OSS Vulnerabilities
60 vulnerabilities related to OSS
- PoC2026-08-25CVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization
- PoC2026-08-18CVE-2015-7501: Red Hat JBoss - Insecure Deserialization
- 2026-07-20FOSSBilling /system/string_render 命令执行漏洞（CVE-2026-28496）
- PoC2026-06-24CVE-2026-28496: FOSSBilling - Server-Side Template Injection
- PoC2026-03-25CVE-2023-3643: CAREL Boss Mini <= 1.4.0 - Local File Inclusion
- PoC2026-02-24CVE-2024-13325: Glossy WordPress - Reflected XSS
- PoC2026-01-24alibaba-bucket-listing: Alibaba Cloud OSS Bucket - Public Listing Enabled
- PoC2026-01-08jboss-jmx-console-unauth: JBoss JMX Console - Unauthenticated Access
- PoC2026-01-08cross-site-tracing-xss: Cross Site Tracing - Cross-Site Scripting
- 2025-10-17JBOSS Netty SMTP 未授权 命令注入漏洞
- 2025-10-17JBOSS Netty SMTP 未授权 命令注入漏洞
- 2025-09-01amtt-hiboss-server-ping-rce: Amtt hiboss Server Ping RCE
- PoC2025-08-01CVE-2010-1429: Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure
- PoC2025-08-01CVE-2014-4941: Cross RSS 1.7 - Local File Inclusion
- PoC2025-08-01CVE-2016-1000132: WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting
- PoC2025-08-01CVE-2017-12149: Jboss Application Server - Remote Code Execution
- PoC2025-08-01CVE-2017-4011: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting
- PoC2025-08-01CVE-2023-3521: FOSSBilling < 0.5.3 - Cross-Site Scripting
- PoC2025-08-01CVE-2024-3378: iboss Secure Web Gateway - Stored Cross-Site Scripting
- PoC2025-08-01CVE-2010-1871: JBoss CVE-2010-1871
- PoC2025-08-01CVE-2017-12149: Java/Jboss Deserialization [RCE]
- PoC2025-08-01CVE-2017-7504: JBoss 4.x JBossMQ JMS 反序列化漏洞
- PoC2025-08-01access-logoss-disabled: Access Logging for OSS Buckets - Disabled
- PoC2025-08-01oos-bucket-public-access: OSS Bucket Public Accessible
- PoC2025-08-01secure-transfeross-disabled: Secure Transfer for OSS Buckets - Disabled
- PoC2025-08-01jmx-default-password: JBoss JMX Console Weak Credential
- PoC2025-08-01jboss-xml-console-unauthorized: JBoss JMX Console Weak Credential Discovery
- PoC2025-08-01CVE-2023-30194: Prestashop posstaticfooter <= 1.0.0 - SQL Injection
- PoC2025-08-01jboss-jbpm-default-login: JBoss jBPM Administration Console Default Login - Detect
- PoC2025-08-01jmx-default-login: JBoss JMX Console Weak Credential Discovery
- PoC2025-08-01kong-manager-exposure: Kong Manager OSS/Admin - Exposure
- PoC2025-08-01jboss-seam-debug-page: Jboss Seam Debug Page Enabled
- PoC2025-08-01fossbilling-installer: FOSSBilling - Installation
- PoC2025-08-01jboss-web-service: JBoss Web Service Console - Detect
- PoC2025-08-01jexboss-backdoor: JexBoss - Remote Code Execution
- PoC2025-08-01cmseasy-crossall-sqli: CmsEasy crossall_act - SQL Injection
- PoC2025-08-01hiboss-rce: Hiboss - Remote Code Execution
- 2025-05-17Crossbeam 资源管理错误漏洞
- 2025-04-07（CVE-2025-2251）WildFly和JBoss EAP EJB远程调用反序列化漏洞导致远程代码执行
- 2025-01-10Cisco Crosswork Network Controller 跨站脚本漏洞
- 2024-08-19FOSSBilling CVE-2023-3521 跨站脚本漏洞
- 2024-07-25OSSN CVE-2020-10560 任意文件读取漏洞
- 2024-06-06Boss Mini CVE-2023-3643 文件包含漏洞
- 2024-02-22Contec CONPROSSYS HMI System chkFormula.php 命令注入漏洞
- 2024-02-22Contec CONPROSSYS HMI System chkFormula.php 命令注入漏洞
- 2023-12-27Red Hat EAP 7 安全漏洞(CVE-2023-3171)
- 2023-12-18Red Hat Infinispan 安全漏洞
- 2023-09-27Red Hat Undertow 安全漏洞
- 2023-07-13JBOSS EAP/AS Remoting Unified Invoker 远程代码执行漏洞
- 2022-09-23JBoss jmx-console控制台未授权访问
- 2021-07-12JBoss 4.x JBossMQ JMS 反序列化漏洞(CVE-2017-7504)
- 2021-07-12JBoss 5.x/6.x readonly-反序列化漏洞(CVE-2017-12149)
- 2021-01-19Jboss渗透测试工具jexboss存在后门
- 2021-01-19Jboss反序列化漏洞(CVE-2015-7501)
- 2021-01-19Jboss-反序列化漏洞
- 2018-11-01Apache HTTPD mod_jk 目录遍历漏洞(CVE-2018-11759)
- 2018-01-25Jboss EAP undertow AJP connector 路径遍历漏洞
- 2017-05-17mcafeenetwork_data_loss_prevention 跨站脚本攻击漏洞
- 2013-09-17JBoss EJBInvokerServlet 反序列化漏洞(CVE-2013-4810)
- 2008-10-10FOSS Gallery 'processFiles.php' 任意文件上传漏洞