cve-2023-28771-demo

React + TypeScript + Vite Questo modello fornisce una configurazione minima per far funzionare React in Vite con HMR e alcune regole ESLint. Attualmente sono disponibili due plugin ufficiali: @vitejs/plugin-react utilizza Babel per il Fast Refresh @vitejs/plugin-react-swc utilizza SWC per il Fast...

CVE-2021-44228-Demo

CVE-2021-44228-Demo هذا المشروع لإثبات واختبار استغلال ثغرة log4j من نوع zero-day. التحقق من التبعية ./mvnw dependency:list التصحيح A عيّن متغير البيئة LOG4JFORMATMSGNOLOOKUPS=true B أضف خيار vm -Dlog4j2.formatMsgNoLookups=true C.1 أضف الخاصية log4j2.formatMsgNoLookups=true لا يعمل C.2 أضف الخاصي...

gradle-cve-2021-29427-demo

gradle-cve-2021-29427-demo gradle cve...

auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped

Summary Unescaped entity property enables Javascript injection. Details I think this is possible because %sourcelabel% in twig macro is not escaped. Therefore script tags can be inserted and are executed. PoC - clone example project https://github.com/DamienHarper/auditor-bundle-demo - create...