Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / wh1t3p1g/ysomap issues and pull requests

#60 - Bump org.apache.tomcat:tomcat-catalina from 8.0.36 to 8.5.96 in /core

Pull Request - State: open - Opened by dependabot[bot] 7 months ago
Labels: dependencies

#59 - Bump com.alibaba:hessian-lite from 3.2.12 to 3.2.13 in /core

Pull Request - State: open - Opened by dependabot[bot] 8 months ago
Labels: dependencies

#57 - CommonsCollections3 生成POC时 出现 Bullet Type Not Match 错误

Issue - State: closed - Opened by winezer0 9 months ago - 2 comments

#56 - Bump org.springframework:spring-context from 4.3.16.RELEASE to 5.2.22.RELEASE in /core

Pull Request - State: open - Opened by dependabot[bot] 9 months ago
Labels: dependencies

#54 - ShiroRCE1 exploit AES过程错误

Issue - State: closed - Opened by BBQM1911 12 months ago - 1 comment

#53 - DELETED

Issue - State: closed - Opened by arghyac35 12 months ago

#52 - 修改Session，为特定payload增添wrapped选项

Pull Request - State: closed - Opened by whocansee about 1 year ago - 2 comments

#51 - 添加了新Gadget，修复了一个Exploit

Pull Request - State: closed - Opened by whocansee about 1 year ago - 10 comments

#50 - Hessian XString deserialisation stack trace

Issue - State: closed - Opened by br-sn over 1 year ago - 6 comments

#49 - 报错

Issue - State: closed - Opened by Huuuuuaaaa over 1 year ago - 3 comments

#48 - Bump commons-fileupload from 1.3.1 to 1.5 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#47 - Bump spring-web from 4.3.16.RELEASE to 6.0.0 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies

#46 - Bump jackson-databind from 2.9.5 to 2.12.7.1 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies

#45 - 添加通过dnslog探测类

Pull Request - State: closed - Opened by Ar3h about 2 years ago - 1 comment

#44 - Bump jackson-databind from 2.9.5 to 2.13.4.1 in /core

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies

#43 - 请问一下如何HashMap通过反射修改put方法,put进去的key

Issue - State: closed - Opened by halodoom over 2 years ago - 3 comments

#42 - Bump tomcat-catalina from 8.0.36 to 8.5.9 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#41 - add payload RMIConnectUnicastRef

Pull Request - State: closed - Opened by cokeBeer over 2 years ago - 2 comments

#40 - Bump mysql-connector-java from 5.1.47 to 8.0.28 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#39 - Bump fastjson from 1.2.58 to 1.2.83 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#38 - Bump xercesImpl from 2.9.1 to 2.12.2 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#37 - 请问一下，如何对fastjson注入一个内存马

Issue - State: open - Opened by laowang1026 over 2 years ago

#36 - Bump jackson-databind from 2.12.2 to 2.12.6.1 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#35 - 新增执行Class功能 可以执行任意Class代码

Pull Request - State: closed - Opened by BeichenDream over 2 years ago

#34 - Bump hessian from 4.0.0 to 4.0.2 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#33 - Hessian2 Add

Pull Request - State: closed - Opened by G0doot over 2 years ago

#32 - test for commit

Pull Request - State: closed - Opened by orleven over 2 years ago

#31 - add c2 loader

Pull Request - State: closed - Opened by orleven over 2 years ago

#30 - Revert "add socket echo payload info"

Pull Request - State: closed - Opened by wh1t3p1g almost 3 years ago

#29 - Bump xstream from 1.4.17 to 1.4.19 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#28 - add socket echo payload info

Pull Request - State: closed - Opened by orleven almost 3 years ago

#27 - Bump xercesImpl from 2.9.1 to 2.12.0 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#26 - Revert "add some new bullet by wh4am1"

Pull Request - State: closed - Opened by wh1t3p1g almost 3 years ago

#25 - add some new bullet by wh4am1

Pull Request - State: closed - Opened by sf197 almost 3 years ago

#24 - infinite loop when run explot

Issue - State: closed - Opened by faitHme000123 almost 3 years ago - 1 comment

#23 - show options exception

Issue - State: closed - Opened by faitHme000123 almost 3 years ago - 1 comment

#22 - ReflectionHelper.newInstance应用面较小

Issue - State: closed - Opened by HYWZ36 about 3 years ago - 1 comment

#21 - 可以在 Release 里面提供一个编译好的 jar 包吗😂

Issue - State: closed - Opened by halozhy about 3 years ago - 1 comment

#20 - Bump xstream from 1.4.17 to 1.4.18 in /core

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago - 1 comment
Labels: dependencies

#19 - Bump commons-fileupload from 1.3.1 to 1.3.3 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#17 - 生成序列化文件失败

Issue - State: closed - Opened by XuCcc over 3 years ago - 1 comment

#16 - 请问一下:如果我想用shiro+JRMP+cb链或者cc链+注入一个内存马

Issue - State: closed - Opened by sv3nbeast over 3 years ago - 3 comments

#15 - CommonsBeanutils1生成ser后要怎么使用？

Issue - State: closed - Opened by maybe-why-not over 3 years ago - 8 comments

#14 - Bump mysql-connector-java from 5.1.47 to 8.0.16 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#13 - Bump xstream from 1.4.15 to 1.4.17 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#12 - Bump xstream from 1.4.15 to 1.4.16 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies

#11 - Bump xstream from 1.4.6 to 1.4.15 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago - 1 comment
Labels: dependencies

#10 - Bump groovy from 2.4.3 to 2.4.21 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago - 1 comment
Labels: dependencies

#9 - Bump xstream from 1.4.6 to 1.4.13-java7 in /core

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago - 1 comment
Labels: dependencies

#8 - Bump junit from 4.12 to 4.13.1

Pull Request - State: closed - Opened by dependabot[bot] about 4 years ago - 1 comment
Labels: dependencies

#7 - Bump commons-beanutils from 1.9.2 to 1.9.4 in /core

Pull Request - State: closed - Opened by dependabot[bot] about 4 years ago - 1 comment
Labels: dependencies

#6 - 新功能建议

Issue - State: closed - Opened by delovt over 4 years ago - 1 comment

#5 - Bump commons-collections from 3.2.1 to 3.2.2 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies

#4 - Bump commons-collections4 from 4.0 to 4.1 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies

#3 - Bump xstream from 1.4.10 to 1.4.10-java7 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies

#2 - Bump fastjson from 1.2.24 to 1.2.25 in /core

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies

#1 - Bump fastjson from 1.2.24 to 1.2.25

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies