10902 matches found
Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret
Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...
sdnpwn
What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...
anteater
Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...
CVE-2020-15227
CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation as he did not solv...
CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC
CVE-2025-60852: CSV Injection in Instant Developer Foundation 25.0.9600 – Proof of Concept PoC 📌 Overview This repository contains a Proof of Concept PoC for a CSV Injection Formula Injection vulnerability CVE-2025-60852 affecting applications built with the Instant Developer Foundation framework...
VMWare Cloud Foundation NSX-V - XML External Entity (XXE)
VMware Cloud Foundation NSX-V contains an XML External Entity XXE vulnerability. On VCF 3.x instances with NSX-V deployed, this may allow a user to exploit this issue leading to a denial-of-service condition or unintended information disclosure. id: CVE-2022-31678 info: name: VMWare Cloud...
CVE-2019-17638-Jetty
JETTY The Jetty project is a 100% Java HTTP Server, HTTP Client and Servlet Container from the eclipse foundation http://www.eclipse.org/jetty/ Jetty is open source and is dual licensed using the Apache 2.0 and Eclipse Public License 1.0. You may choose either license when distributing Jetty...
CLEANSTART-2023-RF89232 Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualifie...
CVE-2020-12695 affects multiple packages. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue...
CVE-2021-21972
CVE-2021-21972 Description The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts...
CLEANSTART-2025-CY29866 This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3
Security vulnerability affects the squid package. This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3...
spring-framework
Spring Framework This is the home of the Spring Framework: the foundation for all Spring projects. Collectively the Spring Framework and the family of Spring projects are often referred to simply as "Spring". Spring provides everything required beyond the Java programming language for creating...
CVE-2024-24919-POC
CVE-2024-24919-POC A Simple tool to Automate CVE-2024-24919 Exposure of Sensitive Information Features Easy to Use. Helpful Comments; Can Test Multiple Domains Usage git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh ./CVE-2024–24919.sh...
CVE-2022-22954
Analysis of CVE-2022-22954 Overview Workspace ONE Access workspace delivery as a service model provides multi-factor authentication, single sign-on, and conditional access for SaaS, web, and mobile applications. CVE-2022-22954 is a Server-side Template Injection vulnerability existing in the...
security-research
Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 29 CVEs across 15 projects , 2023 to 2026. I also wrote the remediation for 84 more that other people found - not a credit of mine, and listed separately in the third...
asf__tapestry-5_CVE-2019-0207_5-4-4
This repository does not have a README...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-10836: Backport to odf-4.19.z Backport CephX keyType and rotation changes DFBUGS-10625: Backport to...
Symfony and Symfony HTTP Foundation Component 4.1.x < 5.4.54 / 6.0.x < 6.4.46 / 7.0.x < 7.4.19 / 8.0.x < 8.1.7 DoS
The version of Symfony and/or the Symfony HTTP Foundation Component installed on the remote host is 4.1.0 or later prior to 5.4.54, or 6.0.0 or later prior to 6.4.46, or 7.0.x prior to 7.4.19, or 8.0.x prior to 8.1.7. It is, therefore, affected by a denial of service vulnerability. -...
VMware Cloud Foundation SDDC Manager Brotli Decoder Out-of-Bounds Write (VMSA-2026-0008)
The version of VMware Cloud Foundation SDDC Manager installed on the remote host is 5.2.x, 9.0.x, 9.1.0, or 9.1.1. It is, therefore, affected by a remote code execution vulnerability in the Brotli decoder of its Node.js component as referenced in the VMSA-2026-0008 advisory: - A buffer overflow...
VMSA-2026-0008: Node.js Brotli decoder out-of-bounds write remote code execution vulnerability (CVE-2026-111497)
Advisory ID: | VMSA-2026-0008.1 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 7.5-9.8 Synopsis: | Node.js Brotli decoder out-of-bounds write remote code execution vulnerability CVE-2026-111497 Issue date: | 2026-10-27 Updated on: | 2026-10-28 CVEs | CVE-2026-111497 1. Impacted Products...
