Back Sploitus

jboss-_CVE-2017

Sploitus • September 18, 2026

`verify_CVE-2017-12149.jar` предоставляет возможность проверки уязвимости в режиме командной строки. Если уязвимость существует, возвращается характерная строка. Достаточно выполнить команду:

$ java -jar verify_CVE-2017-12149.jar

![截图2](

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploits for CVE-2024-21006 and CVE-2017-12149 Released Two exploits have been released targeting vulnerabilities CVE-2024-21006 and CVE-2017-12149. CVE-2024-21006, published on April 16, 2024, has a proof-of-concept (PoC) available since July 2, 2024, and is packaged as a JAR file for ease of use. The exploit allows attackers to execute arbitrary code, potentially affecting a wide range of Java applications. Meanwhile, CVE-2017-12149 is a vulnerability in JBoss that can be verified using a command-line tool also packaged as a JAR file. The existence of these exploits raises concerns for organizations using affected systems, as they may be at risk of exploitation if not patched. Current status indicates that both vulnerabilities are known, but the extent of active exploitation remains unclear. 3 sources 54

Extracted Entities

jboss-_CVE-2017

The full story

Extracted Entities

MD5 Hashes (1)

Platforms (2)

Tools (1)