cve

CVE Problem statement: Stackoverflow I'm trying to build by project in Docker, So i'm using Docker Desktop to build my project, when i build the image i get this as one of my vulnerabilities root@kitploit: CVE-2024-26308 CWE-770 7.5 H Allocation of Resources Without Limits or Throttling...

CVE-2012-2982

CVE 2012-2982 EXPLOIT Compilazione mvn clean install Exploit java -jar ./target/CVE-2012-2982-1.0-SNAPSHOT-jar-with-dependencies.jar...

CVE-2022-22965-spring4shell

CVE-2022-22965-spring4shell CVE-2022-22965 Spring4Shell ricerca e PoC per scopi didattici Post sul blog Un'analisi più dettagliata e spiegazione della vulnerabilità si trovano sul mio post sul blog. Commenti sulla ricerca iniziale Basato sulla ricerca iniziale che ho fatto su...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – Jenkins Pipeline Shared Library: Codeausführung über @Grab Programmcode Groovy-Pipeline root@kitploit: // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Jenkins Pipeline Shared Library: Remote-Codeausführung Übersicht Ein...

CVE-2024-5082

Panoramica Questo repository contiene un proof of concept in Python per CVE-2024-5082 , una vulnerabilità di esecuzione remota di codice in Sonatype Nexus Repository Manager 2. La vulnerabilità consente a un utente con permessi sufficienti di pubblicare un artefatto Maven appositamente creato e...

ROOT-APP-MAVEN-CVE-2026-55471 CVE-2026-55471 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root

Root has patched CVE-2026-55471 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-45367 CVE-2026-45367 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-45367 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-49485 CVE-2026-49485 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-49485 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

DeliberatelyVulnerableWebApp

Absichtlich angreifbare Webanwendung Struts 2 Dieses Projekt ist eine Java-Webanwendung, die das Struts 2-Framework verwendet. Es wird mit Maven erstellt und kann mit dem Jetty-Server ausgeführt werden. Voraussetzungen Java Development Kit JDK 8 oder höher Apache Maven 3.6.0 oder höher Erste...

text4shell-poc

Applicazione di Test PoC per CVE-2022-42889 Questa è un'applicazione vulnerabile sviluppata come Proof of Concept per la vulnerabilità CVE-2022-42889. Installazione Maven Per eseguire questo avrai bisogno di: JDK 17 o superiore Maven 1. Clona il repository git root@kitploit: git clone...

CVE-2011-1475

CVE-2011-1475 Verifica le vulnerabilità delle dipendenze utilizzando Maven su CVE-2011-1475 Questo progetto serve per testare Maven con Travis CI...

ROOT-APP-MAVEN-CVE-2025-27427 CVE-2025-27427 in org.apache.activemq:artemis-server - Patched by Root

Root has patched CVE-2025-27427 in the org.apache.activemq:artemis-server package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-27446 CVE-2026-27446 in org.apache.activemq:artemis-server - Patched by Root

Root has patched CVE-2026-27446 in the org.apache.activemq:artemis-server package for Root:Maven. Multiple fixed versions available...

MinimalReproducer

Dopo sforzi significativi, l'ho ridotto a un replicatore minimale. Questo è solo un progetto vuoto per dimostrare il problema con l'uso di dependency-check-maven che sono costretto a fare dalle regole della mia azienda. Controlla il pom.xml e verifica: mvn...

log4j

Log4j Version 1.2.17-aims Dieses JAR wurde erstellt, um gegen CVE-2021-4104 zu schützen. Es ist als direkter Ersatz für Log4j-v1-Bibliotheken gedacht. Log4j-1.2-Projektseite: https://logging.apache.org/log4j/1.2/ Apache-2.0-Lizenz: https://www.apache.org/licenses/LICENSE-2.0 Verwendung Fügen Sie...

trivy-java-db

trivy-java-db نظرة عامة trivy-java-db يُنشئ قاعدة بيانات SQLite من بيانات مستودع maven-index، ويخزن ArtifactID وGroupID وVersion وsha1 لملفات jar. تُستخدم قاعدة البيانات في Trivy لاكتشاف معلومات حول jars التي لا تحتوي على GAV بداخلها. فترة التحديث كل يوم في الساعة 00:00 تنزيل قاعدة بيانات فهارس...

carbon-identity-framework

carbon-identity-framework Branch| Build-Status ---|--- master| Dieses Repository enthält die Kernkomponenten und Funktionen, die für das Produkt WSO2 Identity Server erforderlich sind. Erstellen aus dem Quellcode Wenn Sie carbon-identity-framework aus dem Quellcode erstellen möchten: 1...

fastjson

fastjson...

ROOT-APP-MAVEN-CVE-2025-14813 CVE-2025-14813 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2025-14813 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...