railsgoat

RailsGoat RailsGoat è un'applicazione web volutamente vulnerabile costruita su Ruby on Rails. Dimostra vulnerabilità di sicurezza reali della OWASP Top 10 e funge da piattaforma di formazione pratica per sviluppatori e professionisti della sicurezza. Cos'è RailsGoat? RailsGoat è un'applicazione...

CVE-2023-30943

CVE-2023-30943Moodle self-xss Отказ от ответственности Весь контент предоставлен "как есть", без каких-либо гарантий, явных или подразумеваемых. Авторы не несут ответственности за какой-либо ущерб, прямой или косвенный, возникший в результате использования информации или программного обеспечения,...

google-dorks-bug-bounty

Google Dorks für Bug Bounty Eine Liste von Google Dorks für Bug Bounty, Web Application Security und Pentesting Live-Tool Breite Domain-Suche mit Negativsuche root@kitploit: site:example.com -www -shop -share -ir -mfa PHP-Erweiterung mit Parametern root@kitploit: site:example.com ext:php inurl:?...

ezXSS

ezXSS ist eine einfache Möglichkeit für Penetrationstester und Bug-Bounty-Jäger, blindes Cross-Site-Scripting zu testen. ezXSS ist ein Tool, das entwickelt wurde, um Cross-Site-Scripting XSS-Schwachstellen zu finden und auszunutzen. Eine der wichtigsten Funktionen von ezXSS ist die Fähigkeit,...

go-toolset:rhel8 security, bug fix, and enhancement update

An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2026-54606

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.

Summary serialize-javascript is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-34043. Vulnerability Details CVEID:CVE-2026-34043 DESCRIPTION: Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update

An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...

CVE-2024-24136

CVE-2024-24136 : Gioco matematico Cross-Site-Scripting Prova di concettoPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24136.md Prova di concettoPoC : https://github.com/BurakSevben/CVE-2024-24136/blob/main/CVE-2024-24136.md...

blackboard-xss

Questo repository non contiene un README...

CVE-2017-9805-Exploit

Dieses Repository hat keine README-Datei...

CVE-2024-42009

CVE-2024-42009 PoC: Listener di Cattura Email & Exploit XSS Panoramica Questa Proof of Concept PoC dimostra un exploit per CVE-2024-42009, sfruttando una vulnerabilità di cross-site scripting XSS per estrarre email da un'applicazione webmail target. L'attacco inietta un payload malevolo che...

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 Segnalazione di vulnerabilità del sito ufficiale del New Jersey Potenziale vulnerabilità XSS in jQuery.htmlPrefilter e metodi correlati. Passare HTML da fonti non attendibili - anche dopo averlo sanitizzato - a uno dei metodi di manipolazione del DOM di jQuery es...