#

Common Vulnerabilities and Exposures (CVE)

The Common Vulnerabilities and Exposures (CVE) system provides a reference-method for publicly known information-security vulnerabilities and exposures. The United States’ National Cybersecurity FFRDC, operated by The Mitre Corporation, maintains the system, with funding from the US National Cyber Security Division of the US Department of Homeland Security

Here are 40 public repositories matching this topic...

XiaomingX / data-cve-poc

这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

security rpc poc vulnerability cve exp

Updated Nov 12, 2025
Java

dodogeny / bastion-maven-plugin-community

🚀 Free vulnerability scanner for Maven projects. Detect CVEs, track security trends, and generate comprehensive reports. Built on OWASP Dependency-Check with enterprise-grade performance.

java open-source security security-audit maven owasp maven-plugin cve nvd vulnerability-assessment vulnerability-scanner dependency-check security-reports

Updated Nov 8, 2025
Java

phani-kb / nvd-tool

A tool to fetch CVE and CPE data (including match criteria) from NIST's NVD API, along with CWE data from MITRE.

java api cli client nist script metrics dictionary match lombok feed jackson vulnerability cve cpe nvd cwe cvss picocli

Updated Nov 1, 2025
Java

swgee / BurpMCP

Burp Suite Extension with MCP Server to enhance manual application security testing

http security extension web ai mcp hacking gemini vulnerability bugbounty cve burpsuite claude llm chatgpt

Updated Aug 21, 2025
Java

stevespringett / vulndb-data-mirror

A simple Java command-line utility to mirror the entire contents of VulnDB.

java vulndb cve appsec sca software-security software-composition-analysis

Updated Jul 15, 2025
Java

swissarthurfreeman / springLog4Shell

Simple proof of concept of Log4Shell vulnerability in a spring boot vulnerable application environment.

security spring spring-boot poc cve cve-2021-44228 log4shell

Updated May 12, 2025
Java

winnpixie / log4noshell

A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 ("Log4Shell").

java log4j patch cve log4shell

Updated Apr 28, 2025
Java

sethubolt7 / CVE_CUSTOM_API

This repository contains a backend using Spring Boot, JPA, and H2 to manage and display over 10,000 CVE records. It fetches CVE data from a public source, stores it in H2, and provides custom endpoints with filtering by year, metric score, and last modified date. Built with MVC architecture for structured data handling and web page integration.

spring-boot jpa rest-api mvc-architecture dom-manipulation cybersecurity cve vulnerability-management html-css-javascript h2-database data-filtering java-backend

Updated Apr 17, 2025
Java

dipa96 / daysbeyond-archive

Analysis of vulnerabilities from security audit | CVEs

application-security ctf walkthrough cve writeup 0day 1-day n-day

Updated Feb 6, 2025
Java

vuldb / vuldb-api-java-examples

VulDB Java code to fetch data via API

java api api-client vulnerability vulnerabilities vulnerability-databases cve nvd vulnerability-management vulnerability-identification vulnerability-database-entry vulnerability-analysis vulnerability-database

Updated Jan 10, 2025
Java

XiaomingX / JNDI-Injection-Exploit-plus

JNDI-Injection-Exploit 是一个用于生成可用 JNDI 链接并提供后台服务的工具，支持启动 RMI 服务器、LDAP 服务器和 HTTP 服务器。其 RMI 和 LDAP 服务基于 marshalsec，并进行修改以与 HTTP 服务联动。

java security rce vulnerability cve jndi exp

Updated Nov 23, 2024
Java

XiaomingX / marshalsec-plus

两年多以前，Chris Frohoff 和 Gabriel Lawrence 发表了关于 Java 对象反序列化漏洞的研究，这一研究最终导致 Java 历史上最大的一波远程代码执行漏洞的爆发。后续研究表明，这些漏洞不仅限于 Java 序列化或 XStream 这样的机制，还可以应用于其他机制。

poc rce cve exp

Updated Nov 22, 2024
Java

entroychang / CVE-2024-4040

CVE-2024-4040 PoC

exploit cve cve-2024-4040

Updated Jul 9, 2024
Java

Whoopsunix / PPPVULNS

Java CVE Vulnerability Environment

java spring apache cve dubbo

Updated Jun 11, 2024
Java

R0rt1z2 / TimeoutPDoS

PDoS using race condition in ActivityManager's CoreSettingsObserver

android java cve pdos

Updated May 16, 2023
Java

Zeyad-Azima / CVE-2022-1388

F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB

exploit rest-api cve f5 icontrol f5-bigip cve-2022-1388

Updated May 11, 2023
Java

EXP-Docs / CVE-2020-13933

CVE-2020-13933 靶场： shiro 认证绕过漏洞

learning cve cve-2020-13933

Updated Apr 9, 2023
Java

sschakraborty / SecurityPOC

Security Research and PoC

security security-audit research exploit cybersecurity penetration-testing rce vulnerability cve security-tools product-security prototype-pollution log4shell

Updated Mar 7, 2023
Java

Supersonic / Wallbreak

Exploit app for CVE-2021-39670 and CVE-2021-39690, two permanent denial-of-service vulnerabilities in Android's wallpaper system

android security exploit vrp cve

Updated Mar 3, 2023
Java

emaiannone / siege

SIEGE is an automated test case generator targeting any method in the classpath

java security test-automation cve genetic-algorithms api-testing security-testing test-case-generation evosuite library-testing

Updated Feb 16, 2023
Java

Followers: 145 followers
Website: github.com/topics/cve
Wikipedia: Wikipedia