CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

CVE-2024-38828

CVE-2024-38828 Vulnerability Description The test checks behavior/reaction in Spring Framework with and without the CVE-2024-38828 vulnerability. In ByteArrayHttpMessageConverter, memory is allocated in ByteArrayOutputStream based on the Content-Length request header, which may not match reality ...

blackash-cve-2025-6389

🔥 CVE-2025-6389 — Critical WordPress Zero-Day RCE wpvultheme 🧩 What is it? CVE-2025-6389 is a Critical CVSS 9.8 vulnerability in the Sneeit Framework WordPress plugin ≤ 8.3, widely used by popular themes. It allows unauthenticated remote code execution — the most dangerous class of web...

TriSuElla-AIDLCA-Framework

🔱 TriSuElla-AIDLCA Framework One Unified Continuous Trust, Risk, Security & Compliance Layer for Conventional Systems, Generative AI & Autonomous Multi-Agent Workloads Software Version : 3.4.0 | Framework Version : 3.4.0 | Status : Institutionalized Production-Ready, DevSecOps-Ready & CI-Verified...

CVE-2024-38819-POC

CVE-2024-38819: Proof of Concept PoC This is a proof of concept for the CVE-2024-38819 vulnerability, which I reported, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t...

testng-team__testng_CVE-2022-4065_7-5

Documentation available at TestNG's main web site. Release Notes 7.4.0 7.3.0 7.1.0 7.0.0 Need help? Before opening a new issue, did you ask your question on Google group...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Version Spring Framework 5.2.20 and 5.3.18 Patched version: Spring Framework 5.3.18 and 5.2.20 Spring Boot 2.6.6 and 2.5.12 Details Spring Core is the core component of Spring Framework. This is the foundation to build other components in the Spring Framework...

React2Shell

🚀 R2S - Next.js RSC Exploit Framework Advanced Post-Exploitation Framework for Next.js React Server Components RCE Features • Installation • Usage • Commands • Examples 📋 Overview R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components...

westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Apache APISIX Dashboard earlier versions 2.10.1 has security vulnerability on unauthorized access. the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on...

phishing-frenzy

Phishing Frenzy Framework de Phishing en Ruby on Rails Documentación e Información La documentación relevante y actualizada se puede encontrar en el sitio web oficial de Phishing Frenzy que se muestra a continuación Sitio web de Phishing Frenzy Por favor, envía cualquier ticket o incidencia a la...

TekDefense-Automater

TekDefense-Automater Version: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater is a tool that I originally created to automate the OSINT analysis of IP addresses. It quickly grew and became a tool to do...

spring-boot-cve-2022-22965

= Spring Framework 版本覆盖示例 此仓库展示了如何覆盖基于 Spring Boot 2.4 的应用程序中的 Spring Framework 版本。 Spring Boot 2.4.x 已 https://spring.io/projects/spring-bootsupport超出 OSS 支持，最新版本为 2.4.13。它使用的 Spring Framework 5.3.13 容易受到 https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcementCVE-2022-22965 的影响...

CVE-2026-49049

CVE-2026-49049 — Helix3 JoomShaper Joomla Unauthenticated AJAX RCE Scanner Mass scanner / verifier for CVE-2026-49049 : unauthenticated AJAX handler in the Helix3 Framework plugin for Joomla v1.0 – 3.1.0 , patched in 3.1.1+. Authorized testing only. Use only on systems you own or have written...

springhound

springhound Created after the release of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and systems, allowing you to get insight on versions used. Unpacks JARs and analyzes their Manifest files. Usage: ./springhound.sh rootdirectory...

Modules

Modules Modules used by the Havoc Framework. Powerpick Powerpick implementation for the Havoc Framework. InvokeAssembly InvokeAssembly implementation for the Havoc Framework. Template This is the base template for the modules. You can use this to write your own modules for the Havoc Framework...

cve-2021-46422

Installation root@kitploit: git clone https://github.com/CJ-0107/cve-2021-46422 cd cve-2021-46422 Usage This tool is a PoC written according to the development specifications of the pocsuite3 framework. Please download pocsuite3 before use. Project address root@kitploit:...

log4shell-spring-framework-research

log4shell-spring-framework-research Research into the implications of CVE-2021-44228 in Spring based applications...

CVE-2022-22965

CVE-2022-22965 Spring4Shell 是 Java Spring 框架中的一个严重 RCE 漏洞，也是 3 月 30 日发布的三个相关漏洞之一。...

Spring4ShellPoC

Spring4ShellPoC Spring4Shell PoC CVE-2022-22965 Just playing with the exploit. Modified from the good work done by BobTheShopLifter, https://github.com/BobTheShoplifter/Spring4Shell-POC and TryHackMe, https://tryhackme.com/room/spring4shell Just a few tweaks. Added a some extra bits when checking...