CVE-2022-22965

CVE-2022-22965 CVE-2022-22965 EXP General environment requirements: 1. Whether Spring framework is used; if not, the vulnerability does not exist 2. Whether Spring parameter binding is used; if not, the vulnerability does not exist 3. The JDK version used by the middleware; if the version is lowe...

secret-stripper

A small Rust CLI that strips secrets from your clipboard on demand. Bind a hotkey, highlight text, press the chord - the clipboard holds a redacted version. Normal Ctrl+C / Ctrl+V is never intercepted. Contents Quick Start Supported OS Platform setup macOS setup Windows setup What It Detects Reda...

CVE-2026-110929

A flaw was found in OpenSSH. On platforms that cannot pass file descriptors and that need root to allocate a terminal, the post-authentication session process keeps root privilege. An authenticated user can then perform actions as root, including privileged socket connections and binding forwards...

nmap

nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap Network Mapper is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a...

WhisperPair

WhisperPair: Testing Harness for Google Fast Pair A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pair...

youzer

youzer Fake User Generator for Active Directory Environments Introduction The goal of Youzer is to create information rich Active Directory environments. This uses the python3 library 'faker' to generate random accounts. pip3 install faker You can either supply a wordlist or have the passwords...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Spring4Shell Security Operations Analysis A hands-on Security Operations Centre SOC simulation where I performed the role of an Information Security Analyst responding to an active Spring4Shell exploitation attempt. This repository documents the full incident response lifecycle —...

CVE-2018-1273

CVE-2018-1273 Environment for CVE-2018-1273 CVE-2018-1273: RCE with Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Build $ docker build -t cve-2018-1273 . Run $ docker run -d -p 8080:8080...

nmap-spring4shell

Nmap-spring4shell Log4shell-nmap is an NSE script for detecting Spring4Shell RCE vulnerabilities CVE-2022-22965 in HTTP services. The script injects the correct payload into the application and then executes the following command on the specified endpoint. Vulnerability See here. Usage...

CVE-2026-104108

The web-based file manager FileRise is vulnerable to an authentication bypass prior to version 3.23.0 . The software incorrectly maps authenticated OIDC identities to local accounts using mutable preferred_username or email claims without requiring email_verified for email-based naming. An attack...

Spring-CVE

Spring CVE This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell". CVE-2022-22963 In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing...

CVE-2023-21839

CVE-2023-21839 Analysis This vulnerability is caused by triggering the getReferent method of the bound object when calling the lookup or list method after binding an object via the t3 or iiop protocol. Call stack for t3 protocol: getObjectInstance:96, WLNamingManager weblogic.jndi.internal...

cve-2019-0708

CVE-2019-0708 This module checks a range of hosts for the CVE-2019-0708 vulnerability by binding the MST120 channel outside of its normal slot and sending DoS packets. I just modified the initial metasploit module for this vuln to produce a denial of service attack...

spring4shell-local-verification-lab

Spring4Shell Local Impact Condition Verification, Remediation, and Re-testing Project Project Introduction This project is used for learning and verifying the impact conditions, risk manifestations, remediation methods, and post-remediation re-testing procedures for Spring Framework CVE-2022-2296...

CLEANSTART-2026-AW63553 jackson-databind binds a JSON string to a javax

Security vulnerability affects the solr package. jackson-databind binds a JSON string to a javax...

CVE-2022-22965

Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...

certipy-merged

certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...

CVE-2022-22965

Spring4ShellCVE-2022-22965 Spring Framework RCE via Data Binding on JDK 9+ / spring4shell / CVE-2022-22965 Spring4ShellCVE-2022-22965 Exploit Demo https://user-images.githubusercontent.com/57348147/161458377-44ab2f76-f947-4599-aa0a-92cbaac819f8.mp4 Build docker pull me2nuk/cves:2022-22965 docker...

CVE-2026-110106

Versions of RuoYi-Vue-Plus through 6.0.0 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. This flaw allows authenticated users to delete the social login bindings of other users by providing a specific socialId . Specifically, an attacker can send a DELETE /auth/unlock/...