CVE-2024-38821-POC

CVE-2024-38821: Подтверждение концепции PoC: Обход аутентификации в Spring Framework Это подтверждение концепции для уязвимости CVE-2024-38821 Шаги выполнения 1. Соберите Docker-образ Spring Boot 3.3.4, на основе Spring Framework 6.1.13 cd vuln docker build -t cve-2024-38821-poc . 2. Запустите...

CVE-2026-52844

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat /private\secret.txt as outside /private/, but fileserver later resolves the same request path as private\secret.txt on disk. An unauthenticated remote client can bypass Caddy...

FreeBSD : traefik -- Bypassing security controls via special characters (91b9790e-de65-11f0-b893-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 91b9790e-de65-11f0-b893-5404a68ad561 advisory. The traefik project reports: There is a potential vulnerability in Traefik managing the requests using ...