CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Vulnerabilità di Esecuzione Remota di Codice CVE-2023-33246 Exploit Utilizzo: java -jar CVE-2023-33246.jar -ip "127.0.0.1" -cmd "open -a calculator" Dichiarazione di non responsabilità: Questo strumento di rilevamento è destinato esclusivamente all'uso da parte di...

CVE-2023-33246-mitigation

Mitigazione CVE-2023-33246 Questo progetto è una dimostrazione basata su Maven della mitigazione di CVE-2023-33246, una vulnerabilità in Apache RocketMQ. Struttura del progetto org/example/Main.java: Il file principale del programma. org/apache/rocketmq/common/BrokerConfig.java: Versione modifica...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246: Apache RocketMQ दूरस्थ कमांड निष्पादन भेद्यता जाँच उपकरण उपकरण कार्यक्षमता सरल उपयोग चलाएँ ./apacherocketmqcve202333246scannerlinuxamd64 scan आउटपुट: क्या भेद्यता मौजूद है: हाँ या VulnFound: true तो भेद्यता मौजूद है, Version या संस्करण फ़ील्ड उपकरण द्वारा परिसंपत्ति...

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Demo di sfruttamento della vulnerabilità di scrittura arbitraria di file in Apache RocketMQ Panoramica In realtà, la vulnerabilità di scrittura arbitraria di file CVE-2023-37582 in Apache RocketMQ è già stata affrontata nella vulnerabilità RCE CVE-2023-33246. Tuttavia, la...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Vulnerabilità di esecuzione di codice remoto CVE-2023-33246 Exploit Utilizzo: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Caratteristiche di questo strumento Poiché il meccanismo del heartbeat attiva la vulnerabilità...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution ÜBERBLICK Apache RocketMQ ist eine der beliebtesten und am weitesten verbreiteten Plattformen für verteiltes Messaging und Streaming. Kürzlich wurde eine Befehlsausführungslücke in Apache RocketMQ gemeldet, die die Version 5.1.0 und darunter...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Apache RocketMQ è una piattaforma di messaggistica e streaming distribuita con bassa latenza, elevate prestazioni e affidabilità, capacità a livello di trilioni e scalabilità flessibile. Offre una varietà di funzionalità: Pattern di messaggistica tra cui publish/subscribe,...

apache__rocketmq_CVE-2019-17572_4-6-0

Apache RocketMQ Apache RocketMQ è una piattaforma di messaggistica e streaming distribuita con bassa latenza, alte prestazioni e affidabilità, capacità a livello di trilioni e scalabilità flessibile. Offre una varietà di funzionalità: Modello di messaggistica Pub/Sub Messaggio transazionale di...

CVE-2023-33246

CVE-2023-33246 - RocketMQ 远程代码执行 CVE-2023-33246 - Apache RocketMQ 配置远程代码执行漏洞 概述 RocketMQ 是一个分布式消息流平台。 RocketMQ 5.1.0 及以下版本存在任意代码注入漏洞。RocketMQ 的 Broker 组件暴露在外部网络，且缺乏权限验证。攻击者可以利用此漏洞，通过更新配置功能以运行 RocketMQ 的系统用户身份执行命令。此外，攻击者还可以通过伪造 RocketMQ 协议内容达到同样效果。 检测 RocketMQ 版本以识别漏洞 root@kitploit: usage: check.p...

CVE-2023-33246-Copy

1. Riferimenti e studio CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Configurazione dell'ambiente locale 2.1 Scaricare le immagini root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Avviare broker, namesrv, console Avviare namesrv...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

Dieses Repository hat keine README-Datei...

apache__rocketmq_CVE-2023-33246_5-1-0

Apache RocketMQ...

EUVD-2020-0539

Malware in sbrugna...

CVE-2019-17572

In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in brokers, which leads to a directory traversa...

Apache RocketMQ < 4.9.6 / 5.0.x < 5.1.1 RCE

The version of Apache RocketMQ installed on the remote host is prior to 4.9.6 or 5.1.1. It is, therefore, affected by a remote code execution vulnerability. - For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of...

CVE-2023-33246

A vulnerability was found in Apache RocketMQ where, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification. This flaw allows an attacker to use...

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Misconfigured and vulnerable Linux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software. "Perfctl is particularly elusive and persistent, employing several sophisticated...

Apache RocketMQ < 5.3.0 Information Disclosure (CVE-2024-23321)

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

Apache RocketMQ Information Disclosure Vulnerability

Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. An information disclosure vulnerability exists in Apache RocketMQ, which can be exploited by an attacker to obtain an administrator's account and password via a specific...

Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...