CVE-2023-2825

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug...

CheckFlashPlayerVersion

CheckFlashPlayerVersion Check the Browser's FlashPlayer version to check if it is vulnerable to exploit CVE-2016-7855 Usage: Clone this repository and then open the html file in the browser where you want to check the Flash Player version...

asf__cxf_CVE-2019-17573_3-2-11

Welcome to Apache CXF! Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of...

SNORDIAN-s-H5PxAPIkatchu-CVE-Report

SNORDIAN's-H5PxAPIkatchu-CVE-Report Disclosure for CVE-2025-12904 CVE-2025-12904 - Vulnerability in SNORDIAN's H5PxAPIkatchu This repository discloses a vulnerability discovered in SNORDIAN's H5PxAPIkatchu " ' ※If the id within the object does not exist, it will fail. Impact : Stored scripts may ...

react2shell-checker

React2Shell Checker A security vulnerability scanner for detecting the React2Shell vulnerability CVE-2025-55182 in Next.js and React applications. Overview React2Shell Checker allows you to scan websites to detect if they are running vulnerable versions of Next.js or React Server Components. The...

Grafana_POC-CVE-2021-43798

Grafana-Poc Do not use this tool for illegal purposes. 1. Usage: python3 grafanahole.py Fill in ip:port in domain.txt 2. Vulnerability Impact Scope Affected versions: Grafana 8.0.0 - 8.3.0 Safe versions: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

CVE-2021-31760

..| CVE-2021-31760 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

jstachio__jstachio_CVE-2023-33962_1-0-0

A type-safe Java Mustache templating engine. Templates are compiled into readable Java source code and value bindings are statically checked. Documentation Latest SNAPSHOT JStachio doc Current released JStachio doc The doc is also on javadoc.io but is not aggregated like the above. The aggregated...

PagSeguro-Connect-Para-WooCommerce-CVE-Report

PagSeguro-Connect-Para-WooCommerce-CVE-Report Disclosure for CVE-2025-10142 CVE-2025-10142 - Vulnerability in PagSeguro-Connect-para-WooCommerce This repository discloses a vulnerability discovered in PagSeguro-Connect-para-WooCommerce = 4.44.3,WordPress plugin developed by Ricardo Martins. 🛠...

jmrozanec__cron-utils_CVE-2021-41269_9-1-5

cron-utils We define crons. And support them. cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. The project follows the Semantic Versioning Convention, provides OSGi metadata and uses Apache 2.0 license. Download cron-utils...

apache__camel_CVE-2018-8041_2-20-3

Apache Camel Apache Camel is an Open Source integration framework that empowers you to quickly and easily integrate various systems consuming or producing data. Introduction Camel empowers you to define routing and mediation rules in a variety of domain-specific languages DSL, such as Java, XML,...

codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1

Plexus-archiver The current master is now at https://github.com/codehaus-plexus/plexus-archiver Important Hint Based on a hint of snyk.io security team they have found a possible security issue. Furthermore they have offered an patch to prevent the possible security issue. This patch has been...

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Kubernetes Java Client Java client for the kubernetes API. Client versioning The Java client uses Semantic Versioning. We increment the major version number whenever we regenerate the client for a new Kubernetes release version see table below. Whenever we do this there are new APIs added and...

vulnerability-assessment

openssh-vulnerability-assessment Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities CVE-2016-0777, CVE-2015-5600 🛡️ OpenSSH...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2021-41773

CVE-2021-41773 Apache httpd only 2.4.49 For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 Exploit This vulnerability affec...

React2Shell-CVE-2025-55182-Detector

Prerequisites Access to the project root directory containing package.json One of the following runtimes, depending on the script used: Python Javascript PowerShell Bash with jq installed Usage All scripts must be executed from the root directory of the target project where the package.json file ...

asf__cxf_CVE-2016-6812_3-0-11

Welcome to Apache CXF! Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of...

CVE-2021-41773-Analysis

CVE-2021-41773-Analysis Technical analysis and reproduction lab for the Apache HTTP Server 2.4.49 Path Traversal and RCE vulnerability...

Endurance-Wiper

Endurance-Wiper Beta - Open Source A small wiper malware written in C using the .NET framework. If you are from Twitter or any other source, you can clearly tell this is in active development. You are free to check the updates here...