9709 matches found
CVE-2026-101292 Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization
Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...
EUVD-2026-88242
Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...
CVE-2026-101292
Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy. The method calls Class.forNameclazz.getConstructor.newInstance where clazz is read directly from the CORE protocol wire buffer without type validation. An...
Log4JShell-Bytecode-Detector
🔍 Log4JShell 바이트코드 감지기 Log4jShell 바이트코드 감지기는 jar 파일이 심각한 CVE-2021-44228에 영향을 받는지 확인하는 데 도움이 되는 오픈 소스 도구입니다. 이 도구는 jar 파일을 스캔하고 jar 내 클래스에 대한 취약한 해시 집합과 클래스를 비교합니다. 해시는 Maven Central의 아티팩트에 대해 미리 계산되었습니다. 중요 업데이트: Maven Central에서영향을 받는 아티팩트 목록을 확장했습니다. 목록에는 18,816개의 아티팩트가 포함됩니다. 이 아티팩트들은 log4j-cor...
CVE-2026-101007
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...
CVE-2026-101007 aaPanel BaoTa Database Backup database.py InputSql os command injection
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...
EUVD-2026-88103
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...
CVE-2026-101007 aaPanel BaoTa Database Backup database.py InputSql os command injection
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...
CVE-2026-101007
A vulnerability exists in aaPanel BaoTa up to version 11.8.0 , specifically within the Database Backup Handler component. The flaw is located in the InputSql function of the class/database.py file. By manipulating the Password argument, an attacker can achieve remote os command injection . Public...
CVE-2016-4437
shiro-1.2.4-취약점 도구 rememberMe 값 복호화 및 해당 class 파일 내보내기 사용 방법 xk-mt-rememberMe 디코딩.py 실행 설명: 실행 후 먼저 키를 입력하거나 Enter 키로 기본 키인 'kPH+bIxk5D2deZiIxcaaaA=='를 사용합니다. 요청 패킷 안의 rememberMe 값을 입력하면 분석 후 내보낼 파일 이름을 입력하라는 메시지가 표시되며 자동으로 class 확장자가 추가됩니다. 내보내지 않을 경우 바로 Enter 키를 누릅니다. 실행 명령: python...
CVE-2023-49983
CVE-2023-49983 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/class" Description : A cross-site scripting XSS vulnerability in the component "/management/class" of School Fees Management System v1.0 allows attackers to execute...
CVE-2019-14450
This repository does not have a README...
CVE-2024-28397-Exploit-Automation
CVE-2024-28397 익스플로잇 자동화 js2py Sandbox Escape 취약점CVE-2024-28397을 악용하기 위한 Python 자동화 스크립트입니다. 이 도구는 취약한 인스턴스에서 원격 코드 실행RCE을 달성하기 위해 페이로드 생성 및 전달 프로세스를 자동화합니다. ⚠️ 법적 고지 이 도구를 사전 상호 동의 없이 대상을 공격하는 데 사용하는 것은 불법입니다. 이 저장소는 교육 목적으로만 제공됩니다. 작성자는 이 정보의 오용에 대해 책임을 지지 않습니다. 이 도구는 공인된 보안 평가 및 Capture The...
CVE-2026-101007: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...
yaml-payload
yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...
libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser
A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...
libXi: libXi: Denial of Service via out-of-bounds read during XI2 class parsing
A flaw was found in libXi. An out-of-bounds read vulnerability occurs during the parsing of X Input Extension XI2 device class data. A malicious X server can exploit this vulnerability by sending specially crafted class responses to a connected client application. This causes the client to read...
The vulnerability of the Perl-DBI interface for connecting to and working with databases lies in the use of externally controlled input data for selecting classes. This allows a malicious actor to execute arbitrary code.
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
