16066 matches found
serialator
serialator Python script to exploit CVE-2015-4852. Description During a recent engagement, I found that Nessus was now actively exploiting vulnerabilities for confirmation. When I checked the associated nasl script I found that the payload was generic enough to be used on a standalone script...
JavaUnserializeExploits
JavaUnserializeExploits Python scripts and HTTP request referenced in the blog post What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...
WebSphere-WSIF-gadget
WSIF Gadget for WebSphere CVE-2020-4464 / CVE-2020-4450 This is based on the excellent blog posts of ZDI original report by @tint0: https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere...
Security Bulletin: IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities due to RESTEasy and Apache CXF
Summary There are mulitple vulnerabilities in the RESTEasy and Apache CXF library that affect IBM WebSphere Application Server Liberty with the restfulWS-3.0, restfulWS-3.1, restfulWS-4.0, jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0 or xmlWS-4.0 enabled. Vulnerability Details CVEID:CVE-2026-108039...
IBM WebSphere Java Object Deserialization - Remote Code Execution
IBM Websphere Application Server 7, 8, and 8.5 have a deserialization vulnerability in the SOAP Connector port 8880 by default. id: CVE-2015-7450 info: name: IBM WebSphere Java Object Deserialization - Remote Code Execution author: wdahlenb severity: critical description: IBM Websphere Applicatio...
IBM WebSphere Application Server 8.5.x < 8.5.5.32 / 9.x < 9.0.5.30 (7295372)
The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7295372 advisory. - Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an...
IBM WebSphere eXtreme Scale 8.6.1.0 <= 8.6.2.2 Multiple Vulnerabilities (7293764)
The version of IBM WebSphere eXtreme Scale installed on the remote host is 8.6.1.0 through 8.6.2.2. Its Liberty deployment is, therefore, affected by multiple vulnerabilities as referenced in the 7293764 advisory. - IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker...
IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.2.2 XSS (7293764)
The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.2.2 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7293764 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements fro...
IBM WebSphere Application Server 9.x < 9.0.5.30 (7292227)
The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7292227 advisory. - js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.j...
CVE-2016-5983
CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...
Security Bulletin: IBM WebSphere Application Server Liberty, bundled with IBM WebSphere Hybrid Edition, is affected by multiple vulnerabilities
Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by multiple vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...
Security Bulletin: IBM i is Affected by Multiple Vulnerabilities in WebSphere Application Server Liberty
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-14532, CVE-2026-79715, CVE-2026-93879, CVE-2026-91865, CVE-2026-91863, CVE-2026-91864, CVE-2026-89058, CVE-2026-89059, CVE-2026-108039, CVE-2026-107937, CVE-2026-10844, CVE-2026-11547, CVE-2026-78636, CVE-2026-103320, CVE-2026-10828...
Security Bulletin: Updating IBM WebSphere Liberty Profile in Identity Insight for security update
Summary Identity Insight customers are advised to update IBM WebSphere Liberty Profile WLP to version 26.0.0.11 for security update in WLP. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-93895 DESCRIPTION: IBM WebSphere Application Server - Liberty 20.0.0.12...
CVE-2026-78636
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser...
CVE-2026-78636 IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser...
CVE-2026-78636
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected by an information disclosure vulnerability (CVE-2026-78636 ). The root cause is unsafe class reflection within the JMX REST connector body parser (CWE-470). This flaw could allow an attacker to disclose info...
EUVD-2026-119725
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser...