39 matches found
awesome-security-hardening
awesome-security-hardening Eine Sammlung von großartigen Sicherheits-Härtungsleitfäden, Best Practices, Checklisten, Benchmarks, Tools und anderen Ressourcen. Dies ist noch in Arbeit: Bitte trage durch das Senden deiner Vorschläge bei. Du kannst dies tun, indem du Issue-Tickets erstellst oder das...
Checklists
Introduzione Anche se un test di penetrazione è un processo creativo, la maggior parte delle persone conserva checklist personali per assicurarsi di non dimenticare di testare reti, sistemi e applicazioni in vari scenari e per mantenere la qualità complessiva della valutazione. Scopo L'obiettivo...
sh00t
root@kitploit: Un ambiente di test per tester di sicurezza manuali Sh00t è un task manager per permetterti di concentrarti sull'esecuzione di test di sicurezza fornisce To Do checklist di casi di test aiuta a creare report di bug con template di bug personalizzabili Caratteristiche: Task Manager...
sectemplates
Sectemplates Vorrei annunciare la creazione di SecTemplates.com, un sito web dove i professionisti della sicurezza informatica e i team di ingegneria delle startup che non dispongono di un team di sicurezza possono trovare modelli per aiutarli a avviare i loro programmi. L'obiettivo principale di...
PentestingEverything
PentestingEverything Una knowledge base completa e ricercabile per penetration testing su 23 domini di sicurezza. Sito web live: pentesting.m14r41.in Sito web live · PentestingChecklist · Contribuisci · Segnala un problema Leggilo online su pentesting.m14r41.in : completamente ricercabile, con 10...
CVE-2026-59154
Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistItems because updates are authorized only against the current source doc.cardId and do not inspect the destination...
EUVD-2026-42935
Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistItems because updates are authorized only against the current source doc.cardId and do not inspect the destination...
OSCP-PEN200
🛡️ OSCP / PEN-200 Master Pentesting Database !License: MIT...
CVE-2026-25564 WeKan < 8.19 Checklist Deletion IDOR via Missing Relationship Validation
WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...
PT-2026-6927
Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.19 Description The software contains an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied...
CVE-2025-22171
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...
EUVD-2025-35605
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...
CVE-2025-22171
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...
CVE-2025-22171
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...
CVE-2025-22175
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist...
CVE-2025-22171
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...
CVE-2025-22171
Jira Align is affected by an authorization issue (CVE-2025-22171). A low-privilege user can alter private checklists belonging to other users. Documented in multiple sources (NVD, Red Hat, EUVD, CVE lists) with no explicit exploitation details and no publicly disclosed fix/version in the provided...
CVE-2025-22171
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...
CVE-2025-22175
Jira Align exposes an authorization issue where a low-privilege user can access endpoints that disclose a small amount of sensitive information. In a concrete example, a low-level user was able to modify the steps of another user’s private checklist. The CVE-2025-22175 entry is consistently descr...
