Spring Framework Path Traversal in Functional Web Frameworks

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

Awesome-Hacking-Resources

Awesome Hacking Resources A curated collection of hacking, penetration testing, and AI red-teaming resources to make you better...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

pecli

PEcli Tool to analyze PE files in python 3. Current features : Show information about the file import, exports, resources Search for interesting information in the file abnormal resources, peid... Dump sections or resources Check size Search for a string in the file Installation You can install i...

1earn

Everything is hard at the beginning, and then it stays hard... Introduction : The original intention of this project is to share knowledge resources, allowing more people to access and understand the fields of security and operations. However, due to my limited ability, there will inevitably be...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

awesome-appsec

Awesome AppSec 一份精选的应用程序安全学习资源列表。包含书籍、网站、博客文章和自评测验。 由 Paragon Initiative Enterprises 维护，并得到应用程序安全社区和开发者社区的贡献。我们还有 其他社区项目 ，可能对未来的应用程序安全专家有所帮助。 如果你是软件安全主题的绝对新手，你可能会从阅读 应用程序安全温和入门 中受益。 贡献 有关详情，请参阅贡献指南。 应用程序安全学习资源 通用 文章 如何安全地生成随机数 2014 加盐密码哈希 - 正确做法 2014 一个好主意但错误使用：/dev/urandom 2014 为什么要在应用程序安全上投资？ 2...

awesome-appsec

Awesome AppSec A curated list of resources for learning about application security. Contains books, websites, blog posts, and self-assessment quizzes. Maintained by Paragon Initiative Enterprises with contributions from the application security and developer communities. We also have other...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised to deploy a supply chain ransomware attack. A large number of organisations wer...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

Resources-for-Beginner-Bug-Bounty-Hunters

Resources-for-Beginner-Bug-Bounty-Hunters Intro Current Version: 2023.01 Welcome to our web hacking and bug bounty hunting resource repository! A curated collection of web hacking tools, tips, and resources is available here. We hope that this repository will be a valuable resource for you as you...

privacyguides.org

保护你在网络上的安全的隐私与安全资源中心。 关于 Privacy Guides 是一个出于社会动机而创建的网站，为保护你的数据安全与隐私提供信息。我们的使命是向公众传达数字隐私的价值，以及旨在监控你在线活动的全球政府举措。我们是一个完全由志愿者团队成员和贡献者运营的非营利集体。我们的网站没有广告，并且与任何所列的服务提供商均无关联。 最新的团队成员名单可以在执行委员会页面找到。此外，许多人都为该项目做出了贡献，你也可以加入其中！ 曾在以下媒体上亮相：Tweakers，The New York Times，Wired 和 Fast Company。 贡献 💬 发起讨论或提出想法 💖 赞助该...

CVE-2026-82000

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

CVE-2026-81999

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

EUVD-2026-84791

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

CVE-2026-82000 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

CVE-2026-81999 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

EUVD-2026-84788

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

CVE-2026-82443

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...