198 matches found
cve-2021-44228
CVE-2021-44228 A Zeek package which raises notices, tags HTTP connections and optionally generates a log for Log4J CVE-2021-44228 attempts. Detects payload contained in HTTP headers: See Simplifying Detection of Log4Shell for details. Uses Zeek signatures to generate notices when a Java file is...
dex2jar
dex2jar Proyecto trasladado aGitHub | Espejo| Wiki| Descargas| Incidencias ---|---|---|---|--- gh| https://github.com/pxb1988/dex2jar| Wiki| Releases| Issues sf| https://sourceforge.net/p/dex2jar| antigua| antigua| antigua bb| https://bitbucket.org/pxb1988/dex2jar| antigua| antigua| antigua gc|...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...
CVE-2022-22965-Spring4Shell-Security-Operations-Analysis
CVE-2022-22965 — Análisis de Operaciones de Seguridad de Spring4Shell Una simulación práctica de un Centro de Operaciones de Seguridad SOC donde desempeñé el rol de Analista de Seguridad de la Información respondiendo a un intento activo de explotación de Spring4Shell. Este repositorio documenta ...
CVE-2018-1000861
CVE-2018-1000861 Simple script to exploit CVE-2018-1000861, written in Python 3 Usage: root@kitploit: usage: exploit.py -h -u URL -c CMD -r -i IP -p PORT -v options: -h, --help show this help message and exit -u URL, --url URL Target Jenkins server -c CMD, --cmd CMD Command to execute -r,...
CVE-2021-44228-Apache-Log4j
CVE-2021-44228 Ejecución Remota de Código en Apache Log4j Versiones afectadas: todas las versiones desde 2.0-beta9 hasta 2.12.1 y desde 2.13.0 hasta 2.15.0 Avisos / Boletines de seguridad vinculados a Log4Shell CVE-2021-44228 Uso: 1. Descargue el proyecto y compile InjectClazz.java root@kitploit:...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
UBUNTU-CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-19135
A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...
CVE-2026-46562
Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...
EUVD-2026-44958
Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...
UBUNTU-CVE-2026-14759
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
MITRE ATT&CK Threat Detection with Splunk Detection engineeri...
CVE-2023-37525
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
EUVD-2023-41412
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
CVE-2025-70974
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an...
EUVD-2013-0663
Malware in sbrugna...
EUVD-2002-1969
Malware in sbrugna...