dasel-hardened-container

dasel v3.3.1 hardened container This is a melange package and apko container image for dasel v3.3.1 with a build-time patch for CVE-2026-33320 unbounded YAML alias expansion. The image is built entirely from a locally-produced APK - no prebuilt upstream image is used. Prerequisites Tool| Tested...

Minimus-Junior-Backend-Exercise

Junior Backend Exercise — dasel v3.3.1 Package dasel v3.3.1 with Melange, build a container image with apko, and fix CVE-2026-33320. Prerequisites: Docker. All build steps run inside containers — no local melange/apko install needed. Run all commands from the repo root on linux/amd64 or Docker...

EUVD-2026-92443

Northstar dromara/northstar, quantitative trading platform = 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/, so /h2-console is exposed with no authentication and the embedded H2 DB uses default sa / empty password. Any network-reachable attacker can run arbitrary...

CVE-2026-88391

Northstar (dromara/northstar, quantitative trading platform) versions

CVE-2026-88391

Northstar dromara/northstar, quantitative trading platform = 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/, so /h2-console is exposed with no authentication and the embedded H2 DB uses default sa / empty password. Any network-reachable attacker can run arbitrary...

cve-2021-41773

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

cve-2021-41773-v-

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

Django-faille-CVE-2025-57833_test

Prueba de la vulnerabilidad de inyección SQL mediante alias en Django Definición: ¿Qué es un alias? Un alias es un nombre dado a una columna o a un resultado de agregación en una consulta SQL. En Django, los alias se utilizan con los métodos annotate o alias para nombrar campos calculados. Ejempl...

CVE-2021-41773m

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2021-42013

CVE-2021-42013 - Apache 2.4.50 Path Traversal y Ejecución Remota de Código RCE ⚠️ Solo para fines educativos y de investigación de seguridad autorizada Autores del Exploit Original Muy agradecidos al autor original del PoC Walnut Security Services Pvt. Ltd Descripción Un atacante podría utilizar u...

CVE-2023-44770_ZenarioCMS--Reflected-XSS---Organizer-Alias

ZenarioCMS Reflected XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias. Attack Vectors: Scripting a vulnerability in the sanitization of the...

CVE-2021-41773

CVE-2021-41773 PoC — Apache HTTP Server Path Traversal Overview CVE-2021-41773 is a path traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability allows an attacker to access files outside the intended directory under specific configurations, particularly when directories ar...

CVE-2021-28664-PoC

CVE-2021-28664-PoC Mali kbase GPU driver UAF CVE-2021-28664 → kernel arbitrary physical memory read/write primitive PoC skeleton. Targets generic ARM64 Android platforms, independent of any specific vendor or device model. Research scope stops at "kernel arbitrary physical memory read/write...

CVE-2021-42392-exploit-lab

⚠️ PoC de Exploit RCE en Base de Datos H2 CVE-2021-42392 Este repositorio proporciona un entorno mínimo y controlado para probar la vulnerabilidad de Ejecución Remota de Código en la Base de Datos H2 CVE-2021-42392 utilizando la función CREATE ALIAS. A diferencia de muchas demostraciones, este...

CVE-2021-41773

CVE-2021-41773 solo Apache httpd 2.4.49 Solo con fines educativos. Consulta la Referencia para obtener los detalles. Ejecución $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 Explotación...

aggressor_snippets

aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias Path Handling PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑27654 , a heap‑overflow vulnerability in the ngxhttpdavmodule of nginx. The bug arises from a size‑t underflow when handling MOVE/COPY requests with specially craft...

CVE-2026-11103-GraphQL-Batching-Alias-Rate-Limit-Bypass

3. CVE-2026-11103 – GraphQL Batching Alias Rate Limit Bypass Program Code Node.js + Python Exploit // graphqlratelimitserver.js - GraphQL with naive rate limiter const express = require'express'; const graphqlHTTP = require'express-graphql'; const buildSchema = require'graphql'; const schema =...

aztarna

Este repositorio ha sido archivado y ya no se mantiene. Consulte alurity para futuros avances en footprinting y fingerprinting de robots. aztarna Este repositorio contiene aztarna de Alias Robotics, una herramienta de footprinting para robots. Alias Robotics apoya a los fabricantes originales de...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...