optionsbleed

optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: snallygaster -t optionsbleed host usage optionsbleed -h -n N -a -u hosttocheck Check for the...

CVE-2026-23918

CVE-2026-23918 Apache modhttp2 Double-Free Detector https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT --crash-threshold...

struts-splunk

struts-splunk Vuln Apache Struts with splunk...

CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability 🔐 --- 🔎 Overview CVE-2026-63292 is a stack-based buffer overflow vulnerability affecting the Apache HTTP Server modvhostalias module. The issue can be triggered under specific server configurations involving oversized HTTP Host headers...

CVE-2021-26295-Apache-OFBiz

CVE-2021-26295-Apache-OFBiz CVE-2021-26295 Apache OFBiz RMI deserialization POC You need to place ysoserial.jar in the directory, and you cannot use a high version of Java...

cve

CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling vulnerability in Apache...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introduction: Apache Struts 2 is an open source web application framework for developing Java EE Web applications,It is the second generation of the struts framework first released on 10th Oct 2006. Struts Framework is designed in a way that it helps creating Web...

log4j_CVE-2021-44228

This repository does not have a README...

homelab-CVE-2021-44228

Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 This repository contains a yaml-template, to scan whether a Service may be vulnerable to CVE-2025-24813, without disrupting the server/causing any form of damage, using the vulnerability scanner nuclei. CVE-2025-24813 CVE-2025-24813 is a vulnerability in the Apache Tomcat...

CVE-2022-46364-htb-ctf

DevArea SOAP Exploitation Tool CVE-2022-46364 Description This specialized exploit targets the DevArea environment on Hack The Box. It leverages a critical vulnerability in Apache CXF 3.2.14 CVE-2022-46364 to perform Local File Inclusion LFI and Server-Side Request Forgery SSRF. The script abuses...

CVE-2026-34197

🚨 CVE-2026-34197 — Critical Jolokia RCE in Apache ActiveMQ Authenticated RCE via Jolokia MBeans → Remote Spring XML → JVM Code Execution 📖 Overview CVE-2026-34197 is a high-severity authenticated remote code execution vulnerability affecting Apache ActiveMQ Classic. The issue exists in the Joloki...

CVE-2026-106449 vulnerabilities

Vulnerabilities for packages: akhq, cassandra-reaper, apache-pulsar, druid, sonarqube, logstash, wildfly, cassandra, strimzi-kafka-operator, opensearch, kafka...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: akhq, cassandra-reaper, apache-pulsar, druid, sonarqube, logstash, wildfly, cassandra, strimzi-kafka-operator, opensearch, kafka...

CVE-2026-106453 vulnerabilities

Vulnerabilities for packages: akhq, cassandra-reaper, apache-pulsar, druid, sonarqube, logstash, wildfly, cassandra, strimzi-kafka-operator, kafka...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: akhq, cassandra-reaper, apache-pulsar, druid, sonarqube, logstash, wildfly, cassandra, opensearch, kafka...

GHSA-6CX8-RJF8-PR8G vulnerabilities

Vulnerabilities for packages: akhq, cassandra-reaper, apache-pulsar, druid, sonarqube, logstash, wildfly, cassandra, strimzi-kafka-operator, kafka...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: akhq, cassandra-reaper, apache-pulsar, druid, sonarqube, logstash, wildfly, cassandra, opensearch, kafka...

CVE-2022-22965

CVE-2022-22965 aka "Spring4Shell" RCE vulnerability in Spring Framework via Data Binding on JDK 9+ The goal is to centralize as much publicly known information as possible to date about the vulnerability and to know what actions to take in such a case. Is my application vulnerable? The conditions...

AirFlow < 2.4.0 - Remote Code Execution

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. id: CVE-2022-40127 info: name: AirFlow 2.4.0 -...