CVE-2026-33439-Python-PoC

CVE-2026-33439 Python PoC 针对 OpenAM 预认证远程代码执行漏洞（jato.clientSession 反序列化）的独立 Python 概念验证。 内嵌的 shaded Click/Xalan gadget 从 cmd HTTP 请求头读取 shell 命令，并在 HTTP 响应中返回其输出。无需外部 Python 包、Java 运行时或 JAR 文件。 用法 python3 exploit.py \ --url https://target.example/openam/ui/PWResetUserValidation \ 'id' 可选参数：...

OpenAM 代码问题漏洞

OpenAM is an integrated access management solution developed by the OpenAM Consortium. It provides authentication, authorization, and federation features. Versions of OpenAM prior to 16.0.6 have code vulnerabilities due to an insecure Java deserialization issue with the jato.clientSession...

PT-2026-30917

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.0.6 Description Open Access Management OpenAM is an access management solution. An unauthenticated attacker can achieve arbitrary command execution on the server through unsafe Java deserialization. This occurs when...