62067 matches found
CVE-2026-34486
CVE-2026-34486 — Apache Tomcat EncryptInterceptor RCE Apache Tomcat Tribes cluster communication module fails to discard messages when EncryptInterceptor decryption fails, allowing unauthenticated attackers to trigger Remote Code Execution via Java deserialization on port 4000. Vulnerability...
CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization
CVE-2026-34486 Derivación de fail-open en EncryptInterceptor en el clustering de Apache Tomcat Tribes que conduce a RCE no autenticado mediante deserialización de Java. Afectados: 11.0.19+, 10.1.53+, 9.0.116+. Corregido en: 11.0.21, 10.1.54, 9.0.117. Descubierto y reportado por Bartlomiej Dmitruk...
CVE-2026-25747
LevelDB Deserialization Vulnerability Reproducer This project demonstrates a Java deserialization vulnerability in Apache Camel's LevelDB Aggregation Repository, similar to CVE-2024-23114 which affected the Cassandra Aggregation Repository. Vulnerability Summary Property| Value ---|--- Component|...
rogue-jndi
Rogue JNDI Un servidor LDAP malicioso para ataques de inyección JNDI. Descripción El proyecto contiene servidores LDAP y HTTP para explotar la API Java JNDI insegura por defecto. Para realizar un ataque, puedes iniciar estos servidores localmente y luego provocar una resolución JNDI en el cliente...
noise-java
Noise-Java Library Noise-Java is a plain Java implementation of the Noise Protocol, intended as a reference implementation. The code is distributed under the terms of the MIT license. This library is written in plain Java, making use of the Java Cryptography Extension JCE to provide cryptographic...
ysoserial-modified
ysoserial-modified Thats a fork of the original ysoserial application that can be found here: https://github.com/frohoff/ysoserial Description of the Modification Due how Runtime.getRuntime.execString.class works in java, nested and complex commands where you'll need control pipes or send the...
marshalsec
Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...
marshalsec
Java Unmarshaller Security - Convirtiendo tus datos en ejecución de código Si has llegado aquí por Log4Shell/CVE-2021-44228, quizás quieras leer sobre los vectores de explotación y las versiones afectadas del runtime de Java: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/...
FakeDellOM
FakeDellOM Un host falso que puede ser "gestionado" por Dell OMSA, permitiéndote superar la pantalla de inicio de sesión, y posiblemente sirviendo como punto de partida para fuzzing u otras pruebas. Historia Mientras investigaba posibles vulnerabilidades¹ en Dell OpenManage Server Administrator, ...
mojarragadget
mojarragadget description We found a new Java gadget chain in the Mojarra Library, this repo contains 2 POC to reproduce the exploit on version 2.3 and 3.0. More information here: https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html...
CVE-2026-20131
🚨 CVE-2026-20131 | Cisco FMC Critical RCE Unauthenticated Remote Code Execution in Cisco Secure Firewall Management Center 📌 Overview A critical pre-authentication Java deserialization vulnerability allowing remote attackers to achieve root-level code execution on Cisco FMC appliances. Key...
CVE-2022-22963
CVE-2022-22963 CVE-2022-22963 Spring-Cloud-Function-SpELRCE Vulnerability Reproduction Requires Docker environment Method 1 to start the vulnerable environment git clone https://github.com/RanDengShiFu/CVE-2022-22963.git;cd CVE-2022-22963;bash Start.sh Method 2 to start the vulnerable environment...
Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment
CVE-2025-31324 Zero-Day SAP Vulnerability & Compromise Assessment Tool Joint Release by Onapsis & Mandiant Onapsis and Mandiant have collaborated to release an open-source tool to assist SAP customers in identifying potential compromise related to CVE-2025-31324 and CVE-2025-42999 , a critical...
CVE-2023-46604_ActiveMQ_RCE_Recurrence
Enter activemq/bin, select x64 or x32, and run activemq.bin with administrator privileges. Access admin at port 8161, admin/admin If it cannot be started, check whether the port is occupied and modify activemq.xml in conf. In my machine, the MQTT port was occupied, so I modified it. 2. Start an...
CVE-2023-33246
CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool introduces a...
cve-2014-7911-exp
cve-2014-7911-exp exploit for cve-2014-7911; android; java deserialization ;system privilege;ace; This exp refers to retme7's exp,but the rop chain is different. And the most important part is Chunk Spray. Hope it will help. environment device:nexus5 os version:Android4.4.4...
Poc_for_CVE-2025-24813
!/usr/bin/env python3 """ .----------------. .----------------. .----------------. | | | | | | | | \ | | | | .' | | | | | | | | | | / .' | | | | '. | | | | | | | | | | | | | | | \ . | | | |/ | | || | | ..' | '----------------' '----------------' '----------------' """ CVE-2025-24813 Vulnerability...
CVE-2017-10271
LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...
CVE-2022-34169
CVE-2022-34169 PoC A malleable PoC and solution for the SUpwn challenge from SUCTF 2025. Based on this issue from the original discoverer Felix Wilhelm and this blog post thanat0s. Tries not to rely as much on hard constants as the existing PoCs out there. If you want to deliver a different java...