CVE-2022-21449 PoC — Oracle Java SE 输入验证错误漏洞

Source

https://github.com/HeyMrSalt/AIS3-2024-Project-D5Team

Associated Vulnerability

Title:Oracle Java SE 输入验证错误漏洞 (CVE-2022-21449)
Description:Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。 Oracle Java SE 中存在输入验证错误漏洞，该漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而破坏 Oracle Java SE、Oracle GraalVM 企业版。成功攻击此漏洞可能导致对关键数据或所有 Oracle Java SE、Oracle GraalVM 企业版可访问数据的未经授权的创建、删除或修改访问。

Description

Reappear-CVE-2022-21449-TLS-PoC

Readme

# AIS3-2024-Project-D5Team
Reappear-CVE-2022-21449-TLS-PoC



Refer : \
[1] https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/ \
[2] https://github.com/notkmhn/CVE-2022-21449-TLS-PoC \
[3] https://ithelp.ithome.com.tw/articles/10304518 \
[4] https://nvd.nist.gov/vuln/detail/CVE-2022-21449 \
[5] https://jfrog.com/blog/cve-2022-21449-psychic-signatures-analyzing-the-new-java-crypto-vulnerability/ \
[6] https://developer.aliyun.com/article/1028316 \
[7] [https://www.youtube.com/watch?](https://www.youtube.com/watch?v=RdYJrViBXBg&ab_channel=%E8%82%B2%E6%AD%A3%E8%91%9B%E8%91%9B%E7%9A%84%E8%B3%87%E5%AE%89%E9%81%8A%E6%A8%82%E5%A0%B4)

File Snapshot


 [4.0K]  /data/pocs/a5d92d97a065554a6a89424aa7b5e3af17cec614
├── [ 11K]  LICENSE
└── [ 647]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!