Lucene search
+L

433 matches found

Kitploit
Kitploit
added 2026/08/31 10:26 p.m.2 views

apache__mina-sshd_CVE-2023-35887_2-9-2

Apache MINA SSHD Apache MINA SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. It does not aim at being a replacement for the SSH client or SSH server from Unix operating systems, but rather provides support for Java based applications requiring SSH...

5CVSS6.6AI score0.01311EPSS
SaveExploits0References28
Kitploit
Kitploit
added 2026/08/31 5:27 p.m.7 views

whitesource__curekit_CVE-2022-23082_1-1-3

CureKit - WhiteSource Cure Encoding Package CureKit is a security library mostly used by the WhiteSource Cure self-fixing product. WhiteSource Cure is an innovative solution that automatically generates remediation suggestions for vulnerabilities identified by detection tools in proprietary code...

7.5CVSS7.1AI score0.01345EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 4:19 p.m.643 views

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

10CVSS7.5AI score0.99999EPSS
SaveExploits365
Kitploit
Kitploit
added 2026/08/31 3:19 p.m.3 views

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Code for veracode blog To demonstrate the Code Execution, 1. Build the project using maven 2. Execute python3 -m http.server 8080 to run the http server 3. Run exploit.java. You should observe a HTTP GET request on the server 4. To demonstrate how SnakeYAML 2.0 prevent...

9.8CVSS6.9AI score0.99569EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/31 12:17 p.m.1 views

ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

9.8CVSS7.2AI score0.0148EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/08/31 11:19 a.m.2 views

FastJson1.2.62-RCE

Fastjson=1.2.62 RCE Vulnerability analysis: https://www.cnblogs.com/tr1ple/p/12348886.html...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 7:32 a.m.3 views

XStream-1

master: v-1.4.x: XStream Serialización de Java a XML, y viceversa Binarios Todos los artefactos binarios están empaquetados en el archivo -bin. Incluye los jars de XStream y cualquier otra biblioteca utilizada en tiempo de compilación, o extras opcionales en tiempo de ejecución. Se recomienda el...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 6:46 a.m.1 views

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...

10CVSS7AI score0.99999EPSS
SaveExploits365
Kitploit
Kitploit
added 2026/08/31 3:12 a.m.5 views

VUL4J-59

jsoup: Java HTML parser that makes sense of real-world HTML soup. jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification...

5.8AI score
SaveExploits0
CVE
CVE
added 2026/08/31 12:00 a.m.18 views

CVE-2026-82596

LatencyUtils (versions up to 2.0.3) contains a memory corruption vulnerability in the PauseDetector component, specifically in the function LatencyStats.recordDetectedPause within src/main/java/org/LatencyUtils/LatencyStats.java. The flaw requires a local attack and results in partial/low availab...

4.8CVSS5.4AI score0.00113EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/30 9:52 p.m.2 views

ldapsdk

UnboundID LDAP SDK for Java Download the Latest Release of the LDAP SDK Here The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free and open source Java library for communicating with LDAP directory servers. It offers better performance, better ease of use, and mo...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/30 5:07 p.m.2 views

srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2

zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...

6.5CVSS6.8AI score0.13088EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/29 1:25 p.m.2 views

hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055

HAPI FHIR - Artefatti principali di HL7 FHIR Stato CI master --- Questo è il codice Java core per la gestione degli oggetti, con utilità incluso il validatore, per la specifica FHIR. In questo repository sono inclusi: org.fhir.fhir.utilities: codice condiviso utilizzato da tutti gli altri progett...

7.5CVSS7.1AI score0.013EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 12:29 p.m.5 views

CVE-2020-26258

Descrizione XStream è una libreria Java per serializzare oggetti in XML e viceversa. In XStream precedente alla versione 1.4.15, è presente una vulnerabilità di Server-Side Forgery Request che può essere attivata durante l'unmarshalling. La vulnerabilità potrebbe consentire a un attaccante remoto...

7.7CVSS6.7AI score0.81817EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/29 6:01 a.m.2 views

text4shell-tools

commons-text-tools Collegamenti rapidi Clicca per trovare: Trova i file .jar di commons-text e le loro versioni Chiamate alle funzioni vulnerabili di commons-text Patch immediata sui file .jar di commons-text per disabilitare i comportamenti vulnerabili Esempio di scansione e patch Panoramica...

9.8CVSS6.9AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/28 12:03 a.m.3 views

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — noto anche come CVE-2021-44228 — è una vulnerabilità critica che consente l'esecuzione remota di codice nei sistemi che utilizzano Log4j della Apache Foundation, una libreria Java open-source ampiamente utilizzata in prodotti software commerciali e open-source e...

10CVSS7.5AI score0.99999EPSS
SaveExploits365
Kitploit
Kitploit
added 2026/08/27 11:15 p.m.4 views

CVE-2025-0851

CVE-2025-0851 Questa vulnerabilità è causata da una vulnerabilità di File Traversal nelle funzioni untar e unzip, fornite dall'utility per estrarre archivi di modelli tar e zip utilizzati nel caricamento dei modelli in Deep Java Library un framework open source per il deep learning in Java...

9.8CVSS8.9AI score0.23267EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 10:51 p.m.2 views

nahsra__antisamy_CVE-2022-29577_1-6-6-1

AntiSamy Una libreria per eseguire una pulizia rapida e configurabile dell'HTML proveniente da fonti non attendibili. Supporta Java 7+. Un altro modo per dirlo potrebbe essere: è un'API che ti aiuta a garantire che i client non forniscano codice dannoso nascosto nell'HTML che forniscono per il lo...

6.1CVSS6.3AI score0.01313EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 10:51 p.m.1 views

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy Una libreria per eseguire una pulizia veloce e configurabile di HTML proveniente da fonti non affidabili. Supporta Java 8+. Un altro modo per dirlo potrebbe essere: è un'API che ti aiuta a garantire che i client non forniscano codice malevolo malicious cargo code nell'HTML che forniscono...

6.1CVSS6.6AI score0.01664EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 10:50 p.m.3 views

jmrozanec__cron-utils_CVE-2021-41269_9-1-5

cron-utils Definiamo i cron. E li supportiamo. cron-utils è una libreria Java per definire, analizzare, validare e migrare i cron, oltre a ottenere descrizioni leggibili per essi. Il progetto segue la Convenzione sul Versionamento Semantico, fornisce metadati OSGi e utilizza la licenza Apache 2.0...

10CVSS7AI score0.04047EPSS
SaveExploits1
Rows per page
Query Builder