1489803 matches found
CVE-2025-29927
CVE-2025-29927 About the Next.js CVE-2025-29927 security vulnerability... You can check the link for detailed information: https://bilalgns.github.io/posts/nextjs-cve-2025-29927...
CVE-2015-8562
This repository does not have a README...
CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection
CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection Spring Security OAuth 2.3 Open Redirection 分析复现篇 Exploit Title: Open Redirector in spring-security-oauth2 Date: 17 June 2019 Exploit Author: Riemann Vendor Homepage: https://spring.io/projects/spring-security-oauth Software Link:...
CVE-2019-1388
CVE-2019-1388...
bx2-writeups
Security Writeups A collection of my cybersecurity writeups covering: TryHackMe Hack The Box Linux Privilege Escalation AI & Infrastructure Security CTFs Security Challenges Author: Nanashi Bx2...
Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-82417 DESCRIPTION: Summary...
CVE-2021-45232
CVE-2021-45232 CVE-2021-45232 POC 1、Apache APISIX Dashboard unauthorized access vulnerability CVE-2021-45232 scan 2、Apache APISIX Dashboard default password scan...
PentesterLab-Intercept-CVE-2014-1266
This repository does not have a README...
Web-App-PenTesting
🚀 Quick Start 1. Clone the repository git clone https://github.com/Sarthak4126/Web-App-PenTesting.git cd Web-App-PenTesting/targetapp 2. Install dependencies pip install -r requirements.txt 3. Launch the target application python app.py App runs at: http://127.0.0.1:5000 4. Run the automated...
cve-2025-22235-demo
CVE-2025-22235: Spring Boot EndpointRequest.to Authentication Bypass Vulnerability Demo Vulnerability Description CVE-2025-22235 is a Spring Boot security vulnerability involving the EndpointRequest.to method, which may generate an incorrect matcher when configuring security rules, leading to the...
semgrep-rules
Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...
FOG-Project
FOG-Project FOG Project CVE-2024-39914 Command Execution Vulnerability...
CVE-2024-38821-POC
CVE-2024-38821: Proof of Concept PoC: Authentication Bypass in Spring Framework This is a proof of concept for the CVE-2024-38821 vulnerability Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 cd vuln docker build -t cve-2024-38821-poc . 2. Run the...
CVE-2026-48907
CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...
CVE-2023-30212
CVE-2023-30212 Docker environment and exploit the CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0 .This vulnerability allows for Cross-Site Scripting XSS attacks...
CVE-2020-14882
CVE-2020-14882...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-16830 DESCRIPTION: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote...
onedrive_user_enum
onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...
presentations
My presentations More things can be found in my personal site: https://sites.google.com/site/zhiniangpeng Exploiting preauth RCE and Sandbox escape vulnerabilities in EXSi, Typhooncon 2023 OLE object are still dangerous today — Exploiting Microsoft Office, POC 2023 Django-Simple-Captcha —...