cve-2019-0227

cve-2019-0227 Apache Axis 1.4 remote code execution vulnerability You need to set up a listener on the local machine with msf, and also modify lines 24-30 of the code. ＃You need to change these variables to match your configuration myip = “ 192.168.0.117 ” ＃Your machine's IP target = “...

Remote Code Execution in Confluence Data Center - CVE-2026-90436

This vulnerability affects certain versions of Atlassian Confluence Data Center. Confluence utilizes a third-party library Apache Axis as part of its XML-RPC and SOAP APIs. Apache Axis has published a critical vulnerability CVE-2026-90436 that allows remote code execution. To be vulnerable, the...

Atlassian Confluence < 9.2.28 (CONFSERVER-104610)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104610 advisory. - UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a...

Axis1.4-CVE-2019-0227

Axis1.4 CVE-2019-0227 Remote Command Execution Exploit Tool 📖 Vulnerability Description Apache Axis1.4 contains a remote command execution vulnerability CVE-2019-0227. When the enableRemoteAdmin property is set to true, an attacker can deploy a malicious service through the AdminService interface...

Linux Distros Unpatched Vulnerability : CVE-2026-90436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a...

CVE-2026-90436

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

DEBIAN-CVE-2026-90436

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

EUVD-2026-118323

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CVE-2026-90436 Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CVE-2026-90436

Apache Axis 1.x (versions through 1.4) is vulnerable to unauthenticated remote code execution due to insecure deserialization of inbound SOAP faults. When a element contains an and a element, the engine loads and instantiates the named class via its String constructor before performing an Axis...

CVE-2026-90436 Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

PT-2026-138089

Name of the Vulnerable Software and Affected Versions Apache Axis versions 1.x through 1.4 Description Deserialization of an inbound SOAP fault allows unauthenticated remote class instantiation. When a SOAP contains a element, the engine loads the specified class. If a String element is also...

CVE-2026-90436: Apache Software Foundation Apache Axis 1.x (EOL): ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated…

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CLSA-2026-1771459786 TuxCare security update for org.apache.axis:axis (3 CVEs)

TuxCare rebuilt org.apache.axis:axis to address 3 CVEs. Fixed in 1.4-tuxcare.1...

apache-axis-detect

Axis and Axis2 detection !/usr/bin/env python3 -- coding: utf-8 -- """Axis and Axis2 detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'apache-axis-detect', 'description': 'Axis and Axis2 detection', 'author'...

Exploit for Server-Side Request Forgery in Apache Axis

Axis1.4 CVE-2019-0227 Remote Command Execution Vulnerability E...

MiracleLinux 4 : axis-1.2.1-7.3.AXS4 (AXSA:2013-129:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-129:01 advisory. Apache AXIS is an implementation of the SOAP Simple Object Access Protocol submission to W3C. From the draft W3C specification: SOAP is a lightweight protocol...

MiracleLinux 3 : axis-1.2.1-2jpp.8.AXS3 (AXSA:2014-536:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-536:01 advisory. Description : Apache AXIS is an implementation of the SOAP Simple Object Access Protocol submission to W3C. From the draft W3C specification: SOAP is a...

MiracleLinux 4 : axis-1.2.1-7.5.AXS4 (AXSA:2014-534:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-534:01 advisory. Description : Apache AXIS is an implementation of the SOAP Simple Object Access Protocol submission to W3C. From the draft W3C specification: SOAP is a...

CVE-2023-40743

UNSUPPORTED WHEN ASSIGNED When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose...