4 matches found
CVE-2021-25641
CVE-2021-25641 A Exploit Tool For CVE-2021-25641. All dependencies was packed,You don't care the dependencies problem If you have dependencies you can just donwload the CVE-2021-25641.jar to run. Used for: Basic dubbo-common =2.7.3 Dubbo 2.7.0 to 2.7.8 Dubbo 2.6.0 to 2.6.9 Dubbo all 2.5.x version...
CVE-2021-25641-Proof-of-Concept
The 0xDABB of Doom - CVE-2021-25641-Proof-of-Concept 신뢰할 수 없는 데이터의 역직렬화를 통한 CVE-2021-25641 RCE를 위한 Apache/Alibaba Dubbo = 2.7.3 PoC 코드; 다양한 가젯으로 = 2.7.6 버전에 영향 Checkmarx 블로그에 게시된 "The 0xDABB of Doom" 기사에서 심층적으로 다루어졌습니다 https://www.checkmarx.com/blog/technical-blog/the-0xdabb-of-doom-cve-2021-2564...
CVE-2021-25641
Each Apache Dubbo server will set a serialization id to tell the clients which serialization protocol it is working on. But for Dubbo versions before 2.7.8 or 2.6.9, an attacker can choose which serialization id the Provider will use by tampering with the byte preamble flags, aka, not following t...
