32 matches found
www-project-top-10-for-large-language-model-applications
www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications...
Juiceshopgl
Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability...
SecurityShepherd
OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...
coreruleset
ๅๆฏ| ็ถๆ ---|--- main| ๐ก๏ธ OWASP CRS OWASP CRS ๆฏไธๅฅ้็จๆปๅปๆฃๆต่งๅ๏ผ็จไบ OWASP ModSecurityใOWASP Coraza ๆๅ ถไปๅ ผๅฎน็ Web ๅบ็จ้ฒ็ซๅขใCRS ๆจๅจไฟๆค Web ๅบ็จๅ ๅๅนฟๆณๆปๅป๏ผๅ ๆฌ OWASP Top Ten๏ผ๏ผๅๆถๆๅคง้ๅบฆๅๅฐ่ฏฏๆฅใ ๐ CRS ่ตๆบใ็ธๅ ณ้กน็ฎไธๅทฅๅ ท ่ฏท่ฎฟ้ฎ OWASP CRS ้กต้ข ไบ่งฃ CRS ็ๅ ฅ้จไป็ป๏ผ่ทๅๅฎ่ฃ ใ้ ็ฝฎๅไฝฟ็จ CRS ็่ตๆบใ่ฏฅ้กต้ข่ฟๆไพไบ CRS ็ธๅ ณ้กน็ฎๅ่กจ ไปฅๅ้็จไบๅผๅ่ ๅ็จๆท็ ๅทฅๅ ทๅ่กจใ ๐ค ไธบ CRS ๅ่ดก็ฎ ๆไปฌๅชๅ่ฎฉ OWASP CRS...
juice-shop
OWASP Juice Shop ่ฟไธชไธ็ไธๆๅผๅพไฟก่ต็ๅจ็บฟๅๅบใ @dschadow โ ๆดไธชไบ่็ฝไธๆๅฅฝ็ๆๆฑๅบ๏ผ @shehackspurple โ ๅฎ้ ไธ๏ผ่ฟๆฏๅญๅจ็ๆๅฐ bug ็ๆๅๆปๅป็ๅบ็จ็จๅบ๏ผ @vanderaj โ ๅ ็ฌ๐๐๏ผๅๅญ๐ข @kramse โ ไฝ่ฟๅๆๆฑๆฒกๆไปปไฝๅ ณ็ณปใ @coderPatros ็ๅฆปๅญ OWASP Juice Shop ๅฏ่ฝๆฏๆ็ฐไปฃใๆๅคๆ็ไธๅฎๅ จ Web ๅบ็จ็จๅบ๏ผๅฎๅฏไปฅ็จไบๅฎๅ จๅน่ฎญใๆ่ฏๆผ็คบใCTF ไปฅๅไฝไธบๅฎๅ จๅทฅๅ ท็ๆต่ฏๅฏน่ฑก๏ผJuice Shop ๅ ๅซไบๆดไธช OWASP Top Ten ไธญ็ๆผๆด๏ผไปฅๅๅฎ้ ๅบ็จ็จๅบไธญๅ็ฐ็่ฎธๅคๅ ถไปๅฎๅ จ็ผบ้ท...
EUVD-2000-0717
Malware in sbrugna...
M2E Platform Sweat Economy Launches Flagship NFT Game: Sweat Hero
By Owais Sultan Sweat Hero becomes the first ever NFT game within a move-to-earn platform. This is a post from HackRead.com Read the original post: M2E Platform Sweat Economy Launches Flagship NFT Game: Sweat Hero...
Googleโs Pixel 7 and Pixel 7 Pro Pack New Android VPN and Tensor G2, Titan M2 Chips
The company says it hardened the security of its new flagship phonesโand plans to release a built-in Android VPN...
File Deletion Vulnerability in Configuration King
KingView is the flagship brand in China's equipment monitoring field, featuring full functionality, simplicity, ease of learning and ease of use. KingView has a file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...
Weak Password Vulnerability in Flagship IDC/ISP Access Resource Management System
Ltd. is headquartered in Pudong Lujiazui financial and trade zone, based in Shanghai, radiating across the country, the company is one of the earliest enterprises involved in the field of network information security in China. A weak password vulnerability exists in Flagship's IDC/ISP access...
Command Execution Vulnerability in UCLOUD Flagship Fortress
UCLOUD Flagship Fortress provides users with a centralized O&M management solution. A command execution vulnerability exists in UCLOUD Flagship Edition Bastion Machine, which can be exploited by an attacker to execute remote commands...
Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition
Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...
Lock-Screen Bypass Bug Quietly Patched in Handsets
A design flaw affecting all in-display fingerprint sensors โ that left over a half-dozen cellphone models vulnerable to a trivial lock-screen bypass attack โ has been quietly patched. The flaw was tied to a bug in the popular in-display fingerprint reader technology used for user authentication...
The Titan M Chip Powers Up Pixel 3 Security
Google's latest flagship smartphone includes the Titan M, a security-focused chip that keeps users safe against sophisticated attacks...
Samsung Patches Six Critical Bugs in Flagship Handsets
Samsung began rolling out patches over the weekend to fix six critical bugs found in its flagship Android handsets as part of its May patch bulletin. Flaws range from a remote code execution bug to a buffer overflow vulnerability, plus a peek-and-poke command bug that leaves memory locations open...
Threat Outbreak Alert RuleID29509: Email Messages Distributing Malicious Software on June 19, 2017
Medium Alert ID: 54226 First Published: 2017 June 19 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29509 may contain the following files: Name | Siz...
mail.flagshiprehab.com XSS vulnerability
Open Bug Bounty ID: OBB-193065 Description| Value ---|--- Affected Website:| mail.flagshiprehab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Multisoft FlagShip 4.4 Installation Permission Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1586/info A vulnerability exists in the installation of Multisoft's FlagShip 4.4 product. Some binaries are installed with world writable permissions. This may allow an attacker to alter a binary and cause other users to...
How the Google-Motorola Deal May Affect Android Security
By B.K. DeLong With this morningโs acquisition of Motorola Mobility, Google has made the move to bring in a solid hardware component for their Android mobility platform and fired another shot across the bow of Apple. But one big questions remains: What does this acquisition mean for those trying ...