CVE-2023-34040

CVE-2023-34040 Spring Kafka 역직렬화 원격 코드 실행 root@kitploit: POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36 Accept:...

CVE-2025-27817

Отказ от ответственности: Уязвимости и шаги по их воспроизведению, описанные в этой статье, предназначены исключительно для целей исследования в области сетевой безопасности и образования. Никто не имеет права использовать информацию, представленную в этой статье, в незаконных целях или для...

kafka-keycloak-oauth

Apache Kafka 4.1.0 + Keycloak OAuth2 認証 Keycloak 26.1.1 OAuth2/OIDC 認証を備えた本番環境対応の Apache Kafka 4.1.0（KRaft モード）。Strimzi Kafka イメージを使用。 このプロジェクトが kafka-oauth-keycloak-tls-demo より優れている理由 これは以前の POC を大幅に改善した進化版 です： Strimzi OAuth 0.17.0 （旧 1.0.0 から変更）- Strimzi Kafka 0.48.0 イメージに同梱された安定版 カスタム Docker...

CVE-2026-59278

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

CVE-2026-59278 In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

EUVD-2026-66850

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

CVE-2026-59278

Spring for Apache Kafka is vulnerable to SSRF via DNS resolution in its JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper classes. Because java.net is included in the default trusted packages list, an external Kafka producer can inject a java.net.InetAddress type through the spring_json_header_t...

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

cve-2023-25194

Apache Druid CVE-2023-25194 CVE-2023-25194 एक डिसीरियलाइज़ेशन कमजोरी है जो Apache Kafka को प्रभावित करती है। यह go-exploit Apache Druid Kafka का उपयोग करके के विरुद्ध CVE-2023-25194 का शोषण प्रदर्शित करता है। इस प्रकार के हमले के लिए आमतौर पर LDAP JNDI हमलावर बुनियादी ढांचे की आवश्यकता होती है जो...

cve-2023-34040

CVE-2023-34040 Spring Kafka 反序列化远程代码执行 root@kitploit: POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36 Accept:...

CVE-2023-34040

CVE-2023-34040 Questa PoC è un clone di https://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040 Per il nostro processo di analisi, fare riferimento al file PDF nella repository principale...

CVE-2026-49098

CVE-2026-49098 — camel-kafka: iniezione di intestazione kafka.OVERRIDETOPIC Riproduttori proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime:...

Spring-Kafka-POC-CVE-2023-34040

Spring Kafka Deserialization POC Voraussetzungen Java 11 Maven Docker oder Kafka Verwendung Starten Sie zuerst die Dockerisierte Kafka-Instanz. Dadurch wird Kafka gestartet und auf Port 29092 verfügbar gemacht. root@kitploit: docker-compose up Starten Sie die Consumer-Anwendung. root@kitploit: cd...

Apache Druid Kafka Connect - Remote Code Execution

The vulnerability has the potential to enable a remote attacker with authentication to run any code on the system. This is due to unsafe deserialization that occurs during the configuration of the connector through the Kafka Connect REST API id: CVE-2023-25194 info: name: Apache Druid Kafka Conne...

Kafka UI 0.7.1 Command Injection

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. id: CVE-2023-52251 info: name: Kafka UI 0.7.1 Command Injection author: yhy0,iamnoooob severity: high description: | An...

kroxylicious-pqc-filter

Kroxylicious Filtro di Crittografia dei Record PQC Un plugin filtro per Kroxylicious che fornisce una trasparente crittografia a livello di record con Crittografia Post-Quantum PQC per Apache Kafka utilizzando ML-KEM FIPS 203 key encapsulation con crittografia simmetrica AES-256-GCM. I produttori...

kcatcher

Scova ciò che si nasconde nei tuoi cluster Kafka. Introduzione Kcatcher è un'utility a riga di comando per enumerare e valutare le configurazioni dei cluster Kafka. Si connette ai cluster Apache Kafka e recupera informazioni dettagliate su broker, topic, ACL e persino messaggi di esempio. Perfett...

CVE-2026-78166

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

EUVD-2026-64686

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in cod...

CVE-2026-78166

A code injection vulnerability was identified in provectus kafka-ui (up to 0.7.2), affecting the Groovy Code Handler component. Specifically, the executeSmartFilterTest function in MessagesController.java can be exploited remotely to inject and execute arbitrary code. The exploit has been release...