struts1-patch

struts1-patch Подробное описание и использование, см.: http://security.tencent.com/index.php/blog/msg/50 Патч для уязвимости манипуляции classLoader CVE-2014-0114 в struts1 struts.jar...

Spring4Shell

Spring RCE CVE-2022-22965 Environnement de la vulnérabilité Informations sur l'environnement springboot jdk11 tomcat9.0.30 payload Configuration des en-têtes "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Données du corps de la requêt...

java-remote-class-loader

Cet outil vous permet d'envoyer du bytecode Java sous forme de fichiers de classe à vos clients ou cibles potentielles pour les charger et les exécuter en utilisant Java ClassLoader avec l'API Reflect. Le client reçoit le fichier de classe du serveur et renvoie la sortie d'exécution respective. L...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

SSE4-CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC для CVE-2022-22965 с Spring Boot версии 2.6.5 Начало работы 1. Выполните docker compose up --build, чтобы собрать и запустить уязвимое приложение. 2. Выполните curl -H "Accept: text/html;"...

ARTful

Описание ARTful — это нативная библиотека Android, которая позволяет разработчикам изменять среду выполнения Android ART на Android 13 + 14. С помощью этого инструмента вы можете динамически менять реализацию любого статического метода в вашем приложении или в Android Framework, чтобы влиять на...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions concernées : Versions du framework Spring de 5.3.0 à 5.3.17, de 5.2.0 à 5.2.19 et versions antérieures Java JDK 9 Versions d'Apache Tomcat inférieures à 10.0.20, 9.0.62 et 8.5.78 Les applications empaquetées en WAR traditionnel avec une dépendance...

Spring4Shell-POC

Spring4Shell CVE-2022-22965 - Remote Code Execution Proof of Concept Полностью контейнеризированная Proof of Concept PoC , демонстрирующая эксплуатацию Spring4Shell CVE-2022-22965 и приводящая к удалённому выполнению кода RCE в уязвимом приложении Spring Framework, развёрнутом на Apache Tomcat...

CVE-2026-75430_PowerJob_worker_deployContainer_RCE

Неаутентифицированное удалённое выполнение кода в PowerJob Worker через /worker/deployContainer произвольная загрузка JAR 1. Краткое описание Worker PowerJob предоставляет обработчик deployContainer на своём HTTP-транспортном порту 27777 без какой-либо аутентификации. Злоумышленник отправляет...

CVE-2022-22965-PoC

CVE-2022-22965 PoC Exemple minimal pour reproduire la faille RCE Spring CVE-2022-22965. Exécution avec Docker Compose 1. Construisez l'application avec Docker Compose docker-compose up --build 2. Pour tester l'application, accédez à http://localhost:8080/handling-form-submission-complete/greeting...

CVE-2014-0094

CVE-2014-0094 Pour vérification. En référence à https://piyolog.hatenadiary.jp/entry/20140417/1397750197, vulhub/java:7u55-jdk tomcat-8.0.5 struts-2.3.16 Reproduction effectuée. Le classLoader fonctionne, mais le log crucial se retrouve encodé en pourcentage, donc cela ne mène pas à la RCE Versio...

Missing Release of Memory after Effective Lifetime

Overview org.apache.karaf:org.apache.karaf.util is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime due to improper...

CVE-2026-92230 Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle that created it, repeated bundle or feature install, update, or refresh operations can leave successive bundle...

EUVD-2026-78662

ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/database with language: js because PolyglotQueryEngine.command, PolyglotQueryEngine.analyze, and PolyglotQueryEngine.registerFunctions do not enforce database-administrator authorization...

Astra Linux – Vulnerability in Commons-BeanUtils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added, which enables suppressing the ability for an attacker to access the classloader through the class property available on all Java objects. However, we did not use this feature by default, as it is a characteristic of...

Astra Linux – Vulnerability in Commons-BeanUtils

Apache Commons has a vulnerability related to improper access control. A special BeanIntrospector class was added in version 1.9.2. This can be used to prevent attackers from using the declared class property of Java enum objects to gain access to the classloader. However, this protection was not...

Path Traversal

org.xwiki.commons, xwiki-commons-classloader-api is vulnerable to Path Traversal. The vulnerability is due to improper validation of the resource parameter in the ssx and jsx endpoints, which allows an attacker to exploit leading slashes and directory traversal sequences to read arbitrary...

SUSE CVE-2025-48734

Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default...

CVE-2026-9498 Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine

A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. Impacted is the function GroovyClassLoader.parseClass of the component Message Template Handler. Such manipulation of the argument DefMsgTemplate.content leads to improper neutralization of special elements used in a template engin...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the resource parameter in the ssx and jsx endpoints when a leading slash is used. An attacker can access sensitive configuration files by crafting a URL that traverses directories. Note: This issue is due to...