17429 matches found
owasp-web-security-notes
🛡️ OWASP Web Security Notes A hand-written, exploitation-dep...
Astra Linux – Vulnerability in Firefox and Thunderbird
Due to a sequence of events controlled by the attacker, a JavaScript alert dialog with arbitrary although unstyled contents could be displayed over an uncontrolled web page of the attacker’s choice. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...
Astra Linux – Vulnerability in Firefox and Thunderbird
If a document creates a sandboxed iframe without allow-scripts, and then appends an element to the iframe’s document that has a JavaScript event handler—the event handler will still be executed despite the iframe being in a sandbox. This vulnerability affects Firefox versions earlier than 97,...
Astra Linux – Vulnerability in Firefox
A compromised web child process could disable web security opening restrictions, resulting in a new child process being spawned within the file:// context. With a reliable exploit primitive, this new process could be exploited again, leading to arbitrary file reading. This vulnerability affects...
ImCurvin
ImCurvin' ImCurvin 是一款开源 Web 安全审计与渗透测试工具，作为概念验证（PoC）设计，用于自动化检测环境错误配置、追踪暴露的配置蓝图，并探测后端漏洞。 关于 ImCurvin 的详细信息，请访问 https://github.com/Skokoo/ImCurvin/blob/main/Mode.md 本项目完全在智能手机上使用 Termux 进行工程开发与调试。 截图。 您可以查看界面与流程的完整详解。请参阅截图画廊。 安装与使用方法 项目正在修复中，请暂时不要使用，我正在修复它 从 GitHub Releases 页面 下载并安装最新的 .deb 包：...
Darkly-Pentesting
Darkly A web security audit project focused on identifying an...
Introducing AI Assistant for Akamai Web Security Analytics
Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language...
You Get What You Sample: Evaluating Sampling Strategies for Web Security Measurements
Web measurement studies rely on domain datasets such as Tranco to quantify the prevalence and impact of security issues at scale, but exhaustively analyzing these datasets is often infeasible because of the cost of advanced analysis techniques, requiring the use of sampling. Despite its widesprea...
offensive-security-writeups
Offensive Security Write-ups from the CTF challenges tackled...
FoxStryker_Scanner
🦊 FoxStryker — Advanced Web Vulnerability Scanner v3.0 FoxStr...
caido v0.58.3
Website • Dashboard • Docs • Roadmap • Branding • Discord 👋 Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...
BUUCTF-Web-Writeups
BUUCTF-Web-Writeups A collection of CTF Web challenges writ...
owtf v2.7.0
Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...
Shifting from Injection to Interaction: Rethinking Web Security in the Age of LLMs and Beyond
Large language models LLMs are becoming integral to web applications and browser agents, transforming online interactions while introducing new attack vectors and reshaping longstanding web vulnerabilities. Classical threats such as cross-site scripting XSS can be amplified through LLM-mediated...
portswigger---cross-site-scripting
portswigger-web-security-academy/ └── cross-site-scripting/...
CVE-2026-79070
A flaw was found in Google Chrome. Incorrect reference resolution within the browser's cache allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive informatio...
CavalryHive
CavalryHive Autonomous web-security assessment toolkit for...
DEBIAN-CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
