legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2021-44521

CVE-2021-44521 Automated PoC of CVE-2021-44521 Credits to original poc: https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-functions-for-remote-code-execution/ Requirements Cassandra-driver pip3 install cassandra-driver Usage python3 poc.py Note that you can't do more...

grafeo

ACT Platform is now called grafeo! Grafeo is a versatile platform to create custom data models, collect and share knowledge. It is a flexible, well-rounded solution that can be used for any purpose. Developed as part of the ACT research project, it remains at the core of ACT and powers the ACT...

potential-cassandra

CVE-2024-23114 Prepare the enviroment We'll need a Mysql instance docker run --rm -d --name cassandra -p 9042:9042 cassandr Now we'll need to create the required tables: You have two files: employee.sql and employeecompleted.sql Run the following command: docker exec -it cassandra bash...

MAD-CAT

MAD-CAT Meow Attack Data Corruption Automation Tool Overview MAD-CAT Meow Attack Data Corruption Automation Tool is a comprehensive security tool designed to simulate data corruption attacks against multiple database systems. The tool supports both single-target attacks and bulk CSV-based attack...

CLSA-2026-1794439943 TuxCare security update for @opentelemetry/instrumentation-cassandra-driver (1 CVE)

TuxCare rebuilt @opentelemetry/instrumentation-cassandra-driver to address 1 CVE. Fixed in 0.40.0-tuxcare.4...

CLSA-2026-1794423755 TuxCare security update for @opentelemetry/instrumentation-cassandra-driver (1 CVE)

TuxCare rebuilt @opentelemetry/instrumentation-cassandra-driver to address 1 CVE. Fixed in 0.44.0-tuxcare.1...

CLEANSTART-2026-FS74530 Security fix for GHSA-pr98-23f8-jwxv applied in: cassandra-reaper-fips 3.8.0-r3, cassandra-fips 4.0.19-r2

GHSA-pr98-23f8-jwxv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IZ40849 Security fix for GHSA-wjpw-4j6x-6rwh applied in: cassandra-reaper-fips 3.8.0-r3, stargate 2.0.44-r4

GHSA-wjpw-4j6x-6rwh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TN60409 Security fix for GHSA-qh8g-58pp-2wxh applied in: cassandra-reaper-fips 3.8.0-r3, stargate 2.0.44-r4

GHSA-qh8g-58pp-2wxh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SV22027 Security fix for GHSA-c4qc-4q9p-m9q9 applied in: cassandra-reaper-fips 3.6.1-r1

Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MS85875 Security fix for GHSA-j288-q9x7-2f5v applied in: cassandra-reaper-fips 3.8.0-r3, logstash-fips 9.0.8-r2

GHSA-j288-q9x7-2f5v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JK34472 In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack ...

CVE-2024-27137 affects multiple packages. In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX...

CLEANSTART-2026-CA79621 Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra

CVE-2025-23015 affects multiple packages. Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. See references for individual vulnerability details...

CLEANSTART-2026-EI49719 Security fix for GHSA-25qh-j22f-pwp8 applied in: cassandra-reaper-fips 3.8.0-r3, cassandra 5.0.6-r1, cassandra-fips 5.0.6-r1

GHSA-25qh-j22f-pwp8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VA86965 Security fix for GHSA-72hv-8253-57qq applied in: confluent-kafka 8.2.0-r0, cassandra-reaper-fips 4.0.2-r2, cassandra-reaper-fips 3.8.0-r3, cassandra-reaper-fips 4.1.1-r1, keycloak 26.4.7-r3

GHSA-72hv-8253-57qq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WJ31300 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5

Security vulnerability affects the cassandra-reaper-fips package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...

CLEANSTART-2026-IW87835 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the cassandra-reaper-fips package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...

CLEANSTART-2026-OE93094 Uncontrolled Resource Consumption vulnerability in the HTTP/1

Security vulnerability affects the cassandra-reaper-fips package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...

CLEANSTART-2026-YD86854 Uncontrolled Recursion vulnerability in Apache Commons

Security vulnerability affects the cassandra-reaper-fips package. Uncontrolled Recursion vulnerability in Apache Commons...