CVE-2023-36845-POC

CVE-2023-36845 PoC Automation Script This script provides an automated Proof of Concept PoC for the vulnerability identified as CVE-2023-36845, which affects the J-Web component of Juniper Networks Junos OS on EX and SRX Series devices. It demonstrates the potential for remote modification of the...

CVE-2021-2471

CVE-2021-2471 - MySQL Connector/J의 XXE Oracle MySQL의 MySQL Connectors 제품구성 요소: Connector/J의 취약점입니다. 영향을 받는 지원 버전은 8.0.26 및 이전 버전입니다. 이 취약점을 성공적으로 악용하면 중요한 데이터에 대한 무단 액세스 또는 MySQL Connectors에서 액세스할 수 있는 모든 데이터에 대한 완전한 액세스가 가능해지고, MySQL Connectors를 정지시키거나 빈번하게 반복되는 충돌완전한 DoS을 유발하는 무단 기능을 수행할 수 있습니다...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...

CVE-2023-36845

CVE-2023-36845 A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables. Script Usage $ dos2unix CVE-2023-36845.sh $ CVE-2023-36845.sh example.co...

CVE-2023-36845-6-

CVE-2023-36845-6 CVE-2023-36845 and CVE-2023-36846 Juniper Junos OS J-Web RCE For educational purpose only. echo "----------------Welcome-to-cve-2023-36845-6-script-by-1veresk----------+"; echo "+----------------------------------------------------------------------+"; echo...

Juniper Web Device Manager - Cross-Site Scripting

Juniper Web Device Manager J-Web in Junos OS contains a cross-site scripting vulnerability. This can allow an unauthenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web, which can allow the attacker to steal...

CVE-2023-36845-Juniper-Vulnerability

CVE-2023-36845 This script provides an automated Proof of Concept PoC for CVE-2023-36845, a vulnerability affecting Juniper Networks Junos OS on EX and SRX Series devices. It exploits the J-Web component, allowing remote modification of the PHPRC variable and potential code injection. Affected...

RITA-J

Jupyter Notebook의 RITA Real Intelligence Threat Analytics RITA는 Active Countermeasures가 후원하는 오픈소스 네트워크 트래픽 분석 프레임워크입니다. RITA-J 은 Jupyter Notebook에서 RITA 기능을 구현한 것입니다. 목표는 CSV, TSV 또는 JSON 형식의 모든 종류의 방화벽/프록시/DNS 로그를 지원하고, 추가 하드웨어나 유지 관리할 다른 구성 요소를 설치하지 않고도 잠재적인 C2 활동을 쉽게 분석, 헌팅 및 탐지할 수 있게 하는 것입니다...

CVE-2015-10034

CVE-2015-10034 This repository was created for the demonstration of the J-TAS Action. The workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775 folder contains the vulnerable application related to CVE-2015-10034. We have included the SARIF file with the results of the analysis performed by...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

CVE-2023-36845

CVE-2023-36845 사용법? bash cve.sh yourfile.txt 참고자료: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2023-36845

CVE-2023-36845 Juniper JunOS J-Web PHP external variable modification CVE-2023-36845 exploit...

EUVD-2026-90762

Improper Restriction of XML External Entity Reference in the XSLT support extension camel-quarkus-support-xalan in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or...

Resource Exhaustion

Apache Qpid Broker-J is vulnerable to resource exhaustion. The vulnerability is due to the inability to govern the maximum number of transfer frames per incoming delivery, where an authenticated attacker can cause excessive resource usage and potential denial of service...

Uncontrolled Resource Consumption

Apache Qpid Broker-J is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper enforcement of the session flow control incoming window, which allows an authenticated attacker to exceed the permitted window and cause resource exhaustion, potentially resulting in a...

Uncontrolled Resource Consumption

Apache Qpid Broker-J is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to inefficient handling of large or invalid ranges in disposition frames, which allows an authenticated attacker to cause excessive CPU consumption and trigger a denial-of-service condition...

Denial-Of-Service (DoS)

Apache Qpid Proton-J is vulnerable to denial-of-service DoS. The vulnerability is due to improper handling of type size/count values, which allows a pre-authentication attacker to trigger excessive memory allocation and potentially cause a denial of service...

Rate Limiting Bypass

Apache Qpid Broker-J is vulnerable to Rate Limiting Bypass. The vulnerability is due to the broker's inability to govern the rate at which it responds to an echo flow, where the response handling lacks proper throttling and an authenticated attacker can trigger excessive resource usage leading to...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_5726)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225726 advisory. OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 OpenJDK: imprope...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_5683)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225683 advisory. OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 OpenJDK: imprope...