activemq-ids-ips-lab

IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...

CVE-2023-46604

CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ Jolokia: Ejecución Remota de Código RCE CVE-2026-34197 es una vulnerabilidad de ejecución remota de código RCE de alta severidad que afecta a Apache ActiveMQ Classic. El problema se encuentra dentro del puente Jolokia JMX-HTTP, que expone operaciones de gestión a...

ActiveMQ-CVE-2023-46604

Validador Seguro de CVE-2023-46604 para ActiveMQ Un validador de un solo archivo y no destructivo para Apache ActiveMQ CVE-2023-46604. Inicia su propio servidor de callback HTTP, genera XML de Spring específico para el objetivo en memoria, envía el paquete OpenWire manipulado, correlaciona los...

ActiveMQ-cve-2026-42588-scanner-gui

ActiveMQ-cve-2026-42588-scanner-gui 【One-click VPS Exploitation Recommended for users with a VPS】 1. Enter the VPS public IP and listening port e.g., 9999 2. Enter the command to execute e.g., touch /tmp/cvepwned 3. Click Generate VPS Command → Click Copy Command 4. SSH into the VPS, paste the...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

Apache ActiveMQ - Remote Code Execution

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...

CLEANSTART-2026-YM23657 Security fixes in activemq 6.3.1-r1

Package activemq version 6.3.1-r1 fixes 12 vulnerabilities: ghsa-r7wm-3cxj-wff9, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515...

CLEANSTART-2026-VB68663 Security fixes in activemq 6.2.8-r1

Package activemq version 6.2.8-r1 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, CVE-2025-11143, CVE-2024-6763, ghsa-r7wm-3cxj-wff9...

CLEANSTART-2026-DV18988 Security fixes in apache-activemq-artemis 2.56.0-r1

Package apache-activemq-artemis version 2.56.0-r1 fixes 15 vulnerabilities: CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-41417...

CLEANSTART-2026-PA66071 Security fixes in activemq 6.2.8-r2

Package activemq version 6.2.8-r2 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq, CVE-2026-54512...

CVE-2026-42588

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

ROOT-OS-DEBIAN-12-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34197 CVE-2026-34197 in activemq - Patched by Root

Root has patched CVE-2026-34197 in the activemq package for Root:Debian:11. Multiple fixed versions available...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 – Apache ActiveMQ Remote Code Execution Ove...

The vulnerability of Apache ActiveMQ software-related to integer overflow allows attackers to cause service failures.

The vulnerability of Apache ActiveMQ software products is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...

BIT-ACTIVEMQ-2026-61487 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authorization bypass via temporary composite destinations

Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. An authenticated low-privilege user can bypass a per-destination write ACL by sending to an ActiveMQ temporary composite destination whose physical name is a comma-separated composite of real...

BIT-ACTIVEMQ-2026-59878 Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

The vulnerability of the Jolokia component in Apache ActiveMQ allows a hacker to execute arbitrary code.

The vulnerability of the Jolokia component in Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...