CVE-2025-53547-POC

CVE-2025-53547 POC هذا هو POC الخاص بـ CVE-2025-53547 Chart.lock يربط ملف الاختبار بـ /tmp/1.txt /tmp/1.txt يحقن أمرًا ينشئ /tmp/2.txt في بيئة المنتج الفعلية، يمكنك تغيير ملف الارتباط Chart.lock لحقن أي أمر تريده، مثل: /root/.bashrc /root/.bashprofile /etc/profile ...... أو أي ملف يمكنه تشغيل سكر...

BIT-GRADLE-2023-35946 Dependency cache path traversal in Gradle

Gradle is a build tool with a focus on build automation and support for multi-language development. When Gradle writes a dependency into its dependency cache, it uses the dependency's coordinates to compute a file location. With specially crafted dependency coordinates, Gradle can be made to writ...

CVE-2023-35946

Gradle is a build tool with a focus on build automation and support for multi-language development. When Gradle writes a dependency into its dependency cache, it uses the dependency's coordinates to compute a file location. With specially crafted dependency coordinates, Gradle can be made to writ...

RubyGems: Dependency repository hijacking aka Repo Jacking from GitHub repo rubygems/bundler-site & rubygems/bundler.github.io + bundler.io docs

Dependency repository hijacking aka repo jacking is an obscure supply chain vulnerability, conceptually similar to subdomain takeover. When the linked repository owner changes their username, it becomes immediately available to be re-registered by anyone. This means that any project that linked...