CVE-2025-29018

CVE-2025-29018 - Internet Banking System 2.0.0 Stored XSS in pagesaddacctype.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 due to unsanitized input in the name parameter in pagesaddacctype.php. Attackers can store malicious...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 Remote Code Execution via Profile Picture Upload Description A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...

CVE-2025-14221

Description 1. CVE-2025-14221 2. Discoverer: Fatma Trabelsi 3. Vendor of Product: SourceCodester 4. Affected Product: Online Banking System 1.0 POC A Stored Cross-Site Scripting XSS vulnerability exists in the User Profile Update functionality of the application. The application fails to properly...

vuln-bank-mobile

💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

CVE-2026-87164

Oracle Banking Branch (Oracle Financial Services Applications), component: Reports , is affected in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit and requires hum...

EUVD-2026-79819

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83489

This vulnerability affects Oracle Banking Origination (Oracle Financial Services Applications), specifically the Onboarding Batch Processes component, in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which...

EUVD-2026-79776

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications component: Onboarding Batch Processes. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2026-83206

Oracle Banking Corporate Lending Process Management (Oracle Financial Services Applications, component: Base) is affected by a vulnerability in supported versions 14.5.0.0.0–14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, bu...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83081

Oracle Banking Corporate Lending (component: Core ) of Oracle Financial Services Applications, versions 14.5.0.0.0 through 14.9.0.0.0 , is affected by a vulnerability scored CVSS 3.1 Base 8.0 (HIGH) . An unauthenticated attacker with access to the physical communication segment attached to the ha...

CVE-2026-83080

Oracle Banking Branch (component: Reports ) in Oracle Financial Services Applications versions 14.5.0.0.0 through 14.9.0.0.0 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full compromise (high confidentiality, integrity, and availability im...

EUVD-2026-79408

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2024-56924

CVE-2024-56924 Vulnerability Description A Cross-Site Request Forgery CSRF vulnerability exists in the code astro Internet Banking System version 2.0.0, which allows remote attackers to perform unauthorized actions on behalf of authenticated users, such as administrators, without their knowledge...

vuln-bank

易受攻击的银行应用程序 🏦 一个故意包含漏洞的 Web 应用程序，用于练习 Web、API 和 LLM 的应用安全测试、安全代码审查以及在 CI/CD 管道中实施安全措施。 ⚠️ 警告：此应用程序有意包含漏洞，仅应在隔离环境中用于教育目的。 概述 本项目是一个内置多种安全漏洞的简单银行应用程序。它旨在帮助安全工程师、开发人员、实习生、QA 分析师和 DevSecOps 从业者了解： 常见的 Web 应用程序和 API 漏洞 AI/LLM 漏洞 安全编码实践 安全测试自动化 DevSecOps 实施 功能与漏洞 核心银行功能 🔐 用户身份验证与授权 💰 账户余额管理 💸 转账 📝 贷款申请 ...

CVE-2025-29015

CVE-2025-29015 - Internet Banking System 2.0.0 Stored XSS in pagesaccount.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 via the name parameter in /admin/pagesaccount.php. Malicious JavaScript code can be injected and stored in t...

CVE-2026-21978

CVE-2026-21978 My CVE in Oracle FLEXCUBE Universal Banking Link: https://www.oracle.com/security-alerts/cpujan2026.html...

Qakbot

This repository does not have a README...

zeek-gozi-detector

Gozi Malware Detector This Zeek packages detects Gozi banking malware activity. Resources: The RAR files this package looks for were discussed in the following articles: https://unit42.paloaltonetworks.com/march-wireshark-gozi-answers/...