147 matches found
offsec-karaf-exploits
offsec-karaf-exploits 使用方法: root@kitploit: python exploit.py --help 例: root@kitploit: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf ペイロードの再構築 Felix Framework のセットアップ 1. lib ディレクトリを作成する root@kitploit: mkdir -p ./revshell/lib 2. Felix...
asf__karaf_CVE-2022-22932_4-3-5
Apache Karaf Apache Karaf はモジュリシックランタイムであり、いくつかのフレームワークとプログラミングモデル（REST/API、Web、Spring Bootなど）をサポートしています。すぐに使える機能を提供し、可変または不変のアプリケーションとしてパッケージ化されているため、手間をかけずに直接活用できます。 概要 ホットデプロイ : Karafはアプリケーションのホットデプロイ（deployディレクトリ内）をサポートしています。 動的構成 :...
CVE-2018-11788
概要 Apache Karafは、現代的で多態性のあるアプリケーションコンテナです。OSGiを基盤とした軽量で強力なエンタープライズ対応のコンテナです。Apache Karafは「プロダクトプロジェクト」であり、完全でターンキーのランタイムを提供します。このランタイムは「多面的」であり、OSGiおよび非OSGiアプリケーション、Webアプリケーション、サービスベースのアプリケーションなど、さまざまな種類のアプリケーションをデプロイできます。 最近のApache Karafの調査において、そのXMLパーサーにXXE（XML External...
CVE-2026-24656
Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...
CVE-2026-24656
Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...
CVE-2026-24656 Apache Karaf: Decanter log-socket collector has deserialization vulnerability
Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...
CVE-2026-24656
Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...
CVE-2026-24656 Apache Karaf: Decanter log-socket collector has deserialization vulnerability
Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes the port 4560, without authentication. If the collector exposes allowed classes property, this configuration can be bypassed. It means that the log socket collector is vulnerable to...
Apache Karaf Decanter security vulnerability
Apache Karaf Decanter is a monitoring and alerting module of the Apache Foundation. Versions of Apache Karaf Decanter prior to 2.12.0 contained a security vulnerability, which stemmed from the log socket collector’s inability to deserialize trusted data, potentially leading to denial-of-service...
PT-2026-4647
Name of the Vulnerable Software and Affected Versions Apache Karaf Decanter versions prior to 2.12.0 Description The Decanter log socket collector in Apache Karaf has a deserialization issue. The collector operates on port 4560 without authentication. If the allowed classes property is exposed, i...
CVE-2024-34365
UNSUPPORTED WHEN ASSIGNED Improper Input Validation vulnerability in Apache Karaf Cave.This issue affects all versions of Apache Karaf Cave. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to th...
EUVD-2018-0805
Malware in sbrugna...
EUVD-2019-0184
Malware in sbrugna...
EUVD-2019-0374
Malware in sbrugna...
EUVD-2019-0185
Malware in sbrugna...
EUVD-2016-4181
Malware in sbrugna...
EUVD-2024-1376
Malicious code in bioql PyPI...
EUVD-2022-0628
Malicious code in bioql PyPI...