perwendel__spark_CVE-2018-9159_2-7-1

Spark - 一个面向 Java 8 的微型 Web 框架 新闻 ：Spark 2.7.0 已发布。请试用它并报告任何 bug。 root@kitploit: com.sparkjava spark-core 2.7.0 重要提示 - 较旧版本的 Spark（低于 2.5.2 的版本）存在一个漏洞。请升级到最新版本。 文档请访问：http://sparkjava.com/documentation 使用问题请使用 带有 “spark-java” 标签的 Stack Overflow Javadoc：http://javadoc.io/doc/com.sparkjava/spark-co...

apache-struts-cve-2017-9805

The Apache Struts web framework Apache Struts 웹 프레임워크는 Java 웹 애플리케이션을 만들기 위한 무료 오픈소스 솔루션입니다. 웹 애플리케이션은 동적 응답을 생성할 수 있다는 점에서 기존의 웹사이트와 다릅니다. 많은 웹사이트는 정적 페이지만 제공합니다. 웹 애플리케이션은 데이터베이스 및 비즈니스 로직 엔진과 상호 작용하여 응답을 맞춤화할 수 있습니다. JavaServer Pages 기반 웹 애플리케이션은 때때로 데이터베이스 코드, 페이지 디자인 코드, 제어 흐름 코드를 한데 섞어 놓기도...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Scanner de rede rápido para CVE-2025-64459 vulnerabilidade de injeção SQL no Django. Instalação root@kitploit: pip install -r requirements.txt Uso root@kitploit: Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t...

CVE-2025-55182

これは create-next-app でブートストラップされた Next.js プロジェクトです。 はじめに まず、開発サーバーを起動します： root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev 結果を確認するには、ブラウザで http://localhost:3000 を開いてください。 app/page.tsx を変更することでページの編集を開始できます。ファイルを編集すると、ページは自動的に更新されます。 このプロジェクトは、Vercel 用の新しいフォントファミリーである Geist...

kurukshetra

Kurukshetra Kurukshetra ist ein Webframework, das mit dem Ziel entwickelt wurde, das erste Open-Source-Framework zu sein, das eine solide Grundlage bietet, um relativ komplexe Secure-Coding -Herausforderungen zu hosten, während es gleichzeitig die Möglichkeit bietet, jede Herausforderung basieren...

VUL4J-23

Job IT tests launcher. This project runs a test launcher that creates an OSGi instance with only what is required to run Server Side tests. Unfurtunately, since OSGi is a multi classloader environment its not possible to perform tests in this bundle, except tests over http as any references made ...

perwendel__spark_CVE-2018-9159_2_7_2_fixed

Spark - um micro framework web para Java 8 Novidades : Spark 2.7.1 foi lançado. Experimente e reporte quaisquer bugs. root@kitploit: com.sparkjava spark-core 2.7.1 Importante - Há uma vulnerabilidade em versões mais antigas do Spark versões anteriores à 2.5.2. Atualize para a versão mais recente...

awesome-nodejs-security

Una raccolta curata di eccezionali risorse per la sicurezza di Node.js. Impara le tecniche di codifica sicura di Node.js e le migliori pratiche da Liran Tal Contenuti Strumenti Indurimento dei Framework Web Analisi Statica del Codice Test di Sicurezza delle Applicazioni Dinamiche Validazione...

CVE-2021-3129

Esecuzione di codice remoto: Laravel CVE-2021-3129 📜 Descrizione Questo script è progettato per sfruttare la vulnerabilità di esecuzione di codice remoto RCE identificata in diverse versioni di Laravel, nota come CVE-2021-3129. Sfruttando questa vulnerabilità, lo script consente agli utenti di...

cve-2025-55182-poc

Grundlegende Informationen CVE-2025-55182 ist eine der am weitesten verbreiteten Schwachstellen in Web-Frameworks im Jahr 2025. React Server Components RSC sind inzwischen die vorherrschende Architektur moderner Next.js-Anwendungen. Eine Vielzahl von Standardprojekten, die mit create-next-app...

recon-test-livewire

Informazioni su Laravel Laravel è un framework per applicazioni web con una sintassi espressiva ed elegante. Crediamo che lo sviluppo debba essere un'esperienza piacevole e creativa per essere davvero appagante. Laravel elimina il dolore dallo sviluppo semplificando le attività comuni utilizzate ...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

CVE-2026-76345

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:58+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CLSA-2026-1786609421 TuxCare security update for org.grails (17 CVEs)

TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1...

0pflow (>=0.1.0-dev.2580522, <=0.1.0-dev.f5622ac), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +691 more potentially affected by CVE-2026-71849 via hono (>=4.7.0, <=4.12.33)

hono NPM version =4.7.0, =0.1.0-dev.2580522, =0.1.8-fix.3, =0.0.2, =0.1.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.0-pr-306-20260707164534, =0.9.0, =0.1.0, =0.1.5 and more Source cves: CVE-2026-71849 Source advisory: SNYK:JS-HONO-18592333...

EUVD-2026-54579

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy function in hono/proxy does not remove response headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1, an intermediary must remove the header...

UBUNTU-CVE-2026-63220

CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure trusted the X-Forwarded-Proto and Front-End-Https headers from any incoming request, allowing an attacker could spoof these headers and cause the application to incorrectly treat an HTTP request a...

UBUNTU-CVE-2026-59881

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory...

CVE-2026-59881

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory...

[SECURITY] Fedora 43 Update: perl-Mojolicious-9.48-1.fc43

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...