EUVD-2016-0794

Malware in sbrugna...

SUSE CVE-2016-0779

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object...

The vulnerability of the EjbObjectInputStream class in the Apache TomEE application server allows a hacker to execute arbitrary code.

The vulnerability of the EjbObjectInputStream class in the Apache TomEE application server is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created transformed object...

CVE-2016-0779

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2016-0779

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2016-0779

CVE-2016-0779 affects Apache TomEE, where the EjbObjectInputStream class before 1.7.4 and before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object. The vulnerability enables remote code execution (RCE) by deserializing untrusted data, with affected product...

Apache TomEE 1.x < 1.7.4 / 7.x < 7.0.0-M3 Multiple RCE

Binary data 9323.prm...

The vulnerability of the Apache TomEE application server allows a hacker to execute arbitrary commands.

The vulnerability of the EjbObjectInputStream class in the Apache TomEE application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using serialized Java objects remotely...

Apache TomEE 'EjbObjectInputStream' Arbitrary Command Execution Vulnerability

Apache TomEE is a Java EE server developed by the Apache Software Foundation. A security vulnerability in the 'EjbObjectInputStream' class of Apache TomEE allows remote attackers to submit a serialized Java data stream to execute arbitrary commands...