graylog-cve-2024-24824-exploit

Exploiting Arbitrary Class Loading on the JVM This repository contains the proof-of-concept exploit presented in my talk: Exploiting Arbitrary Class Loading on the JVM Watch it here if you're interested: Youtube The exploit targets CVE-2024-24824 minor typo in the slides, an arbitrary class loadi...

gadgetinspector

Gadget Inspector Este proyecto inspecciona bibliotecas Java y classpaths en busca de cadenas de gadgets. Las cadenas de gadgets se utilizan para construir exploits para vulnerabilidades de deserialización. Al descubrir automáticamente posibles cadenas de gadgets en el classpath de una aplicación,...

PoC_CVE-2020-9484

This repository contains a proof of concept exploit for CVE-2020-9484, along with an example web server that is vulnerable to this exploit. Prerequisites for this vulnerability to be exploitable Affected tomcat versions are: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x...

fastjson-cve

CVE-2026-16723 Reproduction Project Overview This project reproduces CVE-2026-16723 — a critical Remote Code Execution RCE vulnerability in fastjson 1.2.68 through 1.2.83. The vulnerability allows RCE under default configuration without requiring AutoType enablement or pre-existing classpath...

EUVD-2026-82893

ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 contains an incomplete deny-list in the polyglot script sandbox: com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED lists java.util.ResourceBundle as a bare class name, which is matched by exact equality and therefore does...

GadgetProbe

Description Vous venez de trouver un bug de désérialisation Java, vous avez exécuté toutes vos payloads ysoserial, et.... vous n'avez rien obtenu. Et maintenant ? Comment pouvez-vous déboguer ou construire une chaîne de gadgets si vous êtes totalement aveugle ? Voici GadgetProbe, un outil qui...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – enum declaringClass Information Leak & RCE Chain For educational and authorized security research purposes only. This repository provides a controlled lab environment to reproduce the CVE-2025-48734 vulnerability in Apache Commons BeanUtils and explore h...

CVE-2026-92127

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permission copies the item, or updates that configuration through the REST API or CLI, allowing attackers able to define classpat...

CVE-2026-92127

CVE-2026-92127 affects the Jenkins Script Security Plugin in versions 1415.v9a_f9b_3a_c253d and earlier. The vulnerability stems from the plugin automatically approving classpath entries in an item configuration when a user with Overall/Administer permission copies the item or updates its configu...

EUVD-2026-80751

Jenkins Script Security Plugin 1415.v9af9b3ac253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permission copies the item, or updates that configuration through the REST API or CLI, allowing attackers able to define classpat...

CVE-2026-92128

The Jenkins Script Security Plugin (versions 1415.v9a_f9b_3a_c253d and earlier ) is vulnerable to a TOCTOU-style JAR approval bypass . The plugin downloads a URL-specified JAR file twice: it confirms user approval of the first download but loads the classpath entries from the second. An attacker ...

CVE-2026-69201

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segment but reject only segments exactly equal to an empty string, a dot, or two dots. A request containing percent-encoded slash or backslash separators can turn ...

CVE-2026-69201 Http4s: ResourceService and Webjar Service path escape via percent-encoded separators

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segment but reject only segments exactly equal to an empty string, a dot, or two dots. A request containing percent-encoded slash or backslash separators can turn ...

EUVD-2026-78363

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured userAttribute through loadAuthenticators without an ObjectInputFilter. Exploitation requires the WebAuthn flow to be...

CVE-2026-45051 OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, WebAuthnAuthentication loads a serialized AuthenticatorImpl object graph from the configured userAttribute through loadAuthenticators without an ObjectInputFilter. Exploitation requires the WebAuthn flow to be...

Astra Linux – Vulnerability in LibreOffice

Versions of Apache OpenOffice prior to 4.1.14 may be configured to add an empty entry to the Java class path. This may allow for the execution of arbitrary Java code from the current directory...

EnumJavaLibs

EnumJavaLibs EnumJavaLibs: Remote Java classpath enumeration via deserialization. Overview EnumJavaLibs can be used to discover which libraries are loaded i.e. available on the classpath by a remote Java application when it supports deserialization. root@kitploit: ----------------- Serially - v1....

CVE-2022-41853

Investigación sobre CVE-2022-41853: Uso de funciones estáticas para obtener RCE mediante deserialización de Java y ataque de código base remoto Quienes utilicen java.sql.Statement o java.sql.PreparedStatement en hsqldb HyperSQL DataBase para procesar entradas no confiables pueden ser vulnerables ...

PaperCut NG/MF Unsafe Reflection Vulnerability

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained...

VulnCheck KEV: CVE-2026-82078

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained...