Lucene search
+L

59432 matches found

Kitploit
Kitploit
added 2026/09/23 5:08 p.m.11 views

OWASPBugBounty

Programa de Bug Bounty de OWASP para Proyectos Introducción Muchos desarrolladores y empresas que buscan implementar seguridad están recurriendo a OWASP para utilizar librerías Defender que puedan implementar para proteger sus aplicaciones críticas. Dado que esto implica una forma de confianza en...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.3 views

CVE-2026-75516

A flaw was found in the RabbitMQ Java client. A malicious AMQP Advanced Message Queuing Protocol server, or a man-in-the-middle attacker, can modify connection parameters and inject oversized frames. This can cause the client to allocate a large amount of memory, leading to memory exhaustion and...

8.7CVSS5.8AI score0.00529EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.3 views

CVE-2026-69219

A flaw was found in the RabbitMQ Java client library. A malicious AMQP Advanced Message Queuing Protocol peer can exploit this by sending a specially crafted message during the pre-authentication phase. This message can cause the client to allocate an excessively large amount of memory, leading t...

8.7CVSS5.7AI score0.00422EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.2 views

CVE-2026-63337

A flaw was found in the RabbitMQ Java client library. A remote attacker, by intercepting or answering a JsonRpcClient request, could provide a malicious javaReturnType value. This unvalidated input is then used in Class.forName, allowing the attacker to load an arbitrary class already present in...

8.8CVSS6.4AI score0.00317EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.3 views

CVE-2026-61634

A flaw was found in the RabbitMQ Java client library. A malicious or compromised broker can send a method frame larger than the negotiated Advanced Message Queuing Protocol AMQP framemax value. This inconsistent validation causes the client to allocate and decode a protocol-invalid frame, leading...

7.5CVSS5.7AI score0.00299EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:03 p.m.3 views

CVE-2026-13505

A flaw was found in Bouncy Castle for Java FIPS BC-FJA. Sensitive cryptographic key material, intended to be securely erased from memory zeroised upon garbage collection, may persist longer than expected. This occurs because the zeroisation process relies on a deprecated Java finalization...

8.7CVSS5.8AI score0.00253EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 4:56 p.m.20 views

Decompiler_Tools

Herramientas de Descompilador 0x01 descompilador predeterminado de IDEA Directorio de Mac OS /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib root@kitploit: /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 4:55 p.m.13 views

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 is vulnerable to RCE through insecure java deserialization. The exploit attack the transport protocol on port 9300. The deserialization is based on Groovy MethodClosure chain to achive RCE...

9.8CVSS8.3AI score0.14314EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/23 4:50 p.m.12 views

GeoServerExploit

GeoServerExploit Una herramienta de explotación de vulnerabilidades para GeoServer CVE-2024-36401/CVE-2024-36404 Este proyecto ha sido desarrollado conjuntamente por @hony y @wh!te?be6ar. Si crees que este proyecto te resulta útil, no olvides darle una ⭐Star como apoyo. ¡Gracias! Ejemplo de uso...

9.8CVSS8.3AI score0.99813EPSS
SaveExploits26References2
Kitploit
Kitploit
added 2026/09/23 4:35 p.m.14 views

QLinspector

QLinspector Encontrando cadenas gadget de Java/C con CodeQL. Más información en nuestro artículo Instalación Clona el repositorio root@kitploit: $ git clone https://github.com/synacktiv/QLinspector.git Buscar gadgets: root@kitploit: $ codeql database analyze log4j --format=sarif-latest...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 4:35 p.m.12 views

cats

...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/23 4:31 p.m.13 views

ofbiz-CVE-2023-49070-RCE-POC

ofbiz-CVE-2023-49070-RCE-POC Este es un POC de RCE sin autenticación para CVE-2023-49070 que afectó a las aplicaciones Apache OFBiz wget https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar POC de DNS POC de RCE Estos tweets me ayudaron mucho:...

9.8CVSS8.7AI score0.95368EPSS
SaveExploits10References2
Cvelist
Cvelist
added 2026/09/23 4:29 p.m.12 views

CVE-2026-95848 Moquette fails open when configured authentication or authorization classes cannot load

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to...

9.3CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 4:24 p.m.9 views

traccar

Traccar Resumen Traccar es un sistema de seguimiento GPS de código abierto. Este repositorio contiene un servicio back-end basado en Java. Es compatible con más de 200 protocolos GPS y más de 2000 modelos de dispositivos de seguimiento GPS. Traccar puede utilizarse con cualquier sistema de base d...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/23 4:17 p.m.103 views

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

5.7AI score
SaveExploits0References2
NVD
NVD
added 2026/09/23 4:16 p.m.6 views

CVE-2026-18490

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint BrmRMISSLServerSocketFactory.java:95, EP8. An adjacent-network attacker can deliver a crafted...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/23 4:15 p.m.9 views

trivy-java-db

trivy-java-db Resumen trivy-java-db construye una base de datos SQLite a partir de los datos del repositorio maven-index, almacenando ArtifactID, GroupID, Version y sha1 para archivos jar. La base de datos se utiliza en Trivy para descubrir información sobre jars sin GAV en su interior. Intervalo...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/23 4:14 p.m.10 views

Liferay-CE-Portal-Java-Deserialization

Liferay-CE-Portal-Java-Deserialization Este repositorio contiene el PoC de la vulnerabilidad de ejecución remota de código de Liferay CE Portal. Payloads Ya he compartido payloads en el repositorio. Debe encontrar la sintaxis correcta mediante el método de fuerza bruta. Los payloads que comparto...

6.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/23 4:04 p.m.2 views

CVE-2026-75935

A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...

8.7CVSS5.8AI score0.00441EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 3:58 p.m.13 views

rmiscout

Descripción RMIScout permite ataques de lista de palabras y fuerza bruta contra interfaces Java RMI expuestas para adivinar de forma segura firmas de métodos sin invocación. Soporta múltiples protocolos Java RMI, invocación de métodos y explotación. Resumen de características Soporta múltiples...

6.2AI score
SaveExploits0
Rows per page
Query Builder