cve-2021-44228

CVE-2021-44228 Zeek 패키지로서 Log4J CVE-2021-44228 시도에 대한 알림을 발생시키고, HTTP 연결에 태그를 지정하며, 선택적으로 로그를 생성합니다. HTTP 헤더에 포함된 페이로드를 탐지합니다: 자세한 내용은 Log4Shell 탐지 간소화 참조. Zeek 시그니처를 사용하여 LDAP 검색 중 Java 파일이 반환될 때 알림을 생성합니다. 자세한 내용은 Zeek 및 LDAP 트래픽을 통한 Log4j 탐지 참조. 페이로드 및 1단계 탐지와 관계없이 2단계 Java 클래스가 다운로드될 때를 탐지합니다...

dex2jar

dex2jar 프로젝트가GitHub로 이전되었습니다 | 미러| 위키| 다운로드| 이슈 ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| Releases| Issues sf| https://sourceforge.net/p/dex2jar| old| old| old bb| https://bitbucket.org/pxb1988/dex2jar| old| old| old gc| https://code.google.com/p/dex2jar| old| old| old...

CVE-2026-0848-PoC-Improper-Input-Validation

CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ 경고 이 코드는 시스템에서 임의의 명령을 실행합니다. 격리된 가상 머신 또는 컨테이너에서만 사용하세요. 설명 CVE-2026-0848에 대한 기능적 PoC입니다. 악성 JAR 파일이 NLTK에 의해 로드될 때 임의의 코드를 실행할 수 있는 방법을 보여줍니다. 요구 사항 Python 3.8+ Java JDK 8+ payload 컴파일용 NLTK 3.9.2 자동으로 설치됨 설치 및 실행 클론 git clone...

CVE-2018-1000861

CVE-2018-1000861 CVE-2018-1000861を悪用するシンプルなスクリプト（Python 3で記述） 使い方: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to execute -r, --revshell Execute reverse shell -i IP, --...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Spring4Shell 보안 운영 분석 활성 Spring4Shell 악용 시도에 대응하는 정보 보안 분석가 역할을 수행한 실습형 보안 운영 센터SOC 시뮬레이션입니다. 이 저장소는 초기 탐지부터 분석 및 완화까지의 전체 사고 대응 수명 주기를 문서화합니다. 고지사항: 이 프로젝트는 교육 목적으로 Forage에서 진행된 사이버 보안 직무 시뮬레이션의 일부로 완료되었습니다. 모든 분석은 통제된 시뮬레이션 환경에서 수행되었습니다. CVE-2022-22965 Spring4Shell 개요...

AlmaLinux 9.2 [TuxCare] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1746190792)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1746190792 advisory. - Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run...

CVE-2021-44228-Apache-Log4j

CVE-2021-44228Apache Log4j 원격 코드 실행 영향받는 버전: 2.0-beta9부터 2.12.1까지, 2.13.0부터 2.15.0까지의 모든 버전 Log4ShellCVE-2021-44228 관련 보안 권고/공지 사용법: 1. 이 프로젝트를 다운로드하고 InjectClazz.java를 컴파일합니다. download git clone http://github.com/lonecloud/CVE-2021-44228-Apache-Log4j cd CVE-2021-44228-Apache-Log4j javac...

Astra Linux – Vulnerability in Commons-BeanUtils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added, which enables suppressing the ability for an attacker to access the classloader through the class property available on all Java objects. However, we did not use this feature by default, as it is a characteristic of...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

UBUNTU-CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-19135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low- privileged authenticated user can submit a crafted expressi...

CVE-2026-46562

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

EUVD-2026-44958

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

UBUNTU-CVE-2026-14759

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...

Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

MITRE ATT&CK Threat Detection with Splunk Detection engineeri...

CVE-2023-37525

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...

EUVD-2023-41412

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...

CVE-2023-37525: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...

CVE-2025-70974

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an...