EUVD-2026-97866

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45105...

boot-jackson-cve

Reproduction of CVE-2020-36518 in Spring Boot 2.5.10 Execute: ./mvnw clean verify It will fail with: ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with vulnerabilities that have a CVS...

Log4shell

Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...

ps5-uart

24 pin header near salina EDM-010 emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw: 691200 12 titani...

codecentric__spring-boot-admin_CVE-2022-46166_2-6-9

codecentric's Spring Boot Admin This community project provides an admin interface for Spring Boot ® applications. Monitoring Python applications is available using Pyctuator. Spring Boot Admin provides the following features for registered applications: Show health status Show details, like JVM ...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight, offline revival handoff This package contains a working offline boot of Transformers: Forged to Fight, plus every tool, patch, and reverse engineering note used to get there. It is meant to be picked up by someone who has the time and energy to take the next and muc...

log4j-CVE-2021-44228-test

log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...

iBSSloader

iBSSloader Research and tooling to boot Linux on iPad mini 1 P105AP / iPad2,5, Apple A5 via checkm8, patched iBSS/iBEC, and custom bare-metal payloads — without writing to the iOS install. This repo combines: Device tree port — Apple ADT → Linux DTS/DTB for P105AP Kernel build — ARMv7 zImage +...

PT-2026-110960

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description An issue exists in the host firmware configuration parsing. An attacker with authenticated service-level access to the Flexible Service Processor FSP can write special...

PT-2026-110957

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1120.00 through FW1120.01 IBM Power Systems Firmware versions FW1110.00 through FW1110.31 IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A buffer overflow exists in the host...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 - edited twice This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: docke...

memguard

MemGuard Enclave de software para almacenar información sensible en memoria. Este paquete intenta reducir la probabilidad de que datos sensibles queden expuestos mientras están en memoria. Su objetivo es ser compatible con los principales sistemas operativos y está escrito en Go puro...

log4shell-vulnerable-app

Aplicación de ejemplo vulnerable Log4Shell CVE-2021-44228 Este repositorio contiene una aplicación web Spring Boot vulnerable a CVE-2021-44228, apodada Log4Shell. Utiliza Log4j 2.14.1 a través de spring-boot-starter-log4j2 2.6.1 y el JDK 1.8.0181. Ejecutar la aplicación Ejecútala: docker run --na...

spring4shell-poc

Spring4Shell POC Descripción de la vulnerabilidad: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construcción del POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Pasos para construir/ejecutar Probado con JDK 11.0.14, Spring Boot 2.6.5 y Apache Tomcat 9.0.6...

BootHoleFix

Boot Hole Fix Este script corregirá el error BootHole identificado en CVE-2020-25632 y/o CVE-2021-20233. El 29 de julio de 2020, Microsoft publicó el aviso de seguridad 200011 que describe una nueva vulnerabilidad relacionada con Secure Boot. Los dispositivos que confían en la Autoridad de...

shim

shim, un bootloader UEFI di primo stadio shim è un'applicazione EFI semplice che, quando viene eseguita, tenta di aprire ed eseguire un'altra applicazione. Inizialmente proverà a farlo tramite le chiamate EFI standard LoadImage e StartImage. Se queste falliscono ad esempio perché Secure Boot è...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 Este es un programa Java que explota la vulnerabilidad Spring Break CVE-2017-8046. Este software está escrito para tener la menor cantidad de dependencias externas posible. AVISO LEGAL Esta herramienta está destinada a ingenieros de seguridad y profesionales de appsec pa...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql escaneo masivo de PoC para inyección SQL no autorizada Jeecg-Boot es una plataforma de desarrollo rápido basada en Spring Boot y Jeecg-Boot-Plus. La versión más reciente, jeecg-boot 3.5.0, ha sido reportada con múltiples vulnerabilidades de inyección SQL. Uso de l...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (2.1.10), com.gitee.kamismile:api (>=0.0.3, <=0.0.9) +44 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12.11)

com.hazelcast:hazelcast MAVEN version 3.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter 2.1.10 - com.gitee.kamismile:api =0.0.3,...