CVE-2024-20399

CVE-2024-20399 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...

zombieant

Zombie Ant Farm: A Kit For Playing Hide and Seek with Linux EDRs. Version 0.5-alpha Why? Because monolithic offensive tools are never enough and building your own offensive strategies and tools is fun. What? Offensive Preloading Primitives and Building Blocks. Distributed Payload Warehousing and...

CVE-2026-12356

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant...

EUVD-2026-117073

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant...

CVE-2026-12356 IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant...

CVE-2026-12356

IBM MQ Managed File Transfer is vulnerable to an arbitrary code execution vulnerability (CWE-74) caused by the injection of malicious arguments into Ant script commands . This issue affects authenticated users with command queue access. Affected versions include IBM MQ 9.2.0.0-9.2.0.44 LTS, 9.3.0...

PT-2026-137164

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant...

CVE-2026-12356: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated user with command queue access to execute arbitrary code by injecting malicious arguments into Ant...

RUSTSEC-2026-0434 `ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

ant-releases downloads and unpacks release archives from the safenetwork / autonomi repositories. When it extracts an archive, it builds each output path by joining the archive entry's own name onto the destination directory, with no check for .. or absolute components — a classic "zip-slip" path...

`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

ant-releases downloads and unpacks release archives from the safenetwork / autonomi repositories. When it extracts an archive, it builds each output path by joining the archive entry's own name onto the destination directory, with no check for .. or absolute components — a classic "zip-slip" path...

Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-12356)

Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability caused by injecting malicious arguments into Ant script commands. Vulnerability Details CVEID:CVE-2026-12356 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated user with command queue...

Security Bulletin: IBM MQ Console is affected by a relative path traversal vulnerability (CVE-2026-78254)

Summary IBM MQ Console has addressed a relative path traversal vulnerability Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the...

Amazon Linux 2023 : ant, ant-antlr, ant-apache-bcel (ALAS2023-2026-3239)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3239 advisory. The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the...

Amazon Linux 2 : ant (ALAS-2026-4020)

The version of ant installed on the remote host is prior to 1.9.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4020 advisory. The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow ...

Important: ant

Issue Overview: The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the...

Important: ant

Issue Overview: The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the...

Security Bulletin:Vulnerability in ant-1.10.15 may affect IBM Infosphere Change Data Capture (CVE-2026-78254)

Summary A security vulnerability has been identified in ant, Apache Ant. ant is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp...

CLEANSTART-2026-DD03194 ftp and scp tasks of Apache Ant can download files from a remote server

Security vulnerability affects the rundeck package. The ftp and scp tasks of Apache Ant can download files from a remote server...

PT-2026-135097

Security vulnerability affects the rundeck package. The ftp and scp tasks of Apache Ant can download files from a remote server...

SUSE SLED15: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / etc (SUSE-SU-2026:4677-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4677-1 advisory. This update introduces new libraries and refines existing Java tools to improve security, compatibility,...