CVE-2022-22965

POC Spring4Shell CVE-2022-22965 Spring4Shell CVE-2022-22965 概念验证（PoC）。 该漏洞的命名源于它与臭名昭著的 Log4j LOG4Shell 的相似之处。 有关此漏洞的详细信息 https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc https://www.springcloud.io/post/2022-03/spring-0day-vulnerability...

raptor

Raptor Raptorはブロックチェーンエコシステム（コントラクト、プロトコルなど）を監査するためのフレームワークです。 概要 Raptorは、スマートコントラクトやブロックチェーンプロトコルのセキュリティ脆弱性を特定するための構造化されたアプローチとツールを提供します。このフレームワークは、監査人が発見事項を一貫して文書化し、複数の監査プラットフォーム向けのレポートを生成するのに役立ちます。 インストール curl Install latest stable version recommended curl -sSL...

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

hi CTT-Serverless-RCE-v1.0---収束時間理論強化MCPエクスプロイト Serverless Framework MCP Server CVE-2025-69256 基本スコア: 9.4/10 → CTT強化スコア: 9.9/10 Serverless FrameworkのMCP（Model Context Protocol）サーバーにおける重大なコマンドインジェクション脆弱性を、CTTの時間共鳴により前例のない信頼性と回避能力で強化したエクスプロイトです。 🌀 CTT-MCP-RCE v1.0 - 収束時間理論強化 Serverless Framework...

CVEHarvest

CVEHarvest Multi-CVE exploitation framework for Windows syste...

SecAssessment-GapDetection-Thesis

D3FENDer - 基于MITRE ATT&CK与D3FEND框架的安全评估与差距检测工具 D3FENDer是一款由Michael开发的基于规则的CLI工具，用于其题为《使用MITRE ATT&CK与D3FEND框架的安全评估与差距检测系统开发》的论文。该工具旨在评估组织现有的防御措施，识别安全差距，检测各种攻击向量，并基于MITRE ATT&CK和D3FEND知识库提出缓解措施。 该项目是学术论文的一部分，专注于透明性 、可解释性 、在SOC工作流中的实际应用 以及DevSecOps原则 。 特性 基于规则的防御措施系统 检测缺失的防御措施 映射可能的MITRE ATT&CK技术...

CVE-2026-94575

A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control RBAC checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for t...

metasploit-javapayload

此仓库已合并到 metasploit-payloads 请注意，此仓库已合并到一个统一的 meterpreter 仓库中：https://github.com/rapid7/metasploit-payloads 历史记录已保留，同时保留了来自 metasploit-framwork 的史前记录： https://github.com/rapid7/metasploit-payloads/tree/master/java 如果你有旧的 PR，请将它们 rebase 到新仓库上。关于我们为何将这些仓库重新合并在一起的讨论，请参见...

CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

CVE-2026-94575

A logic vulnerability exists in the Brocade Fabric OS web management framework in versions before 10.0.1 . This flaw allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation can lower the ...

EUVD-2026-94682

A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control RBAC checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for t...

CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 are affected by an authorization logic vulnerability within the AAA (Authentication, Authorization, and Accounting) integration framework. This flaw allows remote authenticated users to bypass administrative role restriction checks during session establish...

CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

EUVD-2026-94669

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution

WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

Laminas Project laminas-http - Remote Code Execution

Laminas Project laminas-http 2.14.2 and Zend Framework 3.0.0 contain a deserialization vulnerability caused by destruct method in Zend\Http\Response\Stream, letting attackers control content lead to remote code execution, exploit requires attacker-controlled serialized data. id: CVE-2021-3007...

CLEANSTART-2026-IL67419 Netty is an asynchronous, event-driven network application framework

CVE-2026-42580 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...