CVE-2022-33171

CVE-2022-33171: TypeORM SQL Injection Note: This is a work-in-progress analysis of CVE-2022-33171. The details provided here may be updated as further information becomes available.currently not working Vulnerability Details CVE ID: CVE-2022-33171 Product: TypeORM Affected Versions: 0.3.0...

CVE-2019-18935

CVE-2019-18935 Telerik UI for ASP.NET AJAX RadAsyncUpload Handler .NET JSON Deserialization Version List 2007.1423 2007.1521 2007.1626 2007.2918 2007.21010 2007.21107 2007.31218 2007.31314 2007.31425 2008.1415 2008.1515 2008.1619 2008.2723 2008.2826 2008.21001 2008.31105 2008.31125 2008.31314...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2022-21306

CVE-2022-21306 POC, EXP, chatGPT for me, only some ideas provided, all unusable. code import json import requests targeturl = "http://127.0.0.1:7001" headers = 'User-Agent': 'Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/58.0.3029.110 Safari/537.3',...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CLEANSTART-2026-TB45773 json-c through 0

CVE-2020-12762 affects multiple packages. json-c through 0. See references for individual vulnerability details...

CLEANSTART-2024-TU12596 JSON encoder in Dovecot before 2

Security vulnerability affects the dovecot package. The JSON encoder in Dovecot before 2...

react-ssr-vulnerability

CVE-2025-55182 - React Server Components RCE POC This is POC for educational and security research purposes only. This vulnerability has been patched in the latest versions of the affected packages. Use this tool only on systems you own or have explicit permission to test. I am not liable for any...

CLEANSTART-2026-KP74073 JSON gem through 2

CVE-2020-10663 affects multiple packages. The JSON gem through 2. See references for individual vulnerability details...

Apache-couchdb-CVE-2017-12635

CouchDB Vertical Privilege Escalation Vulnerability CVE-2017-12635 Apache CouchDB is an open-source database that focuses on ease of use and being a "fully web-embracing database." It is a NoSQL database that uses JSON as the storage format, JavaScript as the query language, and MapReduce and HTT...

CLEANSTART-2026-DS51960 Delete function fails to properly validate offsets when processing malformed JSON input

CVE-2026-32285 affects multiple packages. The Delete function fails to properly validate offsets when processing malformed JSON input. See references for individual vulnerability details...

CLEANSTART-2026-JU12831 Ruby JSON is a JSON implementation for Ruby

Security vulnerability affects the ruby package. Ruby JSON is a JSON implementation for Ruby...

CLEANSTART-2026-LJ24679 Ruby JSON is a JSON implementation for Ruby

Security vulnerability affects the ruby package. Ruby JSON is a JSON implementation for Ruby...

CollaRE

CollaRE v1.4 Introduction CollaRE is a tool for collaborative reverse engineering that aims to allow teams that do need to use more then one tool during a project to collaborate without the need to share the files on a separate location. It also contains a very simple user management and as such...

Project-CVE-2026-33017

CVE-2026-33017 Langflow Script — Code Explanation coded by: Xer0TLabs x Persephrak Decentralized Syndicate Purpose of this document This document is a high-level explanation of the supplied Python program for review, incident-response, and defensive analysis. It intentionally does not include...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

CVE-2025-52688

CVE-2025-52688 Affected Products Alcatel AP13161 - Enterprise WIFI access point Summary There are 2 main vulnerabilities being addressed here: Lack of input sanization on multiple JSON web parameters that allows malicious characters such as ; to be injected to caused a command injection attack La...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

CLEANSTART-2026-LJ51082 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

Security vulnerability affects the druid-fips package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...

ShredHound

ShredHound Overview Split a large BloodHound JSON file into a bunch of smaller files for faster importing. Follow me on Twitter Mike Felch - @ustayready Basic Usage usage: shred.py -h --output OUTPUT --filename FILENAME --chunks CHUNKS optional arguments: -h, --help show this help message and exi...