240 matches found
Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation
Payara Server exposes multiple HTTP-accessible EJB invocation mechanisms that rely on attacker-controlled reflection, dynamic class loading, and unsafe deserialization. These endpoints allow remote clients to perform arbitrary JNDI lookups, resolve attacker-supplied class names, and invoke EJB...
CVE-2026-15560
when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...
CVE-2019-2888
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
EUVD-2006-2433
Malware in sbrugna...
EUVD-2012-4478
Malware in sbrugna...
EUVD-2019-12286
Malware in sbrugna...
EUVD-2013-4056
Malware in sbrugna...
EUVD-2013-2100
Malware in sbrugna...
EUVD-2020-6459
Malware in sbrugna...
EUVD-2014-3476
Malware in sbrugna...
EUVD-2007-0418
Malware in sbrugna...
EUVD-2007-0417
Malware in sbrugna...
EUVD-2005-4702
Malware in sbrugna...
EUVD-2007-5066
Malware in sbrugna...
EUVD-2010-2648
Malware in sbrugna...
EUVD-2013-4118
Malware in sbrugna...
EUVD-2015-1987
Malware in sbrugna...
EUVD-2004-0711
Malware in sbrugna...