9 matches found
CVE-2026-67228
A flaw was found in RabbitMQ. An authorized policymaker can exploit this vulnerability by issuing a large number of requests with distinct component values to the runtime-parameters lookup path. This action coerces attacker-supplied strings into new atoms, eventually exhausting the Erlang atom...
ParrotSec-Linux-Hardening-Project
ParrotSec Linux - Public Kiosk Project Designing & Implementing A restricted & Trustworthy Environment Hardened kernel root@kitploit: - GrSecurity Patched Kernel - PaX Hardening - x PaXctl - x PaXTest - x PaXctld - x Hardened Kernel Runtime Parameters root@kitploit: - x Kernel Self Protection...
CVE-2026-67228
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbitdatacoercion:toatom/1 in lookupcomponent/1 deps/rabbit/src/rabbitruntimeparameters.erl, creating a new atom for any previous...
CVE-2026-67228 RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, The runtime-parameters lookup path coerces the URL :component segment to an atom with rabbitdatacoercion:toatom/1 in lookupcomponent/1 deps/rabbit/src/rabbitruntimeparameters.erl, creating a new atom for any previous...
CVE-2026-67228
RabbitMQ versions prior to 4.2.7 and 4.3.1 are vulnerable to an atom exhaustion attack in the runtime-parameters lookup path. The lookup_component/1 function in deps/rabbit/src/rabbit_runtime_parameters.erl incorrectly uses rabbit_data_coercion:to_atom/1 to process the :component segment of a req...
JNDI Injection
Apache CXF is vulnerable to JNDI Injection. The vulnerability is due to insufficient validation of JCA deployment descriptor ra.xml or runtime activation parameters, which allows an attacker who can manipulate these inputs to inject malicious JNDI references and potentially execute arbitrary code...
Elevation of Privilege Vulnerability in Tianrongxin Endpoint Threat Prevention System
Tianrongxin Terminal Threat Defense System is a set of computer active defense software developed by Tianrongxin. A privilege elevation vulnerability exists in Tianrongxin Terminal Threat Defense System. An attacker can exploit the vulnerability to view the runtime parameters...
JetBrains TeamCity Information Disclosure Vulnerability (CNVD-2019-39172)
TeamCity is a Java-based build management and continuous integration server from JetBrains. An information disclosure vulnerability exists in JetBrains TeamCity versions prior to 2019.1.2. An attacker can exploit the vulnerability to "view build runtime parameters and data"...