React Router Vulnerable to Cross-Site Scripting (XSS) via Redirect Location Mishandling (CVE-2026-22029)

React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router and Remix v1/v2 SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs...

PT-2026-106809

Name of the Vulnerable Software and Affected Versions Quasar Framework versions prior to 2.32.2 Description The openURL utility in ui/src/utils/open-url/open-url.js incorrectly trusts window.SafariViewController in iOS environments. When components like QEditor, QSelect, or QChatMessage render...

PT-2026-106810

Name of the Vulnerable Software and Affected Versions Quasar Framework versions prior to 2.22.0 Description The SSR-only getHead serializer in ui/src/plugins/meta/Meta.js uses getAttr to interpolate values provided via useMeta into title, meta, link, and script markup without proper HTML text or...

perwendel__spark_CVE-2018-9159_2_7_2_fixed

Spark - a tiny web framework for Java 8 NEWS : Spark 2.7.1 is out. Please try it out and report any bugs. com.sparkjava spark-core 2.7.1 Important - There is a vulnerability in older versions of Spark versions lower than 2.5.2. Please upgrade to the latest version. For documentation please go to:...

Log4Shell-PoC-Application

☕ Log4Shell PoC Application Spring framework based web application for proof of concept for log4shell vulnerabilities Install & Launch !Important JDK 1.88u131 in development is required to launch this project Use the provided Dockerfile to build and run the Docker image for poc application. docke...

pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

CVE-2022-22965_Spring4Shell

CVE-2022-22965Spring4Shell CVE-2022-22965 Spring4Shell, SpringShell is a vulnerability in the Spring Framework that uses data binding functionality to bind data stored within an HTTP request to certain objects used by an application. The bug exists in the getCachedIntrospectionResults method, whi...

perwendel__spark_CVE-2018-9159_2-7-1

Spark - a tiny web framework for Java 8 NEWS : Spark 2.7.0 is out. Please try it out and report any bugs. com.sparkjava spark-core 2.7.0 Important - There is a vulnerability in older versions of Spark versions lower than 2.5.2. Please upgrade to the latest version. For documentation please go to:...

WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LevinityCyber in WordPress Plugin GDPR Framework By Data443 versions = 2.5.0...

CVE-2022-22965

CVE-2022-22965 Spring4Shell CVE-2022-22965 Usage 1. show info ❯ go run main.go -s INF VulnInfo: "Name": "CVE-2022-22965", "VulID": "nil", "Version": "1.0", "Author": "", "VulDate": "2022-03-30", "References": "https://nosec.org/home/detail/4983.html" , "AppName": "Spring Core", "AppPowerLink":...

CVE-2020-5398

CVE-2020-5398 - RFDReflected File Download Attack for Spring MVC In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header...

CVE-2017-8759

Exploit toolkit for CVE-2017-8759 Do not be an asshole Simple tool written in C to handle the RCE vulnerability in .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7. aka ".NET Framework Remote Code Execution Vulnerability." Help C:\Users\Jonas Uliana\toolsCVE-2017-8759.exe /h INFO ...

CVE-2022-22965

Spring Framework Remote Code Execution Vulnerability CVE-2022-22965 Analysis Code Analysis on BiliBili:https://www.bilibili.com/video/BV1jY4y1H7EC...

FreePBX-Vulns-December-25

FreePBX Vulnerabilities - December 2025 This repository contains Nuclei templates for detecting three critical vulnerabilities in FreePBX: CVE-2025-61675 : Authenticated SQL Injection CVSS 8.6 - Affects endpoint module CVE-2025-61678 : Authenticated Arbitrary File Upload CVSS 8.6 - Affects endpoi...

cve-2021-38314

CVE-2021-38314 Python Exploit Detail The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php that were unique to a given site but deterministic and...

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

shisoserial

shisoserial What is this A simple tool targeted at shiro framework attacks with ysoserial. Contributor 4nth0ny @Fridaylab Runtime python 3.x JDK 1.8 Installation python3 -m pip install -r requirements.txt for AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODEGCM' or No module named...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

CVE-2025-55182

🔔 ⚠️ Unauthorized penetration testing is prohibited Build Steps go get fyne.io/fyne/v2@latest go build -ldflags="-s -w" . Screenshots...

CVE-2022-22965-PoC

CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run the exploit...