CVE-2026-75328

DocSys-master V2.02.85 is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The vulnerability is reachable over the network with no authentication required , yielding a CVSS 3.1 score of 7.5 (HIGH) with high...

CVE-2021-44228

🛡️ CVE-2021-44228: Análise do Log4Shell - A Vulnerabilidade que Revolucionou a Segurança Java Impacto Crítico CVSS 10.0 | Descoberta em 2021, esta falha no Apache Log4j permite execução remota de código RCE e afeta milhões de sistemas globalmente. Ainda hoje, é um lembrete chave para a...

Text4Shell-Scanner

Scanner für CVE-2022-42889 Text4Shell Beschreibung Dies ist ein Scanner für die Schwachstelle CVE-2022-42889 Text4Shell Verwendung Schritt 1. Laden Sie die JAR-Datei herunter JAR-Datei befindet sich unter preparedJar/text4shell-scanner.jar 2. Überprüfen Sie die Java-Version auf Ihrem System 3...

log4j-rce-test

Compilazione ./build.sh Avvia il server log4j RCE ./start-log4j-rce-server.sh Test Esegui java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Controlla se ottieni log in hack.log dalla cartella corrente Puoi modificare questa riga String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + "...

CVE-2022-21306

CVE-2022-21306 POC, EXP, chatGPT per me: possono solo dare qualche spunto, tutti inutilizzabili codice root@kitploit: import json import requests targeturl = "http://127.0.0.1:7001" headers = 'User-Agent': 'Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko...

CVE-2022-22965-Spring4Shell-Security-Operations-Analysis

CVE-2022-22965 — Spring4Shell Security Operations Analyse Eine praktische Simulation eines Security Operations Centre SOC, bei der ich die Rolle eines Information Security Analyst übernommen habe und auf einen aktiven Spring4Shell-Exploit-Versuch reagiert habe. Dieses Repository dokumentiert den...

key-transparency-auditor

key-transparency-auditor Uma implementação de referência de um auditor de terceiros para o serviço de transparência de chaves da Signal, com base na especificação de transparência de chaves. Visão geral Este serviço é escrito em Java usando o framework Micronaut. Para compilar e executar os teste...

CVE-2026-79675

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP può ottenere con successo una reverse shell Questo articolo e lo strumento sono solo per la condivisione tecnica; è severamente vietato l'uso per scopi illegali. Qualsiasi conseguenza derivante da tale uso è a esclusivo carico dell'utente. Trigger dell'EXP per...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script...

CVE-2026-79675

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function. Attackers can inject dangerous JVM flags such as -agentpath , -javaagent , or @argfile into Stanford wrapper classes, achieving arbitrary code execution . The vulnerability is ra...

CVE-2026-79675

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

CVE-2026-79675 NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

EUVD-2026-65525

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

CVE-2026-79675 NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

log4j-samples

log4j-samples Esempi di versioni della libreria log4j per aiutare gli scanner / rilevatori di log4j incluso il nostro log4j-detector a migliorare la loro accuratezza nel rilevamento di CVE-2021-45046 e CVE-2021-44228. Gli esempi includono jar shaded, uber jar, jar eseguibili spring-boot, jar dent...

log4j2_vul_local_scanner

Scanner Locale per Vulnerabilità Log4j2 CVE-2021-45046 Script di rilevamento locale per la vulnerabilità Log4j, scansiona tutti i processi java sull'host, verifica se è stato introdotto un jar log4j-core vulnerabile e se è possibile un attacco remoto di esecuzione codice CVE-2021-45046. Carica il...

CVE-2026-55511

CVE-2026-55511: RCE autenticata in Yamcs StreamSQL Proof of concept non armato e documentazione tecnica per CVE-2026-55511, una vulnerabilità autenticata di iniezione di codice Java nel compilatore di espressioni aggregate di Yamcs StreamSQL...

spring-break-cve-2017-8046

CVE-2017-8046 Spring Break Questo è un programma Java che sfrutta la vulnerabilità Spring Break CVE-2017-8046. Dichiarazione di non responsabilità Questo strumento è destinato a ingegneri della sicurezza e professionisti appsec per valutazioni di sicurezza. Si prega di utilizzare questo strumento...