302 matches found
MemoryShellHunter
MemoryShellHunter Java Agent memory horse scanner combined with Call Graph modus About MemoryShellHunter is a memory shell Scanner/Killer tool that combines dynamic Building Call Graph. It supports Agent and Attach modes for detection, addressing the issue that conventional memory shell detection...
mad-metasploit
Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework...
log4j-test
Simple Example showing CVE-2021-44228 in action Explanation To reproduce this issue, I am removing the transitive dependency for logging from SpringBoot. Instead, I am bringing in spring-boot-starter-log4j2 spring-boot-starter-log4j2 brings in log4j-core which has the remote code exploit RCE...
log4j2-hack-springboot
log4j2-hack-springboot...
SpringBoot_Actuator_RCE
Interfaccia swagger-ui /swagger-ui.html SpringBoot env: recupero di informazioni sensibili Parte 1 Quando accediamo direttamente al sito springboot, possiamo vedere che alcuni campi password sono valorizzati con 1. Tramite $name è possibile ottenere il campo in chiaro 2. Una configurazione non...
CVE-2026-11521
Mohammed-eid35 bank-management-system-springboot (Transaction Endpoint) has a vulnerability in TransactionController.java leading to improper authorization. A remote attacker could exploit it, and public PoCs exist per the CVE metrics. Affected version details are not provided due to rolling rele...
CVE-2026-11521
A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...
CVE-2024-41600
Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...
CVE-2025-55948
CVE-2025-55948 describes a desynchronization bug in yzcheng90’s X-SpringBoot 6.0 RBAC, arising from dual reliance on frontend menu states and backend permission tables without atomic synchronization. The flaw allows UI to revoke privileges while stale backend permissions still authorize API reque...
X-SpringBoot 安全漏洞
X-SpringBoot is a lightweight Java rapid development platform for czx individual developers. A security vulnerability exists in X-SpringBoot version 6.0, which stems from the unsynchronized front-end and back-end privilege components and could lead to an elevation of privilege attack...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
EUVD-2025-36546
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
PT-2025-44193
Name of the Vulnerable Software and Affected Versions blog-vue-springboot affected versions not specified Description An issue exists that allows for the unauthorized modification of articles. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
CVE-2025-60354
CVE-2025-60354 affects blog-vue-springboot and describes an unauthorized modification of arbitrary articles vulnerability. The consolidated details indicate an impact to integrity (I) with a HIGH severity (CVSSv3.1: 7.5) and no confidentiality or availability impact. Exploitation vectors/exploits...
blog-vue-springboot 安全漏洞
blog-vue-springboot is a blog project by the individual developer Minghui Shi. A security vulnerability exists in blog-vue-springboot that stems from allowing unauthorized arbitrary post modifications...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...