zappzarapp-php-security

⚡ zappzarapp/security Biblioteca integral de seguridad para PHP que proporciona CSP, cabeceras de seguridad, protección CSRF, cookies seguras, validación de contraseñas, saneamiento de entradas, limitación de velocidad, SRI, carga de secretos, cifrado, seguridad de sesiones, autenticación de dos...

CSPBypass

CSP Bypass Bienvenido a CSPBypass.com , una herramienta diseñada para ayudar a los hackers éticos a eludir Políticas de Seguridad de Contenido CSP restrictivas y explotar vulnerabilidades XSS Cross-Site Scripting en sitios donde las inyecciones están bloqueadas por CSP que solo permiten ciertos...

JSONBee

JSONBee Un conjunto de endpoints JSONP listos para usar que ayudan a evadir la política de seguridad de contenido de diferentes sitios web. La herramienta se presentó durante HackIT 2018 en Kiev. La presentación se puede encontrar aquí no estoy seguro de por qué el formato de las diapositivas est...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

cspparse

cspparse 説明 cspparse は、コンテンツセキュリティポリシー（CSP）を評価するためのツールです。Google の API を使用して CSP ヘッダーを取得し、ReconJSON 形式で出力します。Google の API によるヘッダーチェックだけでなく、対象サイトの HTML を解析して タグで指定された CSP ルールも検出します。 インストール Go Get によるインストールコマンドとソースコードのダウンロード cspparse コマンドは $GOPATH/bin にインストールされ、ソースコード（https://github.com/lc/cspparse...

CVE-2026-21833

HCL AION is affected by a vulnerability in which the Content-Security-Policy CSP HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting XSS by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header...

EUVD-2026-90966

HCL AION is affected by a vulnerability in which the Content-Security-Policy CSP HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting XSS by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header...

CVE-2026-21833

HCL AION is affected by a vulnerability due to a missing Content-Security-Policy (CSP) HTTP response header. The absence of this header reduces the effectiveness of browser-based security controls, which are designed to prevent attacks like Cross-Site Scripting (XSS) by restricting the sources of...

CVE-2026-21833 HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)

HCL AION is affected by a vulnerability in which the Content-Security-Policy CSP HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting XSS by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header...

CVE-2020-6519

Esto fue publicado originalmente en el Github oficial de la empresa PerimeterX a través de mi cuenta de Github de trabajo. Aunque este es mi trabajo - todos los derechos y asuntos legales pertenecen a la empresa PerimeterX. Chromium 83 Zero Day: Bypass Completo de CSP Multiplataforma CVE-2020-651...

CVE-2020-6519

Chromium 83 Día Cero Bypass Completo de CSP Multiplataforma CVE-2020-6519 Artículo técnico POC tal como fue reportado al proyecto Chromium ¡Videos demo!...

Linux Distros Unpatched Vulnerability : CVE-2026-43670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS...

AlmaLinux 9.6 [TuxCare] Security Update: yelp / yelp-devel / yelp-libs (ALMALINUX9.6:CLSA-2026:1784539549)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784539549 advisory. - A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak...

AlmaLinux 9.2 [TuxCare] Security Update: firefox / firefox-x11 Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1784826792)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784826792 advisory. - When a parent page loaded a child in an iframe with unsafe-inline, the parent Content Security Policy could have overridden the...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_9692)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269692 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43213 webkitgtk: Processing maliciously crafted web...

AlmaLinux 9.6 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782216821)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782216821 advisory. - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5...

AlmaLinux 9.2 [TuxCare] Security Update: yelp / yelp-devel / yelp-libs (ALMALINUX9.2:CLSA-2026:1783700414)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783700414 advisory. - A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak...

Rocky Linux 8 [CIQ] Security Update: yelp / yelp-debuginfo / yelp-debugsource / yelp-devel / yelp-libs / etc (crlsa-2026_47177)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647177 advisory. yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVE-2026-13601 Tenable has extracted the...

Rocky Linux 9.6 [TuxCare] Security Update: yelp / yelp-devel / yelp-libs (ALMALINUX9.6:CLSA-2026:1784539549)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784539549 advisory. - A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2023_0808)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230808 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes CVE-2023-25728...