1307407 matches found
log4j-lookups-vulnerability
log4j-lookups-vulnerability The project based on spring-boot,and the code reveals how Log4j2 Vulnerability CVE-2021-44228 works. The solution for CVE-2021-44228 is on the linked url https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot...
CVE-2020-16898_Workaround
CVE-2020-16898Workaround PowerShell Script Workaround for VCE-220-16898 vulnerability...
Block-Spring4Shell
Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...
vulnerabilidad-LibWebP-CVE-2023-41064
vulnerability-LibWebP-CVE-2023-41064 code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP an image format file with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...
BootHoleFix
Boot Hole Fix This script will remediate the BootHole bug identified in CVE-2020-25632 and/or CVE-2021-20233. On July 29, 2020, Microsoft published security advisory 200011 that describes a new vulnerability that's related to Secure Boot. Devices that trust the Microsoft third-party Unified...
CVE-2024-6387-Mitigation
Document Title - Mitigation Guide for CVE-2024-6387 in OpenSSH Introduction This document outlines the steps for mitigating CVE-2024-6387, a security vulnerability affecting OpenSSH versions from 8.5p1 to 9.8p1. The vulnerability can be mitigated in two ways: 1. Adjusting the LoginGraceTime setti...
SmartAsset-UE-CVE-2020-26526
SmartAsset-UE-CVE-2020-26526 It is possible to enumerate valid usernames on the login page. CVE-2020-26526 An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. The application sends a different server response when the username is...
CVE-2017-11882-Preventer
CVE-2017-11882-Preventer Chrome Extension CVE-2017-11882 Preventer for .docx files...
CVE-2022-30190-Analysis-With-LetsDefends-Lab
CVE-2022-30190-Analysis-With-LetsDefends-Lab On May 27, 2022, the NaoSec technical team attempted to analyze and discovered a document in .doc format that appeared malicious. The document was indicated to have been uploaded from an IP address in Belarus. This suspicion was further traced and on M...
springhound
springhound Created after the release of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and systems, allowing you to get insight on versions used. Unpacks JARs and analyzes their Manifest files. Usage: ./springhound.sh rootdirectory...
CVE-2024-4577_Analysis
CVE-2024-4577 Analysis Above is my analysis report, besides, there are also information about: - Webserver Apache configuration - Debugger for PHP Documents for my report: https://nvd.nist.gov/vuln/detail/CVE-2024-4577...
apche-struts-vuln-demo-cve-2018-11776
Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: root@kitploit: aws cloudformation create-stack ...
CVE-Research
TryHackMe Room - tryhackme.com/jr/cvechallenge Video -...
jetty-9.4.31.v20200723_CVE-2023-26049
This repository does not have a README...
cve-2024-38063
This repository does not have a README...
CVE-2025-4686
CVE-2025-4686 The official publication by USOM is expected...
TimeInjector
TimeInjector Time injector is a CVE-2018-14714 exploitation script in bash To tell if the target is vulnerable, the script works by first checking if the target is accessible and if it can establish a login session. After that, it checks for the existence of specific pages and performs a time-bas...
CVE-2021-28165
This repository does not have a README...