1180 matches found
zap-scripts
zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...
android-check
Android Check Static code analysis plugin for Android project. Usage Modifications in /build.gradle: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... Modifications in //build.gradle: apply plugin: 'com.noveogroup.android.check' Configuration...
android-app
ProtonVPN for Android Copyright c 2019 Proton AG Download !Get it on GitHubhttps://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d05d928d646a676...
automatic-api-attack-tool
Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...
creadur-rat-gradle
Apache RAT Release Audit Tool Gradle Plugin This plugin allows to run the Apache RAT release audit tool, focused on licenses. Installation In your build.gradle.kts file: plugins id"org.nosphere.apache.rat" version "0.8.1" Usage The plugin registers a task named rat that you can configure in your...
Spring4Shell
Spring4Shell How to build? gradle build How to install? Load the Spring4shell in the Burp Extender tab...
diffplug__goomph_CVE-2022-26049_3-37-1
Goomph: IDE as build artifact Also plugins for working with SWT, OSGi, p2, and Eclipse RCP IDE-as-build-artifact. It is possible to have many installations of the Eclipse IDE share a common set of installed artifacts, called a "bundlepool". This means it is fast and efficient to get a purpose-bui...
gradle-cve-2021-29427-demo
gradle-cve-2021-29427-demo gradle cve...
4062-1
Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: aftersuccess: - bash curl -s...
CVE-2022-0219
CVE-2022-0219 Jadx is vulnerable to Improper Restriction of XML External Entities CWE-611 when exporting a malicious APK file via the -e option containing a crafted AndroidManifest.xml / strings.xml to gradle. It can lead to local file disclosure when using it from the CLI. When used as a library...
gradle-static-analysis-plugin
DEPRECATED Gradle static analysis plugin ⚠️ A fork of this project is maintained at https://github.com/GradleUp/static-analysis-plugin/ Please migrate by using com.gradleup.static-analysis plugin id instead. A Gradle plugin to easily apply the same setup of static analysis tools across different...
GHSA-RR8V-FXXF-C986 Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization
Summary ShadowCopyAction in the Shadow plugin does not validate or sanitize ZIP entry names before writing them to the output fat JAR. A malicious upstream dependency containing path traversal sequences e.g. ../../../../tmp/pwned.txt in entry names will have those entries reproduced verbatim in t...
Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization
Summary ShadowCopyAction in the Shadow plugin does not validate or sanitize ZIP entry names before writing them to the output fat JAR. A malicious upstream dependency containing path traversal sequences e.g. ../../../../tmp/pwned.txt in entry names will have those entries reproduced verbatim in t...
EUVD-2026-118393
Gradle Shadow: Zip Slip path traversal in ShadowCopyAction — no independent entry-name sanitization...
CLSA-2026-1794245205 TuxCare security update for org.jetbrains.kotlin:kotlin-gradle-plugin (1 CVE)
TuxCare rebuilt org.jetbrains.kotlin:kotlin-gradle-plugin to address 1 CVE. Fixed in 1.9.25-tuxcare.1...
CLEANSTART-2026-WB83949 vulnerability was found in cbeust testng 7
Security vulnerability affects the gradle package. A vulnerability was found in cbeust testng 7...
CLEANSTART-2026-HF00073 In Bouncy Castle for Java before 1
Security vulnerability affects the gradle package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-WQ05695 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator
Security vulnerability affects the gradle package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator...