607 matches found
infosec-presentations
James Forshaw c 2019 的信息安全演示 一个包含我之前演示的信息安全演示及其支持材料的仓库。...
smuggler
root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...
MAL-010
MAL-010: MBeans peligrosos accesibles a través de JMX en Apache James Al enumerar e inspeccionar los MBeans expuestos por el JMX en localhost, puerto 9999, se han identificado los siguientes vectores de ataque: Escritura arbitraria de archivos mediante Log4J Lectura arbitraria de archivos mediant...
request_smuggler
Request smuggler HTTP 请求走私漏洞扫描器 基于 James Kettle 的精彩研究。 该工具可以帮助发现可能存在请求走私漏洞的服务器。 已归档 该工具需要大量改进，而我没有足够的时间来维护它，因为我正在开发另一个大型项目——x8。未来我可能会重新回到这个项目。 使用方法...
CVE-2023-51518
CVE-2023-51518：Apache James 中通过 JMX 的预认证 Java 反序列化漏洞 在低于 3.7.5 和 3.8.1 版本的 Apache James 发行版中，允许通过 JMX 预认证反序列化实现权限提升。在存在反序列化 gadget 的情况下，这可作为利用链的一部分，从而导致权限提升。 注意： 对于使用 Java 版本 =16，需要按照 这篇文章 中所述，寻找其他攻击向量。 厂商披露： 该漏洞的厂商披露及修复方案可在此 查看。 概念验证： 更多细节及利用过程可在此 PDF 中查找。...
IE11SandboxEscapes
IE11SandboxEscapes Algunos ejemplos de código fuente para los escapes de sandbox de IE11 corregidos. c James Forshaw 2014 Solo con fines informativos. Todos los archivos están licenciados bajo GPLv3. Consulta LICENSE para obtener más información...
CVE-2023-26269
CVE-2023-26269: Misconfigured JMX in Apache James By default Apache James opens a JMXRMI service that listens on localhost, port 9999. Because the JMX is misconfigured to allow unauthenticated access, an attacker that has local access to the machine running James can use a “MLet attack” in order ...
asf__james-project_CVE-2022-22931_3-6-0
Apache James 项目 :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...
CVE-2026-74010
Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14...
[SECURITY] Fedora 44 Update: mingw-expat-2.8.2-1.fc44
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
A Bootiful Podcast: A Bootiful Podcast: Dr. Venkat Subramaniam and James Ward on Intelligent Kotlin and So Much More
I am beyond thrilled that I got to co-present with two legends, Dr. Venkat Subramaniam and James Ward, at Voxxed Days Amsterdam, and even more so that they both sat down for a quick discussion with me right before that presentation. Enjoy!...
[SECURITY] Fedora 43 Update: mingw-expat-2.7.4-1.fc43
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
PT-2026-4389
Name of the Vulnerable Software and Affected Versions WP Term Order versions through 2.1.0 Description A Cross-Site Request Forgery CSRF issue exists in WP Term Order. This allows attackers to perform actions on behalf of authenticated users without their knowledge. Recommendations Update WP Term...
CVE-2025-60134
Cross-Site Request Forgery CSRF vulnerability in John James Jacoby WP Media Categories wp-media-categories allows Cross Site Request Forgery.This issue affects WP Media Categories: from n/a through = 2.1.0...
EUVD-2009-1252
Malware in sbrugna...
EUVD-2006-2803
Malware in sbrugna...
EUVD-2023-1405
Malicious code in bioql PyPI...
EUVD-2022-0517
Malicious code in bioql PyPI...