CVE-2021-44228

CVE-2021-44228 Penso che questa storia sia più pratica piantochristophetd/log4shell-vulnerable-app Poiché ho indagato solo per interesse e d'impulso, ritengo che ci possano essere parti vaghe o errori. Per favore, procedete a vostro rischio e pericolo. Creare l'ambiente di riproduzione. Dovrebbe...

Weblogic-CVE-2020-2551-To-Internet

Weblogic-CVE-2020-2551-To-Internet POC per CVE-2020-2551 da utilizzare su Internet POC di test utilizzabile per test su Internet python CVE-2020-2551.py HOST IP Tentativo di modifica del codebase per il caricamento remoto delle classi fallito python CVE-2020-TEST.py HOST IP Breve discussione sull...

java-remote-class-loader

Questo strumento ti permette di inviare bytecode Java sotto forma di file class ai tuoi client o potenziali obiettivi da caricare ed eseguire utilizzando Java ClassLoader insieme all'API Reflect. Il client riceve il file class dal server e restituisce il rispettivo output di esecuzione. I payload...

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF से RCE Jar एक्सप्लॉइट Component लिंक https://github.com/apache/xmlgraphics-batik ब्लॉग https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading उपयोग कमांड बदलने के लिए...

parquet-rce-poc-CVE-2025-30065

CVE-2025-30065 Questo repository illustra come sfruttare CVE-2025-30065 e ottenere l'istanziazione remota di classi e attivare una richiesta di rete dall'interno dell'applicazione vittima, cioè la JVM, ottenendo così SSRF. Il parquet generato in Malicious.java presuppone che la classe...

yaml-payload

yaml-payload Un payload di deserializzazione SnakeYAML per CVE-2022-1471 , adattato da artsploit/yaml-payload basato originariamente su mbechler/marshalsec. Cosa fa Quando caricato tramite l'uso non sicuro di Yaml.load di SnakeYAML, questo payload prende il controllo dell'applicazione in esecuzio...

CVE-2026-16723

🚨 CVE-2026-16723 — RCE über die @JSONType-Ressourcen-Erkennungskette in fastjson 1.2.83 Reproduktionsprojekt für Remote-Klassenladen / Befehlsausführung RCE bei fastjson 1.2.66 1.2.83 über@JSONType-Annotation + ungültigen Klassennamen + jar:-Protokoll. ⚠️ Haftungsausschluss Dieses Projekt dient...

openjdk-orb: unauthed class loading via IIOP in EAP

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

CVE-2026-15560

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

CVE-2026-50188

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins using the Kirby Http Remote class, including Remote::request, Remote::get, and Remote::post, to send outgoing HTTP requests with untrusted data in the headers option could allow newline characters...

CVE-2026-50188 Kirby: Request header injection in `Http\Remote`

Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites and plugins using the Kirby Http Remote class, including Remote::request, Remote::get, and Remote::post, to send outgoing HTTP requests with untrusted data in the headers option could allow newline characters...

GHSA-4V4H-M2QQ-PPGW Kirby: Request header injection in `Http\Remote`

TL;DR This vulnerability affects Kirby sites and plugins that use the Kirby\Http\Remote class including Remote::request, Remote::get, Remote::post, and similar helpers to send outgoing HTTP requests and that pass untrusted, user-controlled data into the headers option of such a request. By...

Kirby: Request header injection in `Http\Remote`

TL;DR This vulnerability affects Kirby sites and plugins that use the Kirby\Http\Remote class including Remote::request, Remote::get, Remote::post, and similar helpers to send outgoing HTTP requests and that pass untrusted, user-controlled data into the headers option of such a request. By...

EUVD-2026-25936

An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the attacker determining the secret and uploading changed classes, thereby achieving remote code executio...

Security update for c3p0 and mchange-commons

This update for c3p0 and mchange-commons fixes the following issues: c3p0: Security issues fixed: CVE-2026-27830: Fixed unsafe object deserialization bsc1258942 Fix the null pointer exception in the userOverridesAsString method bsc1259313. mchange-commons: Security issues fixed: CVE-2026-27727:...

Exploit for Deserialization of Untrusted Data in Apache Parquet_Java

CVE-2025-30065 This repository illustrates how to exploit CVE...

Arbitrary Command Execution

org.jupiter-rpc:jupiter-serialization-kryo is vulnerable to Arbitrary Command Execution. The vulnerability is due to improper configuration which allows remote class loading. The deserialization vulnerability allows an attacker to execute arbitrary commands via crafted RPC requests...

Medium: java-1.8.0-amazon-corretto

Issue Overview: Improve CORBA communication: CORBA deserialization can result in outbound network connections with data passed in. CVE-2023-21830 Better Banking of Sounds: JARSoundbankReader can load classes from remote URLs. CVE-2023-21843 Affected Packages: java-1.8.0-amazon-corretto Note: This...

h2: Loading of custom classes from remote servers through JNDI

A flaw was found in the H2 Console. This flaw allows remote attackers to execute arbitrary code via a JDBC URL, concatenating with a substring that allows remote code execution by using a script...

VulnCheck KEV: CVE-2014-0114

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute...