log4j2-CVE-2021-45105

Sample Log4j2 vulnerable application CVE-2021-45105 影響を受けるバージョン: 2.0-beta9 から 2.16.0 までの全バージョン このアプリケーションは、CVE-2021-45105 に対して脆弱な Spring Boot Web アプリケーションをベースとしています。 Log4j 2.16.0 を使用しています。 アプリケーションの実行 実行する: Import the project in Java IDE as a maven project Run CVEMainApplication.java as a spring...

log4j-vulnerability

Log4Shell（CVE-2021-44228）是 Log4j 中的一个零日漏洞 Log4J 漏洞 发现日期： 2021年11月24日 修复日期： 2021年12月6日 攻击演示 点击下方观看YouTube视频 示例应用 该示例应用是一个Spring Boot应用，使用log4j作为日志框架，并在本地主机的8080端口上运行，同时设置了以下环境变量 观看视频说明： https://youtu.be/bb6pgWrm7tA 环境变量 key=jason.bourne;secret=Treadstone 攻击 POST...

android-pentest-tool

Android 渗透测试工具 专为 Kali Linux 设计 javaFX + Spring boot + bash 脚本 一键完成所有常规步骤 更新 已发布 1.0 版本！ 构建 mvn clean package 运行 java -jar target/android-pentest-tool.jar 待办事项： 添加安装步骤 添加功能列表 更多截图 Bug 修复 添加自定义 Intent 发送器 添加打开 URL 的 Intent 截图 使用的工具 https://github.com/google/android-classyshark...

CVE-2024-22262

Spring CVE-2024-22262 概念验证 此仓库包含一个开发容器环境和正确版本的 Spring 应用程序，专门用于探索此 CVE。 设置说明 将此仓库克隆到你的机器上，并使用 Docker 和你喜欢的 IDE。 或者 在线使用 GitPod，地址为 https://gitpod.io/ 或者 使用 GitPod Desktop： 1. 下载 GitPod Desktop 并安装。 2. 点击“Projects”。 3. 点击“New Environment”。 4. 提供此仓库的 URL。 在你上面选择的开发环境中： 1. 运行应用程序： cd...

CVE-2021-44228-poc

Log4Shell サンプル脆弱性アプリケーション CVE-2021-44228 これは https://github.com/christophetd/log4shell-vulnerable-app のほぼコピー/類似した脆弱性アプリケーションです。 主な違いは、gradle ではなく maven を使用していることと、rogue-jndi を使用していることです。 このリポジトリには、CVE-2021-44228（通称 Log4Shell）に対して脆弱な maven Spring Boot Web アプリケーションが含まれています。Log4j 2.6.1 と JDK バージョン...

ROOT-APP-MAVEN-CVE-2026-40973 CVE-2026-40973 in org.springframework.boot:spring-boot - Patched by Root

Root has patched CVE-2026-40973 in the org.springframework.boot:spring-boot package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-20883 CVE-2023-20883 in org.springframework.boot:spring-boot-autoconfigure - Patched by Root

Root has patched CVE-2023-20883 in the org.springframework.boot:spring-boot-autoconfigure package for Root:Maven. Multiple fixed versions available...

CVE-2026-97060: Authorization Bypass Through User-Controlled Key

X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership verification. Attackers with user-management permissions can reset passwords for any account including the super administrator, rebind...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.4 for Spring Boot release.

Red Hat build of Apache Camel 4.18.4 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Improper Authorization

LogNet grpc-spring-boot-starter is vulnerable to improper authorization. The vulnerability is due to improper authorization in the Annotation Processing component, which allows an attacker to remotely bypass authorization controls and gain unauthorized access by exploiting the vulnerable...

CVE-2026-96881

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...

CVE-2026-96882

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96882

The TaleLin lin-cms-spring-boot software, specifically versions up to 0.2.1 , contains an improper authorization vulnerability. The issue resides in the searchBook function within the src/main/java/io/github/talelin/latticy/controller/v1/BookController.java file of the book Endpoint component. Th...

EUVD-2026-85779

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96882 TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96882 TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization

A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...

CVE-2026-96880

A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...

CVE-2026-96881 TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...

CVE-2026-96881

The TaleLin lin-cms-spring-boot software, version up to 0.2.1 , contains an improper authorization vulnerability in the book Endpoint. Specifically, the getBooks function within the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java is susceptible to manipulation. This...

CVE-2026-96881 TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization

A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attac...