proxify

Features • Installation • Usage • Running Proxify • Installing SSL Certificate • Applications of Proxify • Join Discord Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

zirgen

Zirgen Circuit Compiler Zirgen is a compiler for a domain-specific language, also called "zirgen", which creates arithmetic circuits for the RISC Zero proof system. For the most part, users of RISC Zero should be writing their zkApps in Rust and using our RISC-V zkVM rather than building them...

declarative-policy

DeclarativePolicy: A Declarative Authorization Library This library provides a DSL for writing authorization policies. It can be used to separate logic from permissions, and has been used at scale in production at GitLab.com. The original author of this library is Jeanine Adkisson, and copyright ...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

CVE-2021-3166

An issue was discovered on Asus DSL-N14UB1 v.1.1.2.3805. An attacker can upload any file to the Firmware box as long as it is renamed as SettingsProductName.trx eg. SettingsDSL-N14U-B1.trx. Once the file is loaded, shutdown measures on a wide range of services are triggered as if it were a real...

CVE-2018-8941

CVE-2018-8941: D-Link DSL-3782 Code execution Proof of Concept Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys The buffer overflow vulnerability was found in the "/userfs/bin/tcapi" binary which is used as a wrapper for the "Diagnostics"...

DSL-2750U-Full-chain

firmware-analysis 1. DSL-2750U Bugs : misconfiguration of tftp server CVE-2021-3707 command injection bug CVE-2021-3708...

CVE-2021-46108

CVE-2021-46108 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ D-Link Router DSL-2730E - Stored Cross Site Scripting D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the...

fuzzuf

fuzzuf Build Status fuzzuf fuzz ing u nification f ramework is a fuzzing framework with its own DSL to describe a fuzzing loop by constructing building blocks of fuzzing primitives. For build instructions and a tutorial, please follow building.md and tutorial.md. Why use fuzzuf? fuzzuf enables a...

CVE-2022-32988

CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored cross-site...

D-Link DSL 2888a - Authentication Bypass/Remote Command Execution

D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55 are vulnerable to authentication bypass issues which can lead to remote command execution. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality. id: CVE-2020-24579 info: name: D-Li...

CVE-2026-56139

camel-undertow Rest DSL muteException Stack-Trace Disclosure Reproducer CVE-2026-56139 This project demonstrates an information-disclosure issue in Apache Camel's camel-undertow Rest DSL consumer, tracked as CVE-2026-56139. The muteException option controls whether an uncaught processing...

CVE-2026-61620

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL DSL by calling keyword or symbol on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a JDBC driver. So...

CVE-2026-61620 HoneySQL unchecked entity names can lead to SQL injection results

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL DSL by calling keyword or symbol on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a JDBC driver. So...

CVE-2026-61620

The HoneySQL library (versions 2.0.0 through 2.7.1392 ) is vulnerable to SQL injection when user input or arbitrary data is passed into the HoneySQL DSL via keyword or symbol calls. The root cause is that some formatters fail to apply suspicious-character checks to the resulting entity names, whi...

EUVD-2026-114395

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL DSL by calling keyword or symbol on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a JDBC driver. So...

CVE-2026-61620: seancorfield honeysql: HoneySQL turns Clojure data structures into SQL

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL DSL by calling keyword or symbol on that input can produce SQL strings that facilitate SQL injection when executed unchanged by a JDBC driver. So...

io.hawt.examples:hawtio-example-springboot (>=4.0.0, <=4.2.0), io.hawt.examples:hawtio-example-springboot-log4j2 (>=4.1.0, <=4.2.0) +10 more potentially affected by CVE-2026-85313 via org.apache.camel:camel-jetty-common (>=4.0.0, <=4.18.4)

org.apache.camel:camel-jetty-common MAVEN version =4.0.0, =4.0.0, =4.1.0, =4.7.0, =4.0.0, =4.5.0, =4.5.0, =4.5.0, =4.0.0, =5.0-m1, =5.0-m1, =0.1.9, =0.1.6, =2025.1.0.0 Source cves: CVE-2026-85313 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429386...