополнительные компоненты времени выполнения. Для использования рекомендуется MXParse...

x-stream__xstream_CVE-2021-21345_1-4-15

master: v-1.4.x: XStream Java-zu-XML-Serialisierung und zurück Binärdateien Alle binären Artefakte sind im -bin-Archiv gebündelt. Es enthält die XStream-JARs und alle anderen zur Build-Zeit verwendeten Bibliotheken oder optionale Laufzeiterweiterungen. Xpp3 wird zur Verwendung empfohlen, da es di...

-CVE-2017-9805

معلومات الثغرة المصادر: https://vulners.com/cve/CVE-2017-9805 ما هذا؟ نص برمجي بايثون لاستغلال الثغرات قادر على تنفيذ أوامر عن بعد في واجهة النظام الذي يستضيف Struts2 المعرض لـ S2-052. الاستخدام ╭─root@blackshell / ╰─ python s2-052.py --target 'http://192.168.0.233/orders/3' --command "echo pwned...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: Execução Remota de Código RCE Não Autenticada no NextGen Mirth Connect Este exploit aproveita uma vulnerabilidade crítica de desserialização no motor XStream do Mirth Connect. Ela decorre de uma correção incompleta para CVE-2023-37679, permitindo a execução arbitrária de código nã...

CVE-2023-43208

Mirth Connect RCE - CVE-2023-43208 Beschreibung PoC für Mirth Connect Remote Code Execution RCE Betrifft Mirth Connect Beispiel Listener starten root@kitploit: nc -lvnp 4444...

CVE-2026-66256 Apache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API)

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...