ActiveMQ_CVE-2015-5254

ActiveMQ反序列化 CVE-2015-5254 Описание уязвимости: В Apache ActiveMQ версий 5.x до 5.13.0 существует уязвимость безопасности, вызванная тем, что программа не ограничивает классы, которые могут быть сериализованы в брокере. Удаленный злоумышленник может выполнить произвольный код с помощью специально...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation-de-la-vuln-rabilit-CVE-2015-5254- La vulnérabilité CVE-2015-5254 est une faille de sécurité dans Apache ActiveMQ, un serveur de messages open source largement utilisé pour la communication entre applications. Cette vulnérabilité touche les versions d'ActiveMQ jusqu'à 5.13.0 et réside...

CVE-2017-7504-poc

JBoss 4.x JBossMQ JMS Vulnérabilité de désérialisation PoC -h afficher l'aide...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

log4shell_1.x

Log4jShell1.x Log4j RCE 1.x Poc Attaque Restriction 1. La cible possède un environnement jms 2. Vous devez avoir accès pour modifier le fichier log4j.properties Conclusion Pas aussi utile que log4shell 2.x Sujet Log4shell https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Bienvenue pour...

BIT-RABBITMQ-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

BIT-RABBITMQ-2026-67220 RabbitMQ: JMS topic exchange erl_scan atom exhaustion

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, addbinding/3 reads the rjmserlangselector argument and passes it through erlscan:string/1 then erlparse:parseterm/1. erlscan:string/1 intern...

CVE-2023-34212

CVE-2023-34212: Десериализация Java через компоненты JNDI в Apache NiFi Сервис контроллера JndiJmsConnectionFactoryProvider вместе с процессорами ConsumeJMS и PublishJMS в Apache NiFi с версии 1.8.0 по 1.21.0 позволяют аутентифицированному и авторизованному пользователю настраивать свойства URL и...

CVE-2026-91048

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-91048 Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-91048

Apache Karaf is vulnerable to a privilege escalation to Remote Code Execution (RCE) due to missing authorization on the jdbc: and jms: shell command scopes. The system's command guard (SecuredSessionFactoryImpl ) treats commands without a matching ACL rule as allowed because the required configur...

EUVD-2026-88661

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-91048 Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-91048: Missing Authorization

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

PT-2026-102462

Name of the Vulnerable Software and Affected Versions Apache Karaf affected versions not specified Description Missing authorization in the jdbc and jms shell command scopes allows authenticated users, including those with only the viewer role, to execute any jdbc: and jms: commands. This occurs...

CVE-2026-40860

camel-jms JMS ObjectMessage Désérialisation non sécurisée - Reproducteur CVE-2026-40860 Ce projet démontre une vulnérabilité de désérialisation Java dans le composant camel-jms d'Apache Camel et transitivement dans camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6, référencée...

CVE-2026-43866

camel-jms Forged DefaultExchangeHolder : reproducteur de contournement de filtre CVE-2026-43866 Ce projet démontre CVE-2026-43866 , un contournement du correctif de CVE-2026-40860 dans les composants Apache Camel camel-jms et camel-sjms / famille JMS. CVE-2026-40860 a ajouté une liste blanche de...

CVE-2026-40453

Репродуктор инъекции заголовков Camel с вариантом регистра CVE-2026-40453 Этот проект демонстрирует CVE-2026-40453 — неполное исправление для CVE-2025-27636. Исправление 2025 года добавило setLowerCasetrue в HttpHeaderFilterStrategy, чтобы имена заголовков с вариантом регистра например,...

log4j-CVE-2021-4104

250005e035c957e6d8b6faf6f55b45a665a14263...

apache__activemq_CVE-2014-3576_5-10-1

Bienvenue sur Apache ActiveMQ Apache ActiveMQ est un courtier de messages haute performance sous licence Apache 2.0 et une implémentation de JMS 1.1. Pour commencer Pour vous aider à démarrer, essayez les liens suivants : Pour commencer http://activemq.apache.org/version-5-getting-started.html...