apche-struts-vuln-demo-cve-2018-11776

Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: aws cloudformation create-stack \ --template-body...

log4j2_CVE-2021-44228

log4j2 Environment Test Usage, Assume Personal Responsibility for Issues My test environment is Java 17. If needed, you can modify and re-import the project yourself. After starting the environment, the address is: http://127.0.0.1:8006/test...

CVE-2026-44788

CVE-2026-44788 Test...

CVE-2018-1235

CVE-2018-1235 A python script that tests for an exploitable instance of CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Usage: ./CVE-2018-1235.py -t Target Host -r Your IP This code may be altered to actively exploit the vulnerability. Support for network scopes may be added...

cve-2020-27955

this is cve-2020-27955 test...

CVE-2018-17456

CVE-2018-17456 test...

can-ctr-escape-cve-2022-0492

Una imagen de contenedor que prueba si un entorno de contenedor es vulnerable a escapes mediante CVE-2022-0492. Es mejor ejecutarlo en un contenedor nuevo que ejecute una imagen construida con: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest . Una imagen...

duckdb

Jepsen DuckDB Test Jepsen tests for the DucKDB database. Runs locally, rather than on a remote cluster. The test spawns a collection of local processes which open a DuckDB file locally, and interacts with them over STDIN/STDOUT. This is an early prototype. It turns on, runs transactions, checks...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...

SkeletonKey

CVE-2026-6765 · FormAutofill test-only handlers reachable outside automation Reporter credited by Mozilla in MFSA 2026-30 : Abdulaziz Alasaiqah. This directory holds a real reproduction harness for the vulnerability. It is meant to be run against a locally downloaded vulnerable Firefox build. It...

UTopia

Introduction UTopia is a tool for automatically generating fuzz drivers from unit tests. UTopia will let developers perform fuzz testing without special knowledge about writing fuzzers. Even developers familiar with fuzzing can save significant time by generating fuzz drivers automatically. UTopi...

Malicious code in test-account-portal-fe (npm)

Source: ossf-package-analysis 5dd02103458df4faa2c37da43a76a468a0a22d591fb77c5d756e7d7496d68907 The OpenSSF Package Analysis project identified 'test-account-portal-fe' @ 100.100.102 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Summary An authenticated nginx-ui user can call POST /api/restore, upload a forged encrypted backup, restore app.ini, set nginx command settings such as TestConfigCmd, and then trigger command execution with POST /api/nginx/test. This was validated on nginx-ui 2.3.11 2523 6c86e5a5 in the local...

multer-sca-rule-test_cve-2025-7338

This repository does not have a README...

Malicious Package

Overview test-account-portal-fe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2026-17748 Malicious code in test-account-portal-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7b6c3f1f6f212d75283827455926079593132bbd819dec884caed3e3b745ca npm package [email protected] ships only a Linux x64 native addon at prebuilds/linux-x64/addon.node and loads it unconditionally fro...

Malicious code in test-account-portal-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7b6c3f1f6f212d75283827455926079593132bbd819dec884caed3e3b745ca npm package [email protected] ships only a Linux x64 native addon at prebuilds/linux-x64/addon.node and loads it unconditionally fro...

CVE-2022-35914-RCE

CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914 , a command-injection vulnerability involving the htmLawed test component in vulnerable GLPI installations. The tool provides command execution through the vulnerable endpoint and includes optional callback functionality for authorized lab...

CVE-2026-107806 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key,...

CVE-2026-107806 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key,...