CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108106

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...

CVE-2026-108106 Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Service

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...

EUVD-2026-95807

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...

CVE-2026-108106

The Xerial snappy-java library before version 1.1.10.9 is vulnerable to an unbounded memory allocation flaw. An attacker can provide crafted bytes to the Snappy.uncompress , uncompressString , SnappyInputStream , or SnappyFramedInputStream functions, declaring a large uncompressed length within a...

CVE-2026-108104 Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

EUVD-2026-95806

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104

The Xerial snappy-java library, specifically versions 1.1.7.4 before 1.1.10.10 , is vulnerable to a double release (CWE-415) vulnerability in the SnappyFramedInputStream component. The flaw occurs when replacement allocation fails, causing the system to return pooled buffers twice. An attacker ca...

CVE20131491-JIT

========================= タイトル ========================================= CVE-2013-1491 JIT-Sprayを使用したPoC by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= このPoCについて...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

cve-2020-2555

CVE-2020-2555 Main.javaを実行すると、現在のディレクトリにpayload.serが生成されます。このpayloadはt3プロトコルを使用してターゲットサーバーに送信できます。...

java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 CVE-2021-27568 のデモ: トークン生成における安全でないランダム性...

log4j2

log4j2 これは、リンクに触発された log4j2 の jmi 攻撃デモです。...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

CVE-2024-31982

CVE-2024-31982 Java SSTI - 导致 RCE async async=falsegroovyprintln"Successful Injection"/groovy/ GET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28%22Successful%20Injection%22%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2F HTTP/1.1 Host...

CVE-2012-4681-Armoring

CVE-2012-4681-Armoring 概要 CVE-2012-4681 に対する手動アンチウイルス回避アーマリング実験であり、http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html に触発されたものです。 基本エクスプロイト: http://pastie.org/4594319 2014年9月26日および2016年8月2日時点の結果 サンプル| 備考| 2014年スコア（陽性検出数）| 2016年スコア（陽性検出数） ---|---|---|--- オリジナルサンプ...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit（Parquet CVE-2025-30065 用） -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. |...

sqlancer

SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...

log4j-shell-poc

log4j-shell-poc 最近発見された CVE-2021-44228 脆弱性の Proof-Of-Concept です。 最近、log4j に新たな脆弱性が見つかりました。log4j は Java のロギングライブラリで、elasticsearch や minecraft など、非常に広く使われています。 このリポジトリには、脆弱性のあるサンプルアプリケーションと、その Proof-of-Concept POC エクスプロイトを用意しました。 A video showing the exploitation process 脆弱性のある Web アプリ:...