8 matches found
parquet-rce-poc-CVE-2025-30065
CVE-2025-30065 Este repositorio ilustra cómo explotar CVE-2025-30065 y lograr la instanciación remota de clases y activar una solicitud de red desde dentro de la aplicación víctima, es decir, la JVM, logrando así SSRF. El parquet generado en Malicious.java asume que la clase RCEPayload.java está...
CVE-2025-30065
💥 CVE-2025-30065 - PoC de Deserialización de Parquet Este proyecto demuestra una prueba de concepto segura para CVE-2025-30065 utilizando Apache Parquet y deserialización Java. Cuando se lee un archivo Parquet que contiene un objeto Java serializado, el payload ejecuta un comando visible para...
CVE-2025-30065-PoC
CVE-2025-30065 PoC Uso Construir la imagen docker build -t cve-2025-30065 . Generar el Parquet malicioso docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Ejecutar el exploit docker run --rm -v $pwd:/poc/out cve-2025-30065 trigger...
CVE-2026-73334
A flaw was found in Apache Parquet Hadoop. When processing a Parquet file, if the Key Management Service KMS Uniform Resource Locator URL is controlled by the file and not explicitly set by the application, a vulnerability can arise. An attacker could craft a malicious Parquet file to direct a KM...
CVE-2026-42241 ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width
ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an attacker-supplied value. If an attacker declares a decimal column with some unreasonable width, this...
GHSA-MW35-8RX3-XF9R Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
Ray Data registers custom Arrow extension types ray.data.arrowtensor, ray.data.arrowtensorv2, ray.data.arrowvariableshapedtensor globally in PyArrow. When PyArrow reads a Parquet file containing one of these extension types, it calls arrowextdeserialize on the field's metadata bytes. Ray's...
GHSA-53WX-PR6Q-M3J5 Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...
