CVE-2022-33980-POC

CVE-2022-33980 $script:js:java.lang.Runtime.getRuntime.exec"calc"...

log4j-vulnerability-patcher-agent

log4j-vulnerability-patcher-agent This agent fixes critical vulnerability CVE-2021-44228 in log4j by patching JndiLookup class, as recommended here. WARNING: this is not a substitute for proper upgrade to log4j 2.15.0 , where this vulnerability was fixed for good. Use this agent IF, and ONLY IF,...

codeql-workshop-cve-2021-21380

CodeQL workshop for Java: Finding a SQL injection In this workshop we will use syntactical and semantic reasoning to find a SQL injection in the XWiki platform's rating component documented by CVE-2021-21380 Contents CodeQL workshop for Java: Finding a SQL injection Contents Prerequisites and set...

log4j_checker_beta

log4jcheckerbeta - Scripts para Linux, macOS y Windows Si deseas usar los cradles de descarga de Windows/Linux a continuación, revisa los scripts de antemano. Cargar código de internet y ejecutarlo es lo que nos trajo aquí con Log4Shell, ¿verdad? ;- Servidores o clientes Linux y macOS El script...

log4j_checker_beta

log4jcheckerbeta - Linux, macOS and Windows Scripts If you want to use the windows/linux download cradles below, please review the scripts beforehand. Loading code from the internet and execute it is what brought us here with Log4Shell - right? ;- Linux and macOS servers or clients The...

CVE-2022-42889

CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.9 which is vulnerable to CVE-2022-42889. Running the application Build and run the application via docker: docker build . -t vulnerable-app docker run vulnerable-app $ docker ps CONTAINER ID...

vuln_spring_log4j2

vulnspringlog4j2 Vulnerable spring application for testing the log4j2 CVE-2021-44228 Java Version: 1.8 Spring Boot Version: 2.4.0 Spring Core Version: 5.3.1 Log4j Version: 2.13.3 Burp Log...

AegisJava

AegisJava A specialized tool to detect and mitigate CVE-2025-30749 , a critical Remote Code Execution RCE vulnerability in Oracle Java SE. Vulnerability Details CVE : CVE-2025-30749 Severity : High CVSS 8.1 Affected Components : Java 2D Impact : Unauthenticated Remote Code Execution Usage 1. Run...

CVE-2018-14667

CVE-2018-14667 env the rich.ser can open the Calculator.app only MacOs download this project. the poc program in web-inf/src/Main.java...

CVE-2021-44228_dockernize

CVE-2021-44228 Log4Shell Vulnerability Lab Environment Introduction This project provides a dockerized environment for safely practicing and understanding the critical Log4j vulnerability known as CVE-2021-44228 Log4Shell. Key Features Secure dockerized testing environment Custom payload testing...

cve-2021-44228-qingteng-online-patch

cve-2021-44228-qingteng-online-patch What is this Hot-patch CVE-2021-44228 by exploiting the vulnerability itself. How to use Inject the following code to anywhere likely vulnerable to CVE-2021-44228, $jndi:ldap://your-own-server/patch To prevent MITM attack during the patch process, the followin...

CVE-2023-34040

CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36...

CVE-2018-2893

CVE-2018-2893 Step 1 java -jar ysoserial-cve-2018-2893.jar WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-2893.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ JRMPClient @mbechler JRMPClient2 @mbechler JRMPClient3 @mbechler JRMPClient4...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to upstream tag...

SUSE-SU-2026:4339-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to upstrea...

ROOT-APP-MAVEN-CVE-2024-40094 CVE-2024-40094 in com.graphql-java:graphql-java - Patched by Root

Root has patched CVE-2024-40094 in the com.graphql-java:graphql-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-28867 CVE-2023-28867 in com.graphql-java:graphql-java - Patched by Root

Root has patched CVE-2023-28867 in the com.graphql-java:graphql-java package for Root:Maven. Multiple fixed versions available...

CVE-2026-77423

A flaw was found in JLine. The built-in less viewer processes user-controlled search and display-filter patterns using Java's backtracking regular expression engine. A remote attacker could provide a specially crafted regular expression, leading to excessive CPU consumption and indefinitely...

CVE-2026-77422

A flaw was found in JLine, a Java library for handling console input. The built-in grep command accepts user-controlled regular expressions and automatically wraps them, which can amplify backtracking in the regular expression engine. A remote attacker could exploit this by providing a specially...

EUVD-2026-85626

A vulnerability was identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function MD5.getMD5 of the file ssmpro/src/main/java/cn/sfturing/utils/MD5.java of the component User Password Handler. The manipulation leads to one-way hash without...