mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

MemoryShellHunter

MemoryShellHunter Java Agent memory horse scanner combined with Call Graph modus About MemoryShellHunter is a memory shell Scanner/Killer tool that combines dynamic Building Call Graph. It supports Agent and Attach modes for detection, addressing the issue that conventional memory shell detection...

log4j2-hack-springboot

log4j2-hack-springboot...

SpringBoot_Actuator_RCE

swagger-ui Interface /swagger-ui.html SpringBoot env: Obtaining Sensitive Information Masked with Part 1 When we directly visit the springboot site, we can see that some password fields are filled with 1. Plaintext fields can be obtained via $name 2. Misconfiguration leads to sensitive informatio...

log4j-test

Simple Example showing CVE-2021-44228 in action Explanation To reproduce this issue, I am removing the transitive dependency for logging from SpringBoot. Instead, I am bringing in spring-boot-starter-log4j2 spring-boot-starter-log4j2 brings in log4j-core which has the remote code exploit RCE...

org.apache.camel.quarkus:camel-quarkus-integration-test-jackson-protobuf (>=3.38.0, <=3.40.0), org.apache.camel.quarkus:camel-quarkus-jackson-protobuf (>=3.38.0, <=3.40.0) +18 more potentially affected by CVE-2026-104016 via com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf (>=2.22.0, <=2.22.2)

com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf MAVEN version =2.22.0, =3.38.0, =3.38.0, =3.38.0, =4.21.0, =4.21.0, =4.21.0, =0.6.2, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.8 and more Source cves:...

org.apache.camel.quarkus:camel-quarkus-integration-test-jackson-protobuf (>=3.38.0, <=3.40.0), org.apache.camel.quarkus:camel-quarkus-jackson-protobuf (>=3.38.0, <=3.40.0) +18 more potentially affected by CVE-2026-110747 via com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf (>=2.22.0, <=2.22.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf MAVEN version =2.22.0, =3.38.0, =3.38.0, =3.38.0, =4.21.0, =4.21.0, =4.21.0, =0.6.2, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.8 and more Source cves:...

org.apache.camel.quarkus:camel-quarkus-integration-test-jackson-protobuf (>=3.38.0, <=3.40.0), org.apache.camel.quarkus:camel-quarkus-jackson-protobuf (>=3.38.0, <=3.40.0) +18 more potentially affected by CVE-2026-104016 via com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf (>=2.22.0, <=2.22.3)

com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf MAVEN version =2.22.0, =3.38.0, =3.38.0, =3.38.0, =4.21.0, =4.21.0, =4.21.0, =0.6.2, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.1, =0.108.8 and more Source cves:...

org.apache.camel.karaf:camel-mail (4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-mail (3.33.3) +8 more potentially affected by CVE-2026-46584 +1 more via org.apache.camel:camel-mail (4.18.4)

org.apache.camel:camel-mail MAVEN version 4.18.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-mail and may be impacted: - org.apache.camel.karaf:camel-mail 4.18.4 - org.apache.camel.quarkus:camel-quarkus-integration-test-mail...

cn.net.autocode:autocode-core (1.2.8), cn.net.autocode:autocode-platform (>=2.6.3, <=2.6.8) +337 more potentially affected by CVE-2026-85473 via com.auth0:java-jwt (>=4.6.0, <=4.6.1)

com.auth0:java-jwt MAVEN version =4.6.0, =2.6.3, =5.8.0, =1.3.6, =1.4.2 - com.codeheadsystems:hofmann-dropwizard 3.0.0 - com.codeheadsystems:hofmann-server 3.0.0 - com.codeheadsystems:hofmann-springboot 3.0.0 - com.fonrouge.fslib:fullstack-jvm 6.4.0 - com.fonrouge.fslib:media-jvm 6.4.0 -...

CVE-2026-97063

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email addresses, read them from responses, and...

CVE-2026-97064

X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated attackers can authenticate as any user by submitting the public master code to the emailOrMobileLogin endpoint with a known email or mobile number...

CVE-2026-97060

X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership verification. Attackers with user-management permissions can reset passwords for any account including the super administrator, rebind...

CVE-2026-100192

X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages through any tenant's SMS provider,...

EUVD-2026-87256

X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated attackers can authenticate as any user by submitting the public master code to the emailOrMobileLogin endpoint with a known email or mobile number...

CVE-2026-97064 X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated attackers can authenticate as any user by submitting the public master code to the emailOrMobileLogin endpoint with a known email or mobile number...

CVE-2026-97064 X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated attackers can authenticate as any user by submitting the public master code to the emailOrMobileLogin endpoint with a known email or mobile number...

CVE-2026-97064

The X-SpringBoot framework (versions through 6.0 ) contains an authentication bypass vulnerability due to a hardcoded static master login verification code, 172839 , which is enabled by default in the database seed. Unauthenticated attackers can gain access to any user account by providing a know...

CVE-2026-97063 X-SpringBoot through 6.0 Authentication Bypass via Login Code

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email addresses, read them from responses, and...

CVE-2026-97063 X-SpringBoot through 6.0 Authentication Bypass via Login Code

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email addresses, read them from responses, and...