Lucene search
+L

59432 matches found

Kitploit
Kitploit
added 2026/09/23 5:08 p.m.11 views

OWASPBugBounty

Programa de Bug Bounty de OWASP para Proyectos Introducción Muchos desarrolladores y empresas que buscan implementar seguridad están recurriendo a OWASP para utilizar librerías Defender que puedan implementar para proteger sus aplicaciones críticas. Dado que esto implica una forma de confianza en...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.3 views

CVE-2026-75516

A flaw was found in the RabbitMQ Java client. A malicious AMQP Advanced Message Queuing Protocol server, or a man-in-the-middle attacker, can modify connection parameters and inject oversized frames. This can cause the client to allocate a large amount of memory, leading to memory exhaustion and...

8.7CVSS5.8AI score0.00529EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.4 views

CVE-2026-69219

A flaw was found in the RabbitMQ Java client library. A malicious AMQP Advanced Message Queuing Protocol peer can exploit this by sending a specially crafted message during the pre-authentication phase. This message can cause the client to allocate an excessively large amount of memory, leading t...

8.7CVSS5.7AI score0.00422EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.2 views

CVE-2026-63337

A flaw was found in the RabbitMQ Java client library. A remote attacker, by intercepting or answering a JsonRpcClient request, could provide a malicious javaReturnType value. This unvalidated input is then used in Class.forName, allowing the attacker to load an arbitrary class already present in...

8.8CVSS6.4AI score0.00317EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:04 p.m.3 views

CVE-2026-61634

A flaw was found in the RabbitMQ Java client library. A malicious or compromised broker can send a method frame larger than the negotiated Advanced Message Queuing Protocol AMQP framemax value. This inconsistent validation causes the client to allocate and decode a protocol-invalid frame, leading...

7.5CVSS5.7AI score0.00299EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/23 5:03 p.m.3 views

CVE-2026-13505

A flaw was found in Bouncy Castle for Java FIPS BC-FJA. Sensitive cryptographic key material, intended to be securely erased from memory zeroised upon garbage collection, may persist longer than expected. This occurs because the zeroisation process relies on a deprecated Java finalization...

8.7CVSS5.8AI score0.00253EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 4:56 p.m.21 views

Decompiler_Tools

Herramientas de Descompilador 0x01 descompilador predeterminado de IDEA Directorio de Mac OS /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib root@kitploit: /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 4:55 p.m.13 views

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 is vulnerable to RCE through insecure java deserialization. The exploit attack the transport protocol on port 9300. The deserialization is based on Groovy MethodClosure chain to achive RCE...

9.8CVSS8.3AI score0.14314EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/23 4:50 p.m.12 views

GeoServerExploit

GeoServerExploit Una herramienta de explotación de vulnerabilidades para GeoServer CVE-2024-36401/CVE-2024-36404 Este proyecto ha sido desarrollado conjuntamente por @hony y @wh!te?be6ar. Si crees que este proyecto te resulta útil, no olvides darle una ⭐Star como apoyo. ¡Gracias! Ejemplo de uso...

9.8CVSS8.3AI score0.99813EPSS
SaveExploits26References2
Kitploit
Kitploit
added 2026/09/23 4:35 p.m.14 views

QLinspector

QLinspector Encontrando cadenas gadget de Java/C con CodeQL. Más información en nuestro artículo Instalación Clona el repositorio root@kitploit: $ git clone https://github.com/synacktiv/QLinspector.git Buscar gadgets: root@kitploit: $ codeql database analyze log4j --format=sarif-latest...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 4:35 p.m.12 views

cats

CATS 文档可在 https://endava.github.io/cats/ 获取 REST API 模糊测试与负面测试工具。无需编码,几分钟内运行数千个自愈式 API 测试! 全面 :测试自动生成,涵盖每个字段和头部 智能 :测试基于数据类型和约束生成;每个 Fuzzer 根据测试场景有特定期望 高度可配置 :高度自定义:可过滤特定 Fuzzer、HTTP 响应码、HTTP 方法、请求路径,提供业务上下文等 自愈 :测试生成后,任何 OpenAPI 规范变更自动识别 易于学习 :学习曲线平缓,配置和语法直观 快速 :自动完成测试编写、运行和报告,几分钟内覆盖数千个场景 时间紧迫?查...

5.7AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/23 4:31 p.m.13 views

ofbiz-CVE-2023-49070-RCE-POC

ofbiz-CVE-2023-49070-RCE-POC Este es un POC de RCE sin autenticación para CVE-2023-49070 que afectó a las aplicaciones Apache OFBiz wget https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar POC de DNS POC de RCE Estos tweets me ayudaron mucho:...

9.8CVSS8.7AI score0.95368EPSS
SaveExploits10References2
Cvelist
Cvelist
added 2026/09/23 4:29 p.m.18 views

CVE-2026-95848 Moquette fails open when configured authentication or authorization classes cannot load

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Server.initializeAuthorizatorPolicy treat the failure as though no custom class was configured and fall back to...

9.3CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 4:24 p.m.9 views

traccar

Traccar Resumen Traccar es un sistema de seguimiento GPS de código abierto. Este repositorio contiene un servicio back-end basado en Java. Es compatible con más de 200 protocolos GPS y más de 2000 modelos de dispositivos de seguimiento GPS. Traccar puede utilizarse con cualquier sistema de base d...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/23 4:17 p.m.103 views

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

5.7AI score
SaveExploits0References2
NVD
NVD
added 2026/09/23 4:16 p.m.6 views

CVE-2026-18490

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint BrmRMISSLServerSocketFactory.java:95, EP8. An adjacent-network attacker can deliver a crafted...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/23 4:15 p.m.9 views

trivy-java-db

trivy-java-db Resumen trivy-java-db construye una base de datos SQLite a partir de los datos del repositorio maven-index, almacenando ArtifactID, GroupID, Version y sha1 para archivos jar. La base de datos se utiliza en Trivy para descubrir información sobre jars sin GAV en su interior. Intervalo...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/23 4:14 p.m.10 views

Liferay-CE-Portal-Java-Deserialization

Liferay-CE-Portal-Java-Deserialization Este repositorio contiene el PoC de la vulnerabilidad de ejecución remota de código de Liferay CE Portal. Payloads Ya he compartido payloads en el repositorio. Debe encontrar la sintaxis correcta mediante el método de fuerza bruta. Los payloads que comparto...

6.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/23 4:04 p.m.2 views

CVE-2026-75935

A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...

8.7CVSS5.8AI score0.00441EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 3:58 p.m.13 views

rmiscout

描述 RMIScout 支持对暴露的 Java RMI 接口进行字典和暴力破解攻击,无需实际调用即可安全猜测方法签名。它支持多种 Java RMI 协议、方法调用和漏洞利用。 功能概览 支持多种类型的 Java RMI 服务器: RMI-JRMP(即普通 RMI;通常端口 1099):远程对象注册服务(rmiregistry) 通过 rmid 的 RMI 激活存根 RMI-IIOP:Java CORBA 编程模型(orbd;通常端口 1050) IIOP 需要使用 JRE 1.8,因为在后续运行时中已弃用。 RMI-SSL 多种操作模式 字典模式: 使用签名列表(见附带的...

6.2AI score
SaveExploits0References4
Rows per page
Query Builder