hackerone-reports
CVE-2021-40444
| hackerone-reports | CVE-2021-40444 | |
|---|---|---|
| 2 | 16 | |
| 3,195 | 781 | |
| - | - | |
| 6.3 | 2.9 | |
| 12 days ago | 7 months ago | |
| Python | HTML | |
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
hackerone-reports
- GitHub - reddelexc/hackerone-reports: Top disclosed reports from HackerOne
-
XXE (XML External Entity) Attack & Prevention
There was an interesting case on Hackerone where the XMP metadata of a JPG file was getting parsed unsafely. There are many other interesting XXE bugs there as well if you want to take a look.
CVE-2021-40444
What are some alternatives?
reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
PHPWord - A pure PHP library for reading and writing word processing documents
hackthebox - Notes Taken for HTB Machines & InfoSec Community.
Egyscan - Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:
Exif-Maniac - Post Exploitation Framework via Exif Data in images
fuelcms-rce - Fuel CMS 1.4 - Remote Code Execution
SpringShell - Spring4Shell - Spring Core RCE - CVE-2022-22965
CVE-2022-26134 - CVE-2022-26134 - Atlassian Confluence unauthenticated OGNL injection vulnerability (RCE).
OWASP-Xenotix-XSS-Exploit-Framework - OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.
Joeffice - Java Office Suite - Word processor - Spreadsheet - Presentation - Database - Drawing - Main Libraries: NetBeans Platform and Apache POI - Apache License
jira-mobile-ssrf-exploit - Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)
scan4all - Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...