gadgetinspector

Gadget Inspector This project inspects Java libraries and classpaths for gadget chains. Gadgets chains are used to construct exploits for deserialization vulnerabilities. By automatically discovering possible gadgets chains in an application's classpath penetration testers can quickly construct...

fastjson-cve

Projet de Reproduction de CVE-2026-16723 Aperçu Ce projet reproduit CVE-2026-16723 — une vulnérabilité critique d'exécution de code à distance RCE dans fastjson 1.2.68 à 1.2.83. La vulnérabilité permet une RCE avec la configuration par défaut , sans nécessiter l'activation d'AutoType ni de gadget...

GadgetProbe

Description Vous venez de trouver un bug de désérialisation Java, vous avez exécuté toutes vos payloads ysoserial, et.... vous n'avez rien obtenu. Et maintenant ? Comment pouvez-vous déboguer ou construire une chaîne de gadgets si vous êtes totalement aveugle ? Voici GadgetProbe, un outil qui...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – enum declaringClass Information Leak & RCE Chain For educational and authorized security research purposes only. This repository provides a controlled lab environment to reproduce the CVE-2025-48734 vulnerability in Apache Commons BeanUtils and explore h...

EnumJavaLibs

EnumJavaLibs EnumJavaLibs : énumération à distance du classpath Java via la désérialisation. Aperçu EnumJavaLibs peut être utilisé pour découvrir quelles bibliothèques sont chargées c'est-à-dire disponibles sur le classpath par une application Java distante lorsqu'elle prend en charge la...

CVE-2022-41853

Research into CVE-2022-41853: Using static functions to obtian RCE via Java Deserialization & Remote Codebase Attack Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default ...

graylog-cve-2024-24824-exploit

استغلال التحميل التعسفي للفئات في JVM يحتوي هذا المستودع على استغلال إثبات المفهوم الذي تم تقديمه في محاضرتي: استغلال التحميل التعسفي للفئات في JVM شاهده هنا إذا كنت مهتماً: Youtube يستهدف هذا الاستغلال CVE-2024-24824 خطأ مطبعي بسيط في الشرائح، وهي ثغرة تحميل تعسفي للفئات تؤثر على إصدارات Graylog...

PoC_CVE-2020-9484

Ce dépôt contient un exploit de preuve de concept pour CVE-2020-9484, ainsi qu'un serveur web d'exemple qui est vulnérable à cet exploit. Prérequis pour que cette vulnérabilité soit exploitable Les versions de Tomcat affectées sont : Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache...

CVE-2026-105115 OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/ with an unverified session identifier and a chosen...

CVE-2026-105115

OpenAM versions prior to 16.1.3 are vulnerable to an unauthenticated arbitrary class instantiation vulnerability within the legacy JAX-RPC SOAP interface . Remote attackers can exploit this by sending SOAP requests to the */jaxrpc/ endpoint using an unverified session identifier and a specified c...

CVE-2026-105115 OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/ with an unverified session identifier and a chosen...

PT-2026-104576

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description The legacy JAX-RPC SOAP interface contains an unauthenticated arbitrary class instantiation flaw. Remote attackers can send SOAP requests to the endpoint '/jaxrpc/' using an unverified session...

CVE-2026-82385

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath...

CVE-2026-82385 Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath...

EUVD-2026-88131

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath...

CVE-2026-82385 Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath...

CVE-2026-82385

Apache Roller version 6.1.5 is vulnerable to an information disclosure flaw where a weblog administrator can read files on the application classpath , including configuration files containing secrets. The root cause is that the Velocity sandbox does not confine include and parse directives, allow...

CVE-2026-82385 Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath...

PT-2026-99792

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description An issue allows a weblog administrator to read files on the application classpath, including configuration files containing secrets. This occurs when a Velocity template is authored using an include...

CVE-2026-82385: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath...