CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246RocketMQRCEEXP Exploit di Remote Code Execution per RocketMQ CVE-2023-33246 Panoramica Le versioni di RocketMQ 5.1.0 e precedenti sono vulnerabili all'Iniezione di Codice Arbitrario. Il componente Broker di RocketMQ è esposto sulla rete esterna e non dispone di verifica dei permessi...

LazyMesh

LazyMesh Mesh-Routing-System, das die Verwendung eines OpenDHT-Proxys als Backend unterstützt, sodass Knoten direkt über das Internet kommunizieren können. Sehr frühe Pre-Alpha, Proof of Concept, funktioniert möglicherweise noch nicht, usw. Dies ist sowohl für Hobby-/Funkamateur-Anwendungsfälle a...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Remote-Code-Ausführung Exploit CVE-2023-33246 RocketMQ Remote-Code-Ausführung Exploit Übersicht RocketMQ ist eine verteilte Messaging- und Streaming-Plattform. RocketMQ-Versionen 5.1.0 und niedriger sind anfällig für beliebige Code-Einschleusung Arbitrary Code Injection. D...

CVE-2020-11981-PoC

Esempio Costruisci il banco demo root@kitploit: docker-compose up -d VM docker-container: 172.18.0.2 Comando PoC root@kitploit: docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

fetch-broker-conf

Recupera Configurazione Broker Recupera Configurazione Broker tenterà di scaricare la configurazione del broker RocketMQ per cercare indicatori di compromissione nella variabile rocketmqHome. La variabile è utilizzata da vari attaccanti per eseguire codice tramite CVE-2023-33246. Per ulteriori...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance, versione C++ simile a TeamViewer https://dydtjr1128.github.io/RemoteAssistance-Cpp/ Ha anche realizzato una versione Java Swing = Collegamento Questa versione è implementata solo fino al mirroring locale, che non ha ancora utilizzato la rete. Da fare - x...

CVE-2019-5513-scanner

Scanner de Vulnerabilidades VMware Horizon /broker/xml Um scanner multi-thread de alto desempenho para detectar vulnerabilidades de divulgação de informações não autenticadas no endpoint /broker/xml do VMware Horizon Connection Server. 📋 Visão Geral O VMware Horizon Connection Server expõe um...

apache__activemq_CVE-2019-0222_5-15-8

Benvenuto in Apache ActiveMQ Apache ActiveMQ è un Message Broker ad alte prestazioni con licenza Apache 2.0 e un'implementazione di JMS 1.1. Per Iniziare Per aiutarti a iniziare, prova i seguenti link: Per Iniziare http://activemq.apache.org/version-5-getting-started.html Compilazione...

apache__activemq_CVE-2014-3576_5-10-1

Benvenuti in Apache ActiveMQ Apache ActiveMQ è un Message Broker ad alte prestazioni, con licenza Apache 2.0, e un'implementazione di JMS 1.1. Per Iniziare Per aiutarvi a iniziare, provate i seguenti link: Per Iniziare http://activemq.apache.org/version-5-getting-started.html Costruzione...

azbelt

azbelt Standalone-DLL- und Sliver-Erweiterung zum Aufzählen von Azure-bezogenen Anmeldeinformationen, hauptsächlich auf AAD-beigetretenen Rechnern Module aadjoin - Ermittelt Informationen über den AAD-Status des Rechners über NetGetAadJoinInformation credman - Ruft Anmeldeinformationen aus dem...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire-Labor Während meiner Schicht als Tier-2-Analyst im Security Operations Center SOC erhielt ich eine Eskalation von einem Tier-1-Analysten bezüglich eines öffentlich zugänglichen Servers, der dabei beobachtet wurde, wie er mit mehreren verdächtigen...

vallumd

vallumd Dieses Programm ermöglicht es Ihnen, IP-Blacklists zu zentralisieren und zu verteilen. Wenn Sie einen Server im Internet betreiben, sind Sie sehr wahrscheinlich schon auf einen oder mehrere Brute-Force-Angriffe gestoßen. Kein Problem, installieren Sie einfach fail2ban. Erledigt. Aber wenn...

CVE-2023-33246

CVE-2023-33246 - RocketMQ 远程代码执行 CVE-2023-33246 - Apache RocketMQ 配置远程代码执行漏洞 概述 RocketMQ 是一个分布式消息流平台。 RocketMQ 5.1.0 及以下版本存在任意代码注入漏洞。RocketMQ 的 Broker 组件暴露在外部网络，且缺乏权限验证。攻击者可以利用此漏洞，通过更新配置功能以运行 RocketMQ 的系统用户身份执行命令。此外，攻击者还可以通过伪造 RocketMQ 协议内容达到同样效果。 检测 RocketMQ 版本以识别漏洞 root@kitploit: usage: check.p...

CVE-2023-33246-Copy

1. Riferimenti e studio CVE-2023-33246 https://github.com/I5N0rth/CVE-2023-33246 2. Configurazione dell'ambiente locale 2.1 Scaricare le immagini root@kitploit: docker pull apache/rocketmq:4.9.1 docker pull apacherocketmq/rocketmq-console:2.0.0 2.2 Avviare broker, namesrv, console Avviare namesrv...

DEBIAN-CVE-2026-79921

amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial ...

CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

Broker_ApacheMQ

BrokerApacheMQ CVE-2023-46604 - Vulnerabilità di ApacheMQ versione 5.15.5 Macchina: Broker...

CVE-2026-26447

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...

EUVD-2026-66754

Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...