CVE-2024-4956

CVE-2024-4956 This repository contains a Python utility for automating the exploitation of CVE-2024-4956 and is capable of mass testing file paths from an input file while automating the process of saving existing file path contents to disk for analysis. Details for the vulnerability can be found...

shirocrack

shirocrack Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. Let's keep this short CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository that allows an unauthenticated attacker with network access to the server to read...

com.hazelcast:hazelcast-build-utils (3.10.6), com.hazelcast:hazelcast-client (3.10.6) +19 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.10.6)

com.hazelcast:hazelcast MAVEN version 3.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10.6 - com.hazelcast:hazelcast-client 3.10.6 -...

com.ahome-it:ahome-tooling-server-hazelcast (1.1.10-release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.6.5)

com.hazelcast:hazelcast MAVEN version 3.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast 1.1.10-release -...

CLEANSTART-2026-LB17279 Security fix for GHSA-4cx2-fc23-5wg6 applied in: keycloak 26.1.4-r1, kserve-modelmesh 0.12.0-r16, logstash-fips 9.0.8-r3, orientdb 3.2.38-r0

GHSA-4cx2-fc23-5wg6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FM94939 Security fix for GHSA-78wr-2p64-hpwj applied in: druid-fips 35.0.0-r1, orientdb 3.2.38-r0, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4

GHSA-78wr-2p64-hpwj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XT25506 Security fix for GHSA-v435-xc8x-wvr9 applied in: orientdb 3.2.38-r0

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QI18295 Security fix for GHSA-m44j-cfrm-g8qc applied in: orientdb 3.2.38-r0

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QI64400 Security fix for GHSA-67mf-3cr5-8w23 applied in: orientdb 3.2.38-r0

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YK68946 Security fix for GHSA-8xfc-gm6g-vgpv applied in: orientdb 3.2.38-r0

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WG07848 Security fix for GHSA-4h8f-2wvx-gg5w applied in: orientdb 3.2.38-r0

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101992

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101471

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102111

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102158

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101469

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZL33696 Security fixes in orientdb 3.2.38-r0

Package orientdb version 3.2.38-r0 fixes 10 vulnerabilities: ghsa-78wr-2p64-hpwj, ghsa-8xfc-gm6g-vgpv, ghsa-4h8f-2wvx-gg5w, ghsa-v435-xc8x-wvr9, ghsa-m44j-cfrm-g8qc...

PT-2026-86112

Package orientdb version 3.2.38-r0 fixes 10 vulnerabilities: ghsa-78wr-2p64-hpwj, ghsa-8xfc-gm6g-vgpv, ghsa-4h8f-2wvx-gg5w, ghsa-v435-xc8x-wvr9, ghsa-m44j-cfrm-g8qc...

CVE-2019-25448

OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payloads in the name parameter. Attackers can send POST requests to the document endpoint with JavaScript code in the name field to...

CVE-2019-25447

OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious requests to endpoints like /database/, /command/, and /document/. Attackers can create or delete databases, modify schema classes,...