53 matches found
irule-cve-2022-22965
irule-cve-2022-22965 This is a basic iRule to provide some mitigation against CVE-2022-22965 a.k.a. Spring4Shell. Tested on BIG-IP 15.x. Overview On March 30, 2022, a remote code execution RCE vulnerability was found in the Java Spring Framework, identified by the CVE 2022-22965. I am sharing an...
Java Spring Detection
Detects Java Spring Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Java Spring Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Java Spring Detection', 'description': 'Detects Java Spring...
Exploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml
Sean's Surf & Skate Co. — Seal Security Demo Maven / Java A...
vulnerable-web-app
vulnerable-web-app ⚠️ Intentionally vulnerable. A runna...
ecommerce-poc
Event-Driven E-Commerce Saga POC This project is a small even...
Spring Office Hours Podcast: S5E14 - Spec Driven Development with Simon Martinelli
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by Java Champion, Vaadin Champion, and Oracle ACE Pro Simon Martinelli to talk about Spec-Driven Development. With AI reshaping how we write code, Simon makes the case th...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198738
Malicious code in @asyncapi/java-spring-cloud-stream-template npm...
Malware in @asyncapi/java-spring-cloud-stream-template
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2025-198770
Malicious code in @asyncapi/java-spring-template npm...
Malware in @asyncapi/java-spring-template
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
com.github.xfslove:shiro-uaa-auth-server (>=1.0.0, <=1.0.2), com.github.xfslove:shiro-uaa-common (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (5.2)
com.nimbusds:nimbus-jose-jwt MAVEN version 5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.xfslove:shiro-uaa-auth-server =1.0.0, =1.0.0, =1.0.0, =1.25.4, =6.52.0, =6.52.0, =6.52.0,...
CVE-2025-46822
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...
CVE-2025-46822
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...
CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...
CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...
CVE-2025-46822
The CVE-2025-46822 entry corresponds to an Arbitrary File Read in OsamaTaher/Java-springboot-codebase prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, caused by insufficient path traversal protections. The vulnerability allows reading internal files via absolute paths at the /api/v1/file...
Java-Spring-Boot-CodeBase information leakage vulnerability
Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects from osama individual developers. A security vulnerability exists in versions prior to Java-springboot-codebase c835c6f, which stems from an insufficient path traversal mechanism that could...
My-BBS security vulnerabilities
My-BBS is a SpringBoot + Mybatis + Thymeleaf technology implemented BBS forum system by ZHENFENG13 individual developer. There is a security vulnerability in My-BBS version 1.0, which originates from the function Upload in the file src/main/java/com/my/bbs/controller/common/UploadController.java,...