11389 matches found
jexboss
JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...
openrasp
OpenRASP はじめに WAFのような境界防御ソリューションとは異なり、OpenRASPはインストルメンテーションによって保護エンジンをアプリケーションサーバーに直接統合します。データベースクエリ、ファイル操作、ネットワークリクエストなど、さまざまなイベントを監視できます。 攻撃が発生した場合、WAFはシグネチャと悪意のあるリクエストを照合してブロックします。OpenRASPは、敏感な関数をフックし、それらに渡される入力を検査・ブロックするという異なるアプローチを採用しています。その結果、この検査はコンテキストを認識し、その場で行われます。これにより、以下の利点がもたらされます。 1...
clusterd
clusterd clusterd はオープンソースのアプリケーションサーバー攻撃ツールキットです。現在のフィンガープリンティングやエクスプロイト手法に対する不満から生まれ、clusterd はアプリケーションサーバー攻撃のフィンガープリンティング、偵察、エクスプロイトの各フェーズを自動化します。詳細は wiki を参照してください。 必要条件 Python = 2.7.x Requests = 2.2.x インストール clusterd の推奨インストール方法は、Github リポジトリをクローンすることです。 git clone...
wildfly__wildfly_CVE-2018-1047_11-0-0-Final
WildFly アプリケーションサーバー http://wildfly.org 高速起動 小フットプリント モジュラーデザイン 統一設定と管理 そしてもちろん Java EE7! ビルド 前提条件: JDK 8 またはそれ以降 - java -version で確認 Maven 3.3.1 またはそれ以降 - mvn -v で確認 nix システムでは、ビルドを実行するユーザーの最大オープンファイル数が少なくとも 4096 であることを確認してください ulimit -n で確認 またはそれ以上。ユーザーが実行している他の I/O 負荷の高いプロセスによって異なります。 自身の Mave...
JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization
The JMS over HTTP Invocation Layer in JBossMQ, as implemented in HTTPServerILServlet.java in JBoss Application Server AS 4.x and earlier, does not properly restrict the classes that can be deserialized from the raw POST body. This allows remote attackers to execute arbitrary code or cause a denia...
Security Bulletin: Due to use of WebSphere Application Server - Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities.
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for September 2026.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF003, 25.0.0-IF007 and 24.0.0-IF009. These vulnerabilities have been also addressed in 24.0.1-IF009 Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7 is vulnerable to...
SAP NetWeaver Application Server Java 7.5 - Local File Inclusion
SAP NetWeaver Application Server Java 7.5 is susceptible to local file inclusion in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS. This can allow remote attackers to read arbitrary files via a .. dot dot in the query string, as exploited in the wild in August 2017, aka SAP Security Note...
Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.
Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-16184 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to...
CVE-2025-31324
CVE-2025-31324 此检测方法如何工作？ 该模板向目标的基本 URL 发送 HTTP GET 请求，并检查响应头以识别 SAP NetWeaver Application Server 实例。此信息有助于评估系统是否可能受 CVE-2025-31324 影响。 如何运行此脚本？ 1. 从 此处 下载 Nuclei 2. 将模板复制到你的本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考 https://nvd.nist.gov/vuln/detail/CVE-2025-31324...
Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty prior to 26.0.0.9 is affected by multiple vulnerabilities
Summary IBM WebSphere Application Server Liberty prior to 26.0.0.9 is affected by multiple vulnerabilities. CVE-2026-10841, CVE-2026-11548, CVE-2026-11549, CVE-2026-11722, CVE-2026-15396, CVE-2026-15412, CVE-2026-15634 Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)
Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
Oracle E-Business Suite (September 2026 CSPU)
The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions...
Security Bulletin: WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)
Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
Security Bulletin: WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by a privilege escalation (CVE-2026-11545)
Summary WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)
Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to t...
CVE-2026-11722
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11711
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...