VUL4J-23

Apache Sling Bringing Back the Fun! Apache Sling is a web framework that uses a Java Content Repository, such as Apache Jackrabbit, to store and manage content. Sling applications use either scripts or Java servlets, selected based on simple name conventions, to process HTTP requests in a RESTful...

perwendel__spark_CVE-2018-9159_2_7_2_fixed

Spark - a tiny web framework for Java 8 NEWS : Spark 2.7.1 is out. Please try it out and report any bugs. com.sparkjava spark-core 2.7.1 Important - There is a vulnerability in older versions of Spark versions lower than 2.5.2. Please upgrade to the latest version. For documentation please go to:...

perwendel__spark_CVE-2018-9159_2-7-1

Spark - a tiny web framework for Java 8 NEWS : Spark 2.7.0 is out. Please try it out and report any bugs. com.sparkjava spark-core 2.7.0 Important - There is a vulnerability in older versions of Spark versions lower than 2.5.2. Please upgrade to the latest version. For documentation please go to:...

apache-struts-cve-2017-9805

The Apache Struts web framework The Apache Struts web framework is a free open-source solution for creating Java web applications. Web applications differ from conventional websites in that web applications can create a dynamic response. Many websites deliver only static pages. A web application...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...

awesome-nodejs-security

A curated list of awesome Node.js Security resources. Learn Node.js Secure Coding techniques and best practices from Liran Tal Contents Tools Web Framework Hardening Static Code Analysis Dynamic Application Security Testing Input/Output Validation Secure Composition CSRF Vulnerabilities and...

recon-test-livewire

About Laravel Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as: Simple, fast routi...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Fast network scanner for CVE-2025-64459 Django SQL Injection vulnerability. Installation pip install -r requirements.txt Usage Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t 192.168.1.0/24 Custom ports python...

cve-2025-55182-poc

Basic Information CVE-2025-55182 is one of the most impactful Web framework vulnerabilities of 2025. React Server Components RSC are now the mainstream architecture for modern Next.js applications, and a large number of standard projects created with create-next-app are within the affected scope,...

CVE-2025-55182

This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. The page...

Security Bulletin: IBM ApplinX is vulnerable to Improper Validation of Specified Quanitity in Input issue due to the use of source-map-js and @angular/router (CVE-2026-93749).

Summary A security vulnerability in source-map-js a transitive dependency via sass and @angular/router affects IBM ApplinX CVE-2026-93749. These packages are used in the ApplinX web framework front-end. IBM has issued fixes to resolve this vulnerability. The source-map-js version has been updated...

CLEANSTART-2026-JO59032 Echo is a Go web framework

Security vulnerability affects the temporal-server-fips package. Echo is a Go web framework...

kurukshetra

Kurukshetra Kurukshetra es un framework web desarrollado con el objetivo de ser el primer framework de código abierto que proporciona una base sólida para alojar desafíos de codificación segura razonablemente complejos, al tiempo que ofrece la capacidad de ejecutar cada desafío de manera eficient...

CLEANSTART-2026-SB20243 Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE)

Security vulnerability affects the apache-nifi-registry package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...

CLEANSTART-2026-SS30538 Echo is a Go web framework

CVE-2026-55677 affects multiple packages. Echo is a Go web framework. See references for individual vulnerability details...

Spring Framework 5.3.x < 5.3.50 / 6.0.x < 6.0.31 / 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 SSE Stream Corruption

The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.50, 6.0.x prior to 6.0.31, 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - Spring MVC applications using the functional web framework are...

[SECURITY] Fedora 44 Update: perl-Dancer2-2.2.1-1.fc44

Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...

CLEANSTART-2026-QT13587 Tornado is a Python web framework and asynchronous networking library

CVE-2026-82397 affects multiple packages. Tornado is a Python web framework and asynchronous networking library. See references for individual vulnerability details...

[SECURITY] Fedora 45 Update: perl-Dancer2-2.2.1-1.fc45

Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...

PT-2026-108422

Security vulnerability affects the apache-hive package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...