1878 matches found
cve
CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling...
carbon-identity-framework
carbon-identity-framework Branch| Build Status ---|--- master| This repository contains the core components and features required by the WSO2 Identity Server product. Building from the source If you want to build carbon-identity-framework from the source code: 1. Install Java 21. 2. Install Apach...
cov-int
XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...
ROOT-APP-MAVEN-CVE-2026-40984 CVE-2026-40984 in io.micrometer:micrometer-core - Patched by Root
Root has patched CVE-2026-40984 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40983 CVE-2026-40983 in io.micrometer:micrometer-core - Patched by Root
Root has patched CVE-2026-40983 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...
CVE-2021-2471
CVE-2021-2471 maven environment Reproduction process here Reference environment: https://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe...
java-stager
java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...
DeliberatelyVulnerableWebApp
Deliberately Vulnerable Web Application Struts 2 This project is a Java web application using the Struts 2 framework. It is built with Maven and can be run using the Jetty server. Prerequisites Java Development Kit JDK 8 or higher Apache Maven 3.6.0 or higher Getting Started Build the project...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
beanshooter
beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...
sqlancer
SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...
Quartz-1
编译： % mvn install -DskipTests 注意： a. 最终的Quartz jar文件位于 quartz/target 目录下 b. 如果你没有编译所需的Oracle和/或Weblogic第三方库jar包（由于许可问题，这些包无法在公共Maven仓库中找到），你可以在主 pom.xml 中注释掉这些模块，或者下载并安装所需的工件。 对于Oracle：ojdbc5.jar 可以在 http://www.oracle.com/technetwork/database/enterprise-edition/jdbc-112010-090769.html 找到...
cve-2022-42889-text4shell
安装Maven - maven-linux 1. 安装Maven以创建fat jar root@kitploit: mvn clean install 2. Docker构建 root@kitploit: docker build --tag=text4shell . 3. Docker运行 root@kitploit: docker run -p 80:8080 text4shell 4. 测试应用 root@kitploit: http://localhost/text4shell/attack?search= 5...
trivy-java-db
trivy-java-db 概要 trivy-java-db は、maven-index リポジトリのデータから SQLite データベースを構築し、jar ファイルの ArtifactID、GroupID、Version、sha1 を保存します。 この DB は、Trivy が GAV を含まない jars に関する情報を発見するために使用されます。 更新間隔 毎日 00:00 Javaインデックスデータベースのダウンロード 実際にコンパイルされたデータベースは、Trivy または Oras CLI からダウンロードできます。 Trivy: root@kitploit:...
CVE-2022-22965-spring4shell
CVE-2022-22965-spring4shell CVE-2022-22965 Spring4Shell research & PoC for learning purposes Blog post A more detailed analysis and explanation of the vulnerability can be found on my blog post. Comments on initial research Based on the initial research I did on...
apache__dubbo_CVE-2021-30180_2-7-9
Apache Dubbo Project...
ROOT-APP-MAVEN-CVE-2024-1597 CVE-2024-1597 in org.postgresql:postgresql - Patched by Root
Root has patched CVE-2024-1597 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...