CVE-2020-13151

CVE-2020-13151 POC Aerospike Database 5.1.0.3 Host Command Execution Full writeup @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html poc.lua shows manual exploitation of the server cve2020-13151.py for automated exploitation run-poc.sh sets up a docker...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...

aerospike-vector-search (>=1.0.0, <=4.2.0), aidbbot (>=0.1.0, <=0.1.2) +383 more potentially affected by CVE-2025-4565 via protobuf (>=5.26.0rc2, <=5.29.4)

protobuf PYPI version =5.26.0rc2, =1.0.0, =0.1.0, =0.82.3, =2.47.9, =0.1.8, =0.0.10, =0.4.1, =1.0.3, =1.0.0, =0.5.0rc2, =0.7.3, =0.9.0, =0.1.16, =1.1.0, =0.3.5, =0.4.1 and more Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-1806...

EUVD-2019-0345

Malware in sbrugna...

EUVD-2016-9871

Malware in sbrugna...

EUVD-2016-9872

Malware in sbrugna...

EUVD-2016-9870

Malware in sbrugna...

EUVD-2016-9874

Malware in sbrugna...

EUVD-2023-2318

Malicious code in bioql PyPI...

Malicious code in django-aerospike-sessions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47758 Malicious code in django-aerospike-sessions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feba434f8a55ca606e9301308486d6d3d6f518430157438198d692432c18da23 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

aerospike-vector-search (>=1.0.0, <=4.2.0), aidbbot (>=0.1.0, <=0.1.2) +383 more potentially affected by CVE-2025-4565 via protobuf (>=5.26.0rc2, <=5.29.4)

protobuf PYPI version =5.26.0rc2, =1.0.0, =0.1.0, =0.82.3, =2.47.9, =0.1.8, =0.0.10, =0.4.1, =1.0.3, =1.0.0, =0.5.0rc2, =0.7.3, =0.9.0, =0.1.16, =1.1.0, =0.3.5, =0.4.1 and more Source cves: CVE-2025-4565 Source advisory: OSV:GHSA-8QVM-5X2C-J2W7...

aerospike-vector-search (>=1.0.0, <=4.2.0), aidbbot (>=0.1.0, <=0.1.2) +383 more potentially affected by CVE-2025-4565 via protobuf (>=5.26.0rc2, <=5.29.4)

protobuf PYPI version =5.26.0rc2, =1.0.0, =0.1.0, =0.82.3, =2.47.9, =0.1.8, =0.0.10, =0.4.1, =1.0.3, =1.0.0, =0.5.0rc2, =0.7.3, =0.9.0, =0.1.16, =1.1.0, =0.3.5, =0.4.1 and more Source cves: CVE-2025-4565 Source advisory: SNYK:PYTHON-PROTOBUF-10364902...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

Aerospike Java Client Code Execution

The vulnerability of the Java client of the Aerospike Database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Arbitrary Code Execution

com.aerospike:aerospike-client is vulnerable to Arbitrary Code Execution. The vulnerability is due untrusted deserialization during client side message validation, which allows for an attacker to trick a client into connecting to a malicious server, which will then execute arbitrary code when the...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

com.aerospike:aerospike-cache (>=0.9.1, <=1.2), com.aerospike:aerospike-kafka-connector (>=0.0.3, <=0.0.6) +64 more potentially affected by CVE-2023-36480 via com.aerospike:aerospike-client (>=3.0.34, <=4.4.18)

com.aerospike:aerospike-client MAVEN version =3.0.34, =0.9.1, =0.0.3, =1.0, =1.0, =4.2.0, =4.2.0, =4.4.9, =0.9.1, =0.0.1, =1.0.1.release, =2.5.0 - com.aerospike:spring-session-aerospike 1.0.0.release and more Source cves: CVE-2023-36480 Source advisory: MEND:CVE-2023-36480...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...