CVE-2021-21341

CVE-2021-21341 XStream DoS XStream 공식 발표 CVE-2021-21341 취약점 CVE-2021-21341: XStream에서 서비스 거부Denial of Service가 발생할 수 있습니다. 영향을 받는 버전 1.4.15 이하의 모든 버전이 기본 설정 그대로 사용될 경우 영향을 받습니다. XStream의 보안 프레임워크를 최소 필수 유형으로 제한된 화이트리스트로 설정할 것을 권고한 조치를 따른 사용자는 영향을 받지 않습니다. 설명 역직렬화unmarshalling 시 처리되는 스트림에는 이전에 작성된...

Xstream-1.4.17

Xstream-1.4.17 （위 Xstream Demo 환경은 직접 구축했으며, 취약점 이용 환경은 JDK1.8u131 기준입니다. 현재 로컬 테스트 및 HTTP 원격 패킷 전송을 지원합니다.） XSTREAM=1.4.17 취약점 재현（CVE-2021-39141, CVE-2021-39144, CVE-2021-39150, CVE-2021-39152） 본 실험의 익스플로잇 POC는 제공하지 않으며, 재현 및 이용 효과만 보여드립니다. 악의적인 이용을 방지하기 위해 공식 사이트 POC만 제공합니다:...

marshalsec

Java Unmarshaller Security - データをコード実行に変える Log4Shell/CVE-2021-44228を探してここに来た場合は、攻撃ベクトルと影響を受けるJavaランタイムバージョンについて読むとよいでしょう: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ 論文 Chris Frohoff氏とGarbriel...

CVE-2021-21349

CVE-2021-21349 XStream SSRF XStream 공식 발표 CVE-2021-21349 취약점 CVE-2021-21349: XStream으로 언마샬링하면 서버 측 위조 요청Server-Side Forgery Request이 활성화되어 인트라넷 또는 로컬 호스트의 리소스를 참조하는 임의의 URL의 데이터 스트림에 접근할 수 있습니다. 영향을 받는 버전 기본 제공 버전을 사용하는 경우 1.4.15를 포함한 모든 버전이 영향을 받습니다. 최소 필수 유형으로 제한된 화이트리스트로 XStream의 보안 프레임워크를 설정하...

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259: XStream1.4.14는 역직렬화 시 로컬 호스트에서 임의 파일 삭제에 취약하며, 실행 중인 프로세스가 충분한 권한을 가지고 있는 경우에 해당합니다. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit: com.thoughtworks.xstream xstream 1.4.14 POC https://x-stream.github.io/CVE-2020-26259.html...

CVE-2020-26259

描述 XStream 在反序列化时容易受到本地主机上的任意文件删除攻击，只要执行进程具有足够的权限。 影响范围 Xstream \n" + " \n" + " \n" + " 0\n" + " \n" + " \n" + " \n" + " text/plain\n" + " \n" + " C:\Al1ex.txt\n" + " \n" + " \n" + " \n" + " \n" + " 0\n" + " \n" + " /jdk.nashorn.internal.objects...

GadgetProbe

Description You just found a Java deserialization bug, you ran all your ysoserial payloads, and.... you got nothing. What now? How can you debug or build a gadget chain if you're totally blind? Introducing GadgetProbe, a tool that shines a light on remote classpaths and raises bug severity for al...

CVE-2026-15560

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

CVE-2026-15560

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

CVE-2026-15555

Technical details about CVE-2026-15555 are not publicly available in the provided documents. Monitor for updates on affected components, root cause specifics, vulnerable versions, and remediation guidance.

PT-2026-70091

Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description When the software runs with the -secmgr flag, the JDKBridge component of openjdk-orb processes attacker-supplied CDR Common Data Representation codebase URLs...

UBUNTU-CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

BIT-ACTIVEMQ-2026-53917 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size value for the map. OpenWire message...

CVE-2026-53917

CVE-2026-53917 describes an unbounded memory allocation vulnerability in OpenWire property unmarshalling in Apache ActiveMQ and related builds. An authenticated user can send a crafted OpenWire Message with a very large encoded size value for a message property map, causing OpenWire maps to be un...

CVE-2026-53917 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size value for the map. OpenWire message...

CVE-2026-53917 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size value for the map. OpenWire message...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the YAML unmarshalling process of the io.docker.server.metadata OCI image label into the catalog.Server struct. An attacker can execute arbitrary code as root on the host system by crafting a malicious O...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the YAML unmarshalling process of the io.docker.server.metadata OCI image label into the catalog.Server struct. An attacker can execute arbitrary code as root on the host system by crafting a malicious O...

CVE-2026-44066

Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive information or cause a minor service disruption...