711 matches found
CVE-2021-29200
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...
CVE-2021-29200
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...
CVE-2021-30128
Apache OFBiz has unsafe deserialization prior to 17.12.07 version...
CVE-2021-29200
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...
CVE-2021-30128
Apache OFBiz has unsafe deserialization prior to 17.12.07 version...
Deserialization of untrusted data
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...
Deserialization of untrusted data
Apache OFBiz has unsafe deserialization prior to 17.12.07 version...
CVE-2021-30128 Unsafe deserialization in Apache OFBiz
Apache OFBiz has unsafe deserialization prior to 17.12.07 version...
CVE-2021-30128
Apache OFBiz
CVE-2021-29200 RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...
PT-2021-2832 · Apache · Apache Ofbiz
Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 17.12.07 Description: The issue is related to unsafe deserialization, allowing an attacker to execute arbitrary code by sending a specially crafted request. This can be exploited by an unauthenticated user to...
Apache OFBiz 代码问题漏洞
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. Apache OFBiz versions prior to 17.12.07 remote code execution vulnerability , the vulnerability stems from...
Metasploit Wrap-Up
Spilling the Gitea We have two modules coming in from cdelafuente-r7 targeting CVE-2020-14144 for both the Gitea and Gogs self-hosted Git services. Both modules are similar: they take advantage of a user’s ability to create Git hooks by authenticating with the web interface, creating a dummy...
Apache OFBiz SOAP Java Deserialization Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'http://ofbiz.apache.org/service/', 'soapenv' = 'http://schemas.xmlsoap.org/soap/envelope/' .freeze def initializeinfo = super updateinfo info,...
Apache OFBiz SOAP Java Deserialization
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'http://ofbiz.apache.org/service/', 'soapenv' = 'http://schemas.xmlsoap.org/soap/envelope/' .freeze def initializeinfo = super updateinfo info,...
The vulnerability of the Apache OFBiz resource planning software lies in its ability to restore unreliable data in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Apache OFBiz’s resource planning software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Apache OFBiz SOAP Java Deserialization
This module exploits a Java deserialization vulnerability in Apache OFBiz's unauthenticated SOAP endpoint /webtools/control/SOAPService for versions prior to 17.12.06. Module Options msf use exploit/linux/http/apacheofbizdeserializationsoap msf exploitapacheofbizdeserializationsoap show targets...
Apache OFBiz Remote Code Execution (CVE-2021-26295)
Binary data apacheofbizcve-2021-26295.nbin...
