CVE-2023-34212

CVE-2023-34212: Apache NiFi中通过JNDI组件的Java反序列化 在Apache NiFi 1.8.0至1.21.0版本中，JndiJmsConnectionFactoryProvider控制器服务以及ConsumeJMS和PublishJMS处理器允许经过身份验证和授权的用户配置URL和库属性，从而能够从远程位置反序列化不可信数据。 厂商披露： 该漏洞的厂商披露和修复可以在此处找到。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详情和利用过程可在此PDF中找到。 附加资源： 感谢奇安信TI中心的Veraxy00 与我同时发现并报告了该漏洞。...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

利用CVE-2015-5254漏洞 CVE-2015-5254漏洞是Apache ActiveMQ中的一个安全缺陷，ActiveMQ是一个广泛用于应用程序间通信的开源消息服务器。该漏洞影响ActiveMQ至5.13.0版本，其根源在于对发送的JMS ObjectMessage输入数据缺乏过滤。 网络扫描： nmap -p 61616 -Pn -T5 -n -sC -sV 172.17.0.1 通过其下载的docker文件夹启动ActiveMQ 2015： 我们检查ActiveMQ的版本： 它是5.11.1版本 漏洞利用： 对于这个漏洞，我们将使用以下命令： java -jar...

CVE-2026-91048

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

log4shell_1.x

Log4jShell1.x Log4j RCE 1.x Poc Attack Restriction 1. The target has jms environment 2. You need to gain access to modify the log4j.properties file Conclusion Not as useful as log4shell 2.x Log4shell Topic https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Welcome to contribute in reapoc...

CVE-2026-91048

Apache Karaf is vulnerable to privilege escalation to remote code execution (RCE) due to missing authorization on the jdbc: i: and jms: i: shell command scopes. Because the SecuredSessionFactoryImpl command guard treats commands with no matching ACL rule as allowed, an authenticated shell session...

CVE-2026-91048 Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

EUVD-2026-88661

The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...

CVE-2026-67413

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

ActiveMQ_CVE-2015-5254

ActiveMQ反序列化（CVE-2015-5254） 漏洞描述：Apache ActiveMQ 5.13.0之前5.x版本中存在安全漏洞，该漏洞源于程序没有限制可在代理中序列化的类。远程攻击者可借助特制的序列化的Java Message ServiceJMSObjectMessage对象利用该漏洞执行任意代码。 影响版本：Apache ActiveMQ 5.13.0之前的5.x版本 0x01 登陆后台确定版本： http://IP:8161 0x02 确定61616端口开放： nmap -sV -Pn -T4 -sC -p 61616 IP 0x03 发送反弹payload： java...

CVE-2026-40860

camel-jms JMS ObjectMessage 不安全反序列化复现工具 CVE-2026-40860 本项目演示了 Apache Camel 的 camel-jms 组件中存在的 Java 反序列化漏洞 （并间接影响 camel-sjms、camel-sjms2、camel-amqp、camel-activemq、camel-activemq6），该漏洞被跟踪为 CVE-2026-40860 。JmsBinding.extractBodyFromJms 方法在处理传入的 JMS ObjectMessage 时，通过 ObjectMessage.getObject...

CVE-2026-43866

camel-jms: Reproductor de omisión de filtro con DefaultExchangeHolder forjado CVE-2026-43866 Este proyecto demuestra la CVE-2026-43866 , una omisión bypass de la corrección de la CVE-2026-40860 en los componentes camel-jms y camel-sjms / familia JMS de Apache Camel. La CVE-2026-40860 añadió una...

CVE-2026-40453

Reproducción de Inyección de Encabezados Camel con Variantes de Mayúsculas CVE-2026-40453 Este proyecto demuestra CVE-2026-40453 — una corrección incompleta para CVE-2025-27636. La corrección de 2025 agregó setLowerCasetrue a HttpHeaderFilterStrategy para que los nombres de encabezado con variant...

log4j-CVE-2021-4104

250005e035c957e6d8b6faf6f55b45a665a14263...

apache__activemq_CVE-2014-3576_5-10-1

Bienvenido a Apache ActiveMQ Apache ActiveMQ es un Message Broker de alto rendimiento bajo licencia Apache 2.0 e implementación de JMS 1.1. Primeros pasos Para ayudarte a comenzar, prueba los siguientes enlaces: Primeros pasos http://activemq.apache.org/version-5-getting-started.html Compilación...

apache__activemq_CVE-2019-0222_5-15-8

Bienvenido a Apache ActiveMQ Apache ActiveMQ es un Message Broker de alto rendimiento bajo licencia Apache 2.0 y una implementación de JMS 1.1. Primeros pasos Para ayudarte a comenzar, prueba los siguientes enlaces: Primeros pasos http://activemq.apache.org/version-5-getting-started.html...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

CVE-2017-7504-poc

JBoss 4.x JBossMQ JMS反序列化漏洞poc -h 查看使用方法...

CVE-2026-67413

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...

CVE-2026-67413 RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic exchange accepted a client-controlled rjmserlangselector binding expression whose LIKE evaluator expanded percent and underscore wildcards in...