shoucheng3/nahsra__antisamy_cve-2016-10006_1-5-3Fast, configurable HTML sanitization library for preventing XSS and malicious code injection from untrusted user input. Provides a policy-driven API…
0xsu3ks/cve-2025-29557Documents a high-severity ExaGrid EX10 MailConfiguration API access control flaw that leaks plaintext SMTP credentials to authenticated operators,…
dskho/cve-2021-45232Proof-of-concept scanner for CVE-2021-45232, targeting unauthenticated API access and default credentials in Apache APISIX Dashboard.
aman-parmar/cve-2025-54554CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
randomrobbiebf/cve-2022-45354Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API
shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…
shoucheng3/apache__sling-org-apache-sling-xss_cve-2016-5394_1-0-8Java library providing XSS escaping and filtering services (XSSAPI, XSSFilter) to sanitize user-submitted content and prevent cross-site scripting…
shoucheng3/springsource__spring-security-oauth_cve-2018-1260_2-3-2-releaseOAuth and OAuth2 support library for Spring Security, enabling secure API authentication and authorization for consumer and provider implementations…
shoucheng3/keycloak__keycloak_cve-2022-4361_21-1-1Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-releaseCentralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…
shoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-finalOpen-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…
mostafaanouarghorab/microservicecve-2021-39156
shoucheng3/apache__incubator-dubbo_cve-2021-30181_2-6-8High-performance Java RPC and microservices framework with service discovery, traffic management, observability, and built-in security for building…
shoucheng3/keycloak__keycloak_cve-2022-1274_20-0-3Open source identity and access management solution providing single sign-on, user federation, and centralized authentication for modern applications…
shoucheng3/nahsra__antisamy_cve-2017-14735_1-5-6Java library for fast, configurable HTML sanitization from untrusted sources. Uses policy-driven scanning to remove malicious JavaScript and CSS,…
shoucheng3/keycloak__keycloak_cve-2022-3782_20-0-1Open source identity and access management platform providing single sign-on, user federation, and centralized authentication for modern applications…
