606 matches found
MAL-010
MAL-010: MBean pericolosi accessibili tramite JMX in Apache James Elencando e ispezionando gli MBean esposti dalla JMX su localhost, porta 9999, sono stati identificati i seguenti vettori di attacco: Scrittura arbitraria di file tramite Log4J Lettura arbitraria di file tramite Log4J Nota: A...
request_smuggler
Request smuggler Scanner di vulnerabilità di request smuggling HTTP Basato sull'incredibile ricerca di James Kettle. Lo strumento può aiutare a trovare server che potrebbero essere vulnerabili alla vulnerabilità di request smuggling. Archiviato...
asf__james-project_CVE-2022-22931_3-6-0
Apache James Project :latestjamesversion: 3.8.0 image:https://img.shields.io/badge/Join%20us-Mailing%20lists-purple.svglink="https://james.apache.org/mail.html" link:https://gitter.im/apache/james-projectimage:https://badges.gitter.im/apache/james-project.svgJoin the chat at...
CVE-2023-51518
CVE-2023-51518: Deserializzazione Java pre-autenticata tramite JMX in Apache James Le distribuzioni di Apache James precedenti alle release 3.7.5 e 3.8.1 consentono l'escalation dei privilegi tramite la deserializzazione durante la pre-autenticazione JMX. Se si dispone di un gadget di...
CVE-2023-26269
CVE-2023-26269: Apache James में गलत कॉन्फ़िगर किया गया JMX डिफ़ॉल्ट रूप से, Apache James एक JMXRMI सेवा खोलता है जो लोकलहोस्ट, पोर्ट 9999 पर सुनती है। JMX को बिना प्रमाणीकरण पहुँच की अनुमति देने के लिए गलत कॉन्फ़िगर किया गया है, इसलिए James चलाने वाली मशीन पर स्थानीय पहुँच रखने वाला एक हमलावर...
smuggler
root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...
infosec-presentations
Presentazioni Info-sec di James Forshaw c 2019 Un repository di precedenti presentazioni Info-sec che ho tenuto, incluso materiale di supporto...
IE11SandboxEscapes
IE11SandboxEscapes Einige Beispielquellcode für behobene IE11-Sandbox-Escapes. c James Forshaw 2014 Nur zu Informationszwecken. Alle Dateien sind unter GPLv3 lizenziert. Weitere Informationen finden Sie in der LICENSE-Datei...
[SECURITY] Fedora 44 Update: mingw-expat-2.8.2-1.fc44
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
A Bootiful Podcast: A Bootiful Podcast: Dr. Venkat Subramaniam and James Ward on Intelligent Kotlin and So Much More
I am beyond thrilled that I got to co-present with two legends, Dr. Venkat Subramaniam and James Ward, at Voxxed Days Amsterdam, and even more so that they both sat down for a quick discussion with me right before that presentation. Enjoy!...
[SECURITY] Fedora 43 Update: mingw-expat-2.7.4-1.fc43
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
PT-2026-4389
Name of the Vulnerable Software and Affected Versions WP Term Order versions through 2.1.0 Description A Cross-Site Request Forgery CSRF issue exists in WP Term Order. This allows attackers to perform actions on behalf of authenticated users without their knowledge. Recommendations Update WP Term...
CVE-2025-60134
Cross-Site Request Forgery CSRF vulnerability in John James Jacoby WP Media Categories wp-media-categories allows Cross Site Request Forgery.This issue affects WP Media Categories: from n/a through = 2.1.0...
EUVD-2009-1252
Malware in sbrugna...
EUVD-2006-2803
Malware in sbrugna...
EUVD-2023-31201
Malicious code in bioql PyPI...
EUVD-2023-0529
Malicious code in bioql PyPI...
EUVD-2022-0517
Malicious code in bioql PyPI...