Lucene search
+L

497 matches found

Kitploit
Kitploit
added 2026/09/16 8:38 a.m.11 views

Artemis

Artemis is a modular vulnerability scanner. It's the tool that powers CERT PL scanning activities by checking various aspects of website security and building easy-to-read messages ready to be sent to the scanned organizations. Quick Start 🔨 | Docs 📚 If you want to use additional modules that...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 5:55 p.m.14 views

Artemis

Artemis Overview A tools for Find APK Infrastructure . Brought to you by: HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized...

5.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/15 3:04 p.m.8 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS5.7AI score0.00693EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/15 3:04 p.m.7 views

artemis-server: Apache Artemis — session hijack via missing authentication

in Apache Artemis, the REATTACHSESSION handler performs zero authentication — it looks up the session by name only and calls transferConnection unconditionally, migrating the authenticated session to the attacker's connection. The hijacked cluster-bridge session inherits full broker-management...

9.8CVSS5.7AI score0.00693EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/15 3:04 p.m.7 views

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...

7.5CVSS5.9AI score0.00591EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/15 12:00 a.m.2 views

RHEL 7 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 7.4.25 (RHSA-2026:67604)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67604 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This...

9.8CVSS5.9AI score0.00693EPSS
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/13 2:13 p.m.7 views

CVE-2023-50780

CVE-2023-50780: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ Artemis By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/console/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J indirectly resulting ...

8.8CVSS7.7AI score0.17457EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:02 a.m.11 views

artemis2hashcat

artemis2hashcat Description Python3 implementation for converting Artemis PBKDF2WithHmacSHA1 hashes to hashcat format Usage The default configuration for Apache Artemis is to use the DefaultSensitiveStringCodec in order to store user passwords as PBKDF2WithHmacSHA1 hashes in the...

6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.10 views

Apache Artemis 1.0.0 < 2.45.0 / 2.50.0 < 2.57.0 Multiple Vulnerabilities

The version of Apache Artemis formerly Apache ActiveMQ Artemis installed on the remote host is affected by multiple vulnerabilities: - An unauthenticated remote attacker can craft a CORE protocol SESSIONREATTACH packet to steal an existing session and assume ongoing execution of the previously...

9.8CVSS6AI score0.00693EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.8 views

Apache Artemis 1.3.0 < 2.45.0 / 2.50.0 < 2.57.0 Denial of Service (CVE-2026-57822)

The version of Apache Artemis formerly Apache ActiveMQ Artemis installed on the remote host is affected by a vulnerability: - When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform...

6.5CVSS5.8AI score0.00493EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.11 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS5.8AI score0.00557EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.13 views

artemis-server: artemis-server: Pre-auth topology disclosure via CORE SUBSCRIBE_TOPOLOGY_V2 on channel0

A missing authentication vulnerability was found in Apache ActiveMQ Artemis. The SUBSCRIBETOPOLOGYV2 handler in CoreProtocolManager.LocalChannelHandler.handlePacket processes topology subscription requests on channel0 with zero authentication -- no call to getSecurityStore, no credential...

7.5CVSS5.7AI score0.00492EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.11 views

artemis-core-client: activemq-artemis: Unsafe deserialization via JsonUtil CompositeData on management address

A flaw was found in Apache ActiveMQ Artemis. The JsonUtil.fromJsonArray method uses ObjectInputStream.readObject to deserialize CompositeData from Base64-encoded serialized objects in management message bodies sent to the activemq.management address. While the deserialization is protected by an...

6.5CVSS5.6AI score0.00493EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.9 views

artemis-server: Apache Artemis — session hijack via missing authentication

in Apache Artemis, the REATTACHSESSION handler performs zero authentication — it looks up the session by name only and calls transferConnection unconditionally, migrating the authenticated session to the attacker's connection. The hijacked cluster-bridge session inherits full broker-management...

9.8CVSS5.7AI score0.00693EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.13 views

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...

7.5CVSS5.9AI score0.00591EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.8 views

wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoof

Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations...

9.1CVSS5.8AI score0.00377EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.10 views

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...

7.5CVSS5.9AI score0.00591EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.8 views

artemis-server: artemis-server: Pre-auth topology disclosure via CORE SUBSCRIBE_TOPOLOGY_V2 on channel0

A missing authentication vulnerability was found in Apache ActiveMQ Artemis. The SUBSCRIBETOPOLOGYV2 handler in CoreProtocolManager.LocalChannelHandler.handlePacket processes topology subscription requests on channel0 with zero authentication -- no call to getSecurityStore, no credential...

7.5CVSS5.7AI score0.00492EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.8 views

artemis-core-client: activemq-artemis: Unsafe deserialization via JsonUtil CompositeData on management address

A flaw was found in Apache ActiveMQ Artemis. The JsonUtil.fromJsonArray method uses ObjectInputStream.readObject to deserialize CompositeData from Base64-encoded serialized objects in management message bodies sent to the activemq.management address. While the deserialization is protected by an...

6.5CVSS5.6AI score0.00493EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.9 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS5.8AI score0.00557EPSS
SaveExploits0References4
Rows per page
Query Builder