1341 matches found
Lucky-Spark
LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ is a stager designed for shellcode payloads staged with http/https like sliver or on github raw. It uses modern obfuscation and evaion methods like sliding window just-in-time decryption of the payload and cpu instruction patching. By default it creates an executable...
SparkAltBatteryBoard
SparkAltBatteryBoard A custom research-oriented battery interface and telemetry board for the DJI Spark platform, built around a standard 3S LiPo battery pack instead of the discontinued, hard-to-find OEM Smart Battery. This project documents a reverse-engineered I2C/SMBus smart-battery...
perwendel__spark_CVE-2016-9177_2-5-1
Spark - a tiny web framework for Java 8 Spark 2.9.4 is out!! com.sparkjava spark-core 2.9.4 Sponsor the project here https://github.com/sponsors/perwendel For documentation please go to: http://sparkjava.com/documentation For usage questions, please use stack overflow with the “spark-java” tag...
GHSA-642R-3GJ9-2PJ5 vulnerabilities
Vulnerabilities for packages: zaproxy, kafbat-ui, cass-config-builder-fips, infinispan, logstash, wso2is, apache-hop, cassandra-fips, druid, ontop, tez, conductor, strimzi-kafka-operator, trino, conductor-fips, keycloak-fips, s3proxy-fips, elasticsearch, neo4j, pinot-fips, spdx-tools-java,...
GHSA-642R-3GJ9-2PJ5 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak, apache-nifi, wildfly, cass-config-builder, strimzi-kafka-operator, trino, sonarqube, scala, spdx-tools-java, infinispan, druid, apache-nifi-registry, apache-tika, spark, tez, apicurio-registry, gradle, opensearch, flyway, akhq,...
CVE-2026-68494 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak, apache-nifi, wildfly, cass-config-builder, strimzi-kafka-operator, trino, sonarqube, scala, spdx-tools-java, infinispan, druid, apache-nifi-registry, apache-tika, spark, tez, apicurio-registry, gradle, opensearch, flyway, akhq,...
Apache-spark-CVE-2022-33891
Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...
CVE-2018-11770
CVE-2018-11770 Apache Spark Unauthenticated Reverse Shell RCE Standalone Python 3 RCE exploit for Apache Spark rewritten from this Metasploit module Exploit POC explained here. The exploit code itself is explained here. Tested with Python 3.7 on this target. Usage:...
CVE-2022-33891
「💥」CVE-2022-33891 Description The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...
HELK
HELK The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was...
Apache Spark UI - Cross-Site Scripting
Apache Spark UI before 2.3.2 is vulnerable to XSS via unsanitized query string parameters in the /jobs/ endpoint. id: CVE-2018-8024 info: name: Apache Spark UI - Cross-Site Scripting author: ritikchaddha severity: medium description: | Apache Spark UI before 2.3.2 is vulnerable to XSS via...
Apache Spark - Authentication Bypass
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...
lab_security_apache_spark_emulation_detection
This repository does not have a README...
project_bias
projectbias A high-performance, bias-free cryptographic stream engine written in Ada and formally verified with SPARK. The engine guarantees zero statistical bias when mapping raw entropy into custom alphabets by discarding modulo-biased values, drawing security bytes directly from native OS kern...
spark-exploit
Arbitary Code Execution in Unsecured Apache Spark Cluster How to Exploit Follow the below steps: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit Remote Code Execution Open exploit.scala, Replace the following code with whatever you want to get executed! val exploit =...
cve-2022-33891
CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...
cve-2022-33891-fix
EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023 Tópico: CVE-2022-33891 Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL Alunos Elinilson Vital Leoarndo Bozzetto CVE-2022-33891 Patch Instructions for Ubuntu 22.04 Prerequisites Ubuntu 22.04...
CVE-2022-33891-EXPLOIT
CVE-2022-33891 - Apache Spark UI Remote Code Execution RCE 🔐 Apache Spark UI is susceptible to a remote command injection vulnerability identified as CVE-2022-33891. This flaw arises due to improper handling of user authentication and access control, specifically when Access Control Lists ACLs ar...
cve-2022-33891
CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...