Learn-Web-Hacking

Web Hacking Study Notes 中文版 README Link to notes English Translation Status This English version is a work in progress. The translated table of contents is intended to help readers find topics, but many pages in the English site may still show the original Chinese text. The Chinese files under...

AllAboutBugBounty

All about bug bounty These are my bug bounty notes that I have gathered from various sources, you can contribute to this repository too! List Vulnerability Arbitrary File Upload CRLF Injection Cross Site Request Forgery CSRF Cross Site Scripting XSS Denial of Service DoS Exposed Source Code Host...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

app

Standard Notes Standard Notes est une application de prise de notes chiffrée de bout en bout pour les digitalistes et les professionnels. Capturez vos notes, fichiers et le travail de votre vie en un seul endroit sécurisé. Pourquoi Standard Notes ? Synchronisation chiffrée de bout en bout. Vous...

OpenSSL_1_1_1_g

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson جميع الحقوق محفوظة. الوصف مشروع OpenSSL هو جهد تعاوني لتطوير مجموعة أدوات قوية، بمستوى تجاري، كاملة الميزات، ومفتوحة المصدر، تنفّذ بروتوكولات أمان طبقة النقل TLS بما في ذلك SSLv...

Pentest-Everything

⚔️ Pentest Everything Important Mettez cette page en favori car les autres liens sont susceptibles de changer ou d'évoluer au fil du temps. Cette page restera toujours la même. À propos de ce livre Ce livre est ma collection de notes et de comptes rendus write-ups sur divers sujets et plateformes...

faraday_bugbounty

faradaybugbounty مساحات عمل فاراداي لمكافآت الثغرات الأمنية ملاحظات الإصدار التوثيق...

CVE-2021-24807

CVE-2021-24807 ثغرة تخزين النصوص البرمجية عبر المواقع Stored XSS بعد تسجيل الدخول في Support Board 3.3.4 توجد ثغرة تخزين النصوص البرمجية عبر المواقع XSS بعد تسجيل الدخول في Support Board الإصدار 3.3.4 عبر معامل Notes. يختلف تأثير ثغرات النصوص البرمجية عبر المواقع من تطبيق ويب إلى آخر، إذ يتراوح م...

HackingAllTheThings

HackingAllTheThings Summary This repository is to keep a structure on my tools an notes that I use when working on archive some IT-Security certifications. Some tools will be written by me and others will be resources found from different locations...

notes

notes Une archive de mes notes de recherche en vulnérabilités. Principalement des versions développées de mes tweets...

CVE-2026-93746

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 5.0.2 . The flaw exists in the print_document_from_the_mail_link handler, which validates access...

EUVD-2026-96289

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest printdocumentfromthemaillink handler dispatched from...

Notes

Security Engineering at Google: My Interview Study Notes By nolang I am a security engineer at Google and these are the notes from when I was studying for the interviews. This is my first job in security and a lot of people have asked me how I studied. My notes consist mostly of a list of terms a...

CVE-2023-28121

CVE-2023-28121 ملاحظات بحثية ومواد مساعدة لدراسة CVE-2023-28121 في مختبر WooCommerce Payments/WooCommerce خاضع للتحكم. إشعار السلامة استخدم هذه المواد فقط في أنظمة تمتلكها أو لديك إذن صريح لاختبارها. احتفظ بإصدارات WordPress والإضافات الضعيفة داخل مختبر محلي معزول. لا تستهدف مواقع طرف ثالث أو أنظ...

PenetrationTesting_Notes-

Notes de Test d'Intrusion Utilisez cherryTree dernière version pour ouvrir PenetrationTestingNotes.ctb vous pouvez utiliser mes paramètres de préférences pour une meilleure expérience...

CVE-2022-40317

CVE-2022-40317 XSS مخزّن في الملاحظات تم اكتشاف ثغرة XSS مخزّنة في قسم الملاحظات بالتطبيق أثناء اختبار الاختراق لعميل كان يستخدم OpenKM. بشكل أساسي، عند تخزين الملاحظات، كان يُسمح بطريقة ما بإدخال HTML عادي وكان يُعرض كما هو. وكما تعلم، كانت وسوم ومع ذلك، وجدنا أن استخدام "javascript:" داخل وسم...

Blinko < 1.8.4 - Path Traversal

Blinko 1.8.4 contains a path traversal vulnerability caused by lack of permission checks and filtering on the temp/ path in the file server endpoint, letting unauthorized attackers read arbitrary files including backup files with user notes and tokens, exploit requires no special privileges. id:...

WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution

Print Invoice & Delivery Notes for WooCommerce plugin for WordPress = 5.8.0 contains a remote code execution caused by missing capability check, PHP enabled in Dompdf, and missing escape in template.php, letting unauthenticated attackers execute code on the server. id: CVE-2025-13773 info: name:...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/dns.php Profile Name or notes field. id: CVE-2018-19914 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...