carbon-identity-framework

carbon-identity-framework Branch| Build Status ---|--- master| This repository contains the core components and features required by the WSO2 Identity Server product. Building from the source If you want to build carbon-identity-framework from the source code: 1. Install Java 21. 2. Install Apach...

ghidra-mcp

Ghidra MCP Server If you find this useful, please ⭐ star the repo — it helps others discover it! If Ghidra MCP saves you time, consider sponsoring the project. One-time and recurring support both help fund compatibility updates, production hardening, docs, and new tooling. A production-ready Mode...

CVE-2021-26102

CVE-2021-26102 PoC of FortiWAN auth bypass https://www.fortiguard.com/psirt/FG-IR-21-048...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. id: CVE-2022-35416 info: name: H3C SSL VPN =2022-07-10 - Cross-Site Scripting author: 0x240x23elu severity: medium description: | H3C SSL VPN 2022-07-10 and prior contains...

You-re-Doing-IoT-RNG

You're Doing IoT RNG This repository contains our results and also the device code used to generate the random numbers across several devices. For a more complete explanation of the vulnerabilities and issues, check out our DEF CON 21 talk here: https://www.youtube.com/watch?v=Zuqw0-jZh9Y Or if y...

burp-rest-api

burp-rest-api ⚠️ WARNING: This project is no longer actively maintained. While the repository will remain available for reference, no further updates, bug fixes, or support will be provided. Overview A REST/JSON API to the Burp Suite security tool. Since the first commit back in 2016, burp-rest-ap...

Vulnerability-Assessment-Exploitation-Lab

Vulnerability-Assessment-Exploitation-Lab Metasploitable 2 Penetration Testing Lab Executive Summary This project documents a successful, full-lifecycle penetration test against the Metasploitable 2 Linux environment. The assessment follows the Penetration Testing Execution Standard PTES , coveri...

CVE-2021-21042

CVE-2021-21042 Inspired from https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag...

meizu21-ghostlock-root

MEIZU 21 GhostLock Root Runtime root for the MEIZU 21 with a locked bootloader, based on GhostLock / CVE-2026-43499. This repository contains only the device-specific offsets, the prebuilt ARM64 payload, and scripts required to reproduce the setup. It does not contain Flyme OTA packages, boot.img...

Nginx_cve-2026-42945-scanner-gui

Ngxin cve-2026-42945-scanner-gui a need run jdk21version java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation Requires JDK 21 to run After extraction, java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation...

CVE-2011-2523

CVE-2011-2523 These are notes for creating the attack methodology in a controlled environment. It is assumed that the exercise is black-box, so I have no knowledge of the victim system. 1. Download the necessary ISOs, both Metasploitable2 and Kali or any other. 2. Important: the environment is...

Ubuntu 26.04 LTS : CRaC JDK 21 vulnerabilities (USN-8694-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8694-1 advisory. It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 21 vulnerabilities (USN-8677-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8677-1 advisory. It was discovered that the JSSE component of OpenJDK 21 did not correctly authenticate users. A remote attacker could...

AlmaLinux 9.6 [TuxCare] Security Update: java-21-openjdk / java-21-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785328191)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785328191 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

Rocky Linux 8 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_55787)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655787 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted t...

Rocky Linux 10.0 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_10873)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510873 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK:...

AlmaLinux 9.6 [TuxCare] Security Update: java-21-openjdk / java-21-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1771408532)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771408532 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

Rocky Linux 8 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_0928)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260928 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpng...

Rocky Linux 9 [CIQ] Security Update: java-21-openjdk / java-21-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_9689)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269689 advisory. JDK: Enhance crypto algorithm support CVE-2026-22007 JDK: Improve Kerberos credentialing CVE-2026-22013 JDK: Enhance Path Factories Redux CVE-2026-22016 JD...

Rocky Linux 9.6 [TuxCare] Security Update: java-21-openjdk / java-21-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1771408532)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771408532 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster ima...