log4j2-CVE-2021-45105

샘플 Log4j2 취약 애플리케이션 CVE-2021-45105 영향받는 버전: 2.0-beta9부터 2.16.0까지의 모든 버전 이 애플리케이션은 CVE-2021-45105에 취약한 Spring Boot 웹 애플리케이션을 기반으로 합니다. Log4j 2.16.0을 사용합니다. 애플리케이션 실행 실행 방법: Import the project in Java IDE as a maven project Run CVEMainApplication.java as a spring boot app. 익스플로잇 단계 그런 다음, 다음을 사용하여...

log4j-vulnerability

Log4Shell CVE-2021-44228은 Log4j의 제로데이 취약점입니다 Log4J 취약점 발견일: 2021년 11월 24일 패치일: 2021년 12월 6일 공격 데모 아래를 클릭하여 YouTube 동영상 보기 샘플 애플리케이션 이 샘플 애플리케이션은 Spring Boot 애플리케이션이며, log4j를 로깅 프레임워크로 사용하고 있으며, localhost의 8080 포트에서 다음 환경 변수로 실행됩니다. 영상 설명 확인: https://youtu.be/bb6pgWrm7tA 환경 변수...

android-pentest-tool

Android ペンテストツール Kali Linux向けに設計されています javaFX + Spring boot + bashスクリプト すべての日常的な手順をワンクリックで実行 アップデート バージョン1.0がリリースされました！ ビルド mvn clean package 実行 java -jar target/android-pentest-tool.jar TODO: インストール手順を追加 機能リストを追加 スクリーンショットを追加 バグ修正 カスタムインテント送信機能を追加 URLを開くインテントを追加 スクリーンショット 使用ツール...

CVE-2024-22262

Spring CVE-2024-22262 개념 증명 이 저장소는 이 CVE를 탐구하기 위해 특별히 올바른 버전의 Development Container 환경과 Spring 애플리케이션을 포함하고 있습니다. 설정 지침 저장소를 로컬 머신에 클론하고 Docker와 선호하는 IDE를 사용하세요. 또는 다음과 같이 GitPod 온라인을 사용하세요: https://gitpod.io/ 또는 GitPod Desktop 사용: 1. GitPod Desktop 다운로드 후 설치합니다. 2. Projects를 클릭합니다. 3. New...

CVE-2021-44228-poc

Log4Shell 샘플 취약한 애플리케이션 CVE-2021-44228 이는 https://github.com/christophetd/log4shell-vulnerable-app 과 거의 동일/유사한 취약한 애플리케이션입니다. 주요 차이점은 gradle 대신 maven을 사용하고 rogue-jndi를 사용한다는 점입니다. 이 저장소는 CVE-2021-44228에 취약한 maven Spring Boot 웹 애플리케이션을 포함하며, Log4Shell이라고 불립니다. Log4j 2.6.1 및 JDK 버전 1.8.0181을 사용합니다...

ROOT-APP-MAVEN-CVE-2026-40973 CVE-2026-40973 in org.springframework.boot:spring-boot - Patched by Root

Root has patched CVE-2026-40973 in the org.springframework.boot:spring-boot package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-20883 CVE-2023-20883 in org.springframework.boot:spring-boot-autoconfigure - Patched by Root

Root has patched CVE-2023-20883 in the org.springframework.boot:spring-boot-autoconfigure package for Root:Maven. Multiple fixed versions available...

CVE-2026-97060: Authorization Bypass Through User-Controlled Key

X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership verification. Attackers with user-management permissions can reset passwords for any account including the super administrator, rebind...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.4 for Spring Boot release.

Red Hat build of Apache Camel 4.18.4 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Improper Authorization

LogNet grpc-spring-boot-starter is vulnerable to improper authorization. The vulnerability is due to improper authorization in the Annotation Processing component, which allows an attacker to remotely bypass authorization controls and gain unauthorized access by exploiting the vulnerable...

CVE-2026-96881

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...

CVE-2026-96882

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96882

The TaleLin lin-cms-spring-boot software, specifically versions up to 0.2.1 , contains an improper authorization vulnerability. The issue resides in the searchBook function within the src/main/java/io/github/talelin/latticy/controller/v1/BookController.java file of the book Endpoint component. Th...

EUVD-2026-85779

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96882 TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96882 TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96880

A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...

CVE-2026-96881 TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...

CVE-2026-96881

The TaleLin lin-cms-spring-boot software, version up to 0.2.1 , contains an improper authorization vulnerability in the book Endpoint. Specifically, the getBooks function within the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java is susceptible to manipulation. This...

CVE-2026-96881 TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...