13883 matches found
JavaUnserializeExploits
JavaUnserializeExploits 博客文章《WebLogic、WebSphere、JBoss、Jenkins、OpenNMS 和你的应用程序有什么共同点？这个漏洞》中引用的 Python 脚本和 HTTP 请求，文章位于 http://foxglovesecurity.com...
WebSphere-WSIF-gadget
WSIF Gadget for WebSphere CVE-2020-4464 / CVE-2020-4450 这是基于 ZDI 的优秀博客文章（最初由 @tint0 报告）： https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere https://www.zerodayinitiative.com/blog/2020/9/29/exploiting-other-remote-protocols-in-ibm-websphere...
CVE-2016-5983
CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...
IBM WebSphere Java Object Deserialization - Remote Code Execution
IBM Websphere Application Server 7, 8, and 8.5 have a deserialization vulnerability in the SOAP Connector port 8880 by default. id: CVE-2015-7450 info: name: IBM WebSphere Java Object Deserialization - Remote Code Execution author: wdahlenb severity: critical description: IBM Websphere Applicatio...
CVE-2026-11722
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11711
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...
CVE-2026-11710
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-11539
IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...
CVE-2026-11540
IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
CVE-2026-11545
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
CVE-2026-11548
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11538
IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...
EUVD-2026-83290
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11722
CVE-2026-11722 is an HTTP request smuggling vulnerability (CWE-444) affecting IBM WebSphere Application Server (versions 8.5 and 9.0) and WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.8). The vulnerability requires no authentication and has high attack complexity, with lo...
CVE-2026-11722 Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
EUVD-2026-83288
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...
CVE-2026-11711
IBM WebSphere Application Server versions 9.0 and 8.5 are affected by a deserialization vulnerability in the Name Service component , rated CVSS 6.5 (Medium) with an attack vector of adjacent network, no required privileges, and high availability impact. The vulnerability is fixed in 9.0.5.29 and...
CVE-2026-11711 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...
EUVD-2026-83287
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-11710 IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...