shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
dacc4/cve-2024-43044-jenkins-credsExploit for CVE-2024-43044 enabling arbitrary file read from Jenkins controller to extract and decrypt credentials.xml using secret keys.
shoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…
justinsteven/cve-2020-10759-pocProof of Concept for CVE-2020-10759 (fwupd signature validation bypass)
eremiel/cve-2019-5420Python exploit script for CVE-2019-5420, targeting Ruby on Rails signed-session AES GCM key brute-forcing to achieve remote code execution in…
maen08/cve-2024-25277Resources and PoCs
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5405_2-1-6-releaseCentralized configuration server for distributed systems with HTTP API, encryption/decryption of properties, and support for Git, Vault, JDBC, and…
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
weareu/xlsxSheetJS xlsx 0.18.5 fork with CVE-2023-30533 and CVE-2024-22363 fixes
p4tq/hikvision_cve-2017-7921_auth_bypass_config_decryptorDecrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.
jacklosingheart/cve-2024-36823-pocNinja Framework sensitive information leak due to weak encryption
starry-lord/cve-2018-0114Proof-of-concept for CVE-2018-0114, demonstrating unauthenticated remote token re-signing vulnerability in versions before 0.11.0.
digital-dev/keepass-triggerlessKeePass 2.53.1 with removed ECAS Trigger System Remediating CVE-2023-24055
shoucheng3/dromara__hutool_cve-2018-17297_4-1-1111Comprehensive Java utility library providing modules for cryptography, HTTP client, caching, JSON, scripting, and captcha generation, simplifying…
guy2610/tough-cookie-patch-cve-2023-26136RFC6265-compliant cookie parsing and CookieJar management library for Node.js, with CVE-2023-26136 security patch. Supports cookie creation,…
epicosy/json-sanitizerJSON sanitizer that converts malformed JSON-like content into valid, safe JSON, preventing code injection and ensuring standards compliance for web…
satheesh575555/external_zlib-1.2.7_cve-2018-25032General-purpose data compression library implementing the zlib, deflate, and gzip formats, providing compression and decompression routines for…
sionnx/cve-2003-0282Portable zipfile extraction utility with broad OS support, decryption, and security fixes for path traversal and symlink vulnerabilities.
