
codeql-workshop
Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022

Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if…

Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088.

There were no proper POCs for CVE-2023-30533 so I made one. (Reported by Vsevolod Kokorin)

OpenRewrite recipe that detects and fixes Spring Security header suppression (CVE-2026-22732) by identifying Content-Length header misuse and…

CVE-2026-67598 — Emlog Pro: disabled TLS certificate validation in AI assistant (MITM → API-key theft). CWE-295, CVSS 9.1. Reported by @IlhomjonR.

Advisory and AddressSanitizer reproducer for a SQLite SQLAR heap-buffer-overflow triggered by a crafted SZ value causing truncated allocation and…

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…

Proof-of-concept exploit for CVE-2020-8277, a Node.js DNS resolver denial-of-service vulnerability triggered by large record responses, with…

Checkmk extension that scans JAR, WAR, EAR, and AAR files for Log4j versions vulnerable to CVE-2021-44228 by inspecting META-INF pom.properties…

Unauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining…

This is a Python Application that helps you detect if your machine that run bash is vulnerable by CVE-2014-6271

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to…

Fixes CVE-2021-44228 in log4j by patching JndiLookup class

Exploiting CVE-2022-0847 - written by : Antonius (w1sdom)

PHP script to detect CVE-2015-6835 (session deserialization vulnerability) by analyzing source code for unsafe unserialize() calls in session…

A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 (Apache HTTP Server Path Traversal) by…

Exploiting CVE-2014-7205 by injecting arbitrary JavaScript resulting in Remote Code Execution.