Lucene search
+L

238 matches found

Kitploit
Kitploit
added 2026/08/27 8:54 a.m.3 views

cve-2020-1948-poc

cve-2020-1948-poc Vulnerabilidad de deserialización en Apache Dubbo instalación: root@kitploit: pip3 install dubbo-py root@kitploit: python3 cve-2020-1948.py Demo...

9.8CVSS8.7AI score0.15828EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 6:06 a.m.2 views

Dubbo-CVE-2020-1948

Apache Dubbo CVE-2020-1948 - Environnement de test Introduction Au début de l'apparition de cette vulnérabilité, afin de vérifier son impact, nous avons recherché sur Internet de nombreux exemples organisés par d'autres personnes. Aucun ne permettait de valider correctement cette vulnérabilité,...

9.8CVSS8.8AI score0.15828EPSS
SaveExploits3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.24 views

Apache Dubbo 2.5.x-2.7.4 - Insecure Deserialization

Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4,...

9.8CVSS8.8AI score0.36513EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/08/27 4:14 a.m.5 views

CVE-2019-17564

CVE-2019-17564:Apache Dubbo 逆シリアル化脆弱性 0x00 概要 Apache Dubboは、高性能で軽量なオープンソースJava RPCフレームワークです。インターフェース指向のリモートメソッド呼び出し、インテリジェントなフォールトトレランスと負荷分散、そしてサービスの自動登録と検出という3つの主要な機能を提供します。 0x01 脆弱性の概要 Apache Dubboは複数のプロトコルをサポートしており、公式ではDubboプロトコルを推奨しています。Apache Dubbo...

9.8CVSS8.7AI score0.36513EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 4:12 a.m.1 views

apache__dubbo_CVE-2021-30180_2-7-9

Apache Dubbo 项目...

9.8CVSS8.8AI score0.60427EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 2:58 a.m.2 views

Apache-Dubbo-Hessian2-CVE-2021-43297

Deserialización durante el manejo de excepciones Hessian2 en Apache Dubbo CVE-2021-43297 1. Importe los dos proyectos en dos instancias de IDEA 2. Primero ejecute org.apache.dubbo.samples.basic.BasicProvidermain para iniciar el servidor 3. Luego ejecute...

9.8CVSS8.7AI score0.16969EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 2:23 a.m.1 views

CVE-2021-43297-POC

CVE-2021-43297 漏洞描述 Dubbo Hessian-Lite 3.2.11及之前版本中存在潜在RCE攻击风险。Hessian-Lite在遇到序列化异常时会输出相关信息,这可能导致触发某些恶意定制的Bean的toString方法,从而引发RCE攻击。 原理 最开始的POC只能在Apache Dubbo=2.7.8实现RCE,原理见先知文章审核通过后回来修改。投稿之后又研究了一下,可以在Apache Dubbo=2.7.13实现RCE,原理分析见我的博客文章 效果如下 POC利用条件: apache dubbo = 2.7.13或alibaba dubbo对应版本 知道dub...

9.8CVSS8.4AI score0.16969EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 1:55 a.m.3 views

CVE-2019-17564-FastJson-Gadget

CVE-2019-17564 FastJson + SpringFramework 利用链(针对 Dubbo 2.7.3) 完整的分析文章可在 https://www.checkmarx.com/blog/apache-dubbo-unauthenticated-remote-code-execution-vulnerability 获取 注意: 这并非一个漏洞利用程序 ;它是一个用于演示在包含特定依赖项的作用域中反序列化的 POC 利用链。 概述 用于创建阿里巴巴 FastJson + Spring 利用链的基本代码,该链被用于在 CVE-2019-17564 中利用 Apache...

9.8CVSS8.7AI score0.36513EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 1:55 a.m.5 views

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 : Apache Dubbo 反序列化远程代码执行...

9.8CVSS8.7AI score0.36513EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 1:47 a.m.2 views

dubbo-rce

CVE-2023-23638 For learning and research purposes only. ZooKeeper is required. The test environment is Java 8. Other versions have not been tested and usability is not guaranteed. During reproduction, you need to add the VM parameter to DemoComsumer: -Ddubbo.hessian.allowNonSerializable=true. For...

9.8CVSS8.8AI score0.04847EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 1:13 a.m.5 views

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 Apache Dubbo desserialização RCE vídeo:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 vídeo:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 vídeo:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...

9.8CVSS8.7AI score0.36513EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 9:31 p.m.1 views

apache__incubator-dubbo_CVE-2021-30181_2-6-8

Projeto Apache Dubbo Apache Dubbo é um framework Web e RPC poderoso e fácil de usar. Ele suporta múltiplas implementações de linguagem, como Java, Go, Python, PHP, Erlang, Rust e Node.js/Web. O Dubbo fornece soluções para comunicação, descoberta de serviços, gerenciamento de tráfego,...

9.8CVSS8.7AI score0.60596EPSS
SaveExploits0References21
Kitploit
Kitploit
added 2026/08/26 9:22 p.m.2 views

dubbo-CVE-2023-23638

CVE-2023-23638 Nur für Lern- und Forschungszwecke ZooKeeper selbst bereitstellen Die Testumgebung ist Java 8, andere Versionen wurden nicht getestet, die Funktionsfähigkeit wird nicht garantiert. Für die Reproduktion muss dem DemoComsumer der VM-Parameter -Ddubbo.hessian.allowNonSerializable=true...

9.8CVSS8.8AI score0.04847EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 9:02 p.m.1 views

Apache-Dubbo-CVE-2023-23638-exp

Ein umfassenderes Dubbo-Schwachstellen-Scan-Tool finden Sie in meinem anderen Projekt: https://github.com/YYHYlh/Dubbo-Scan Apache-Dubbo-CVE-2023-23638-exp Ingenieurspraktiken für die Ausnutzung der Apache-Dubbo-Schwachstelle CVE-2023-23638, die den gesamten Prozess von der Dienstfindung bis zur...

9.8CVSS8.7AI score0.04847EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/08/24 1:36 p.m.2 views

Dubbo-deserialization

Apache Dubbo Deserialisierungs-Schwachstellenforschung Dieses Repository enthält Forschungsmaterialien, Proof-of-Concept-Code und Exploitation-Tools im Zusammenhang mit Deserialisierungs-Schwachstellen in Apache Dubbo, mit besonderem Fokus auf CVE-2020-1948. Repository-Struktur Verzeichnisse...

9.8CVSS8.7AI score0.15828EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/24 12:17 p.m.2 views

CVE-2021-25641-Proof-of-Concept

The 0xDABB of Doom - CVE-2021-25641-Prova di concetto Apache/Alibaba Dubbo = 2.7.3 codice PoC per CVE-2021-25641 RCE tramite deserializzazione di dati non attendibili; colpisce le versioni = 2.7.6 con gadget differenti Trattato in dettaglio nell'articolo "The 0xDABB of Doom", pubblicato sul blog...

9.8CVSS8.7AI score0.21221EPSS
SaveExploits2
Veracode
Veracode
added 2025/12/13 5:09 a.m.16 views

Remote Code Execution (RCE)

org.apache.dubbo:dubbo is vulnerable to Remote Code Execution RCE. The vulnerability is due to insecure deserialization handling in hessian-lite during exception logging, which allows an attacker to execute malicious code through crafted serialized data...

9.8CVSS7.5AI score0.16969EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.37 views

EUVD-2021-2105

Malware in sbrugna...

8.8CVSS8.5AI score0.02261EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2021-2103

Malware in sbrugna...

9.8CVSS9.2AI score0.02467EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-2100

Malware in sbrugna...

9.8CVSS9.2AI score0.06561EPSS
SaveExploits0References4
Rows per page
Query Builder