88 matches found
DevGuide
OWASP 基金会开发者指南 开发者指南是 OWASP 的原始文档之一，因此有着悠久的历史。 原始的 DevGuide 仓库包含许多旧版本，最早可追溯到 2002 年发布的1.0 首个版本。 这是开发者指南文档的内容，即 DevGuide 仓库；本指南的最新版本可在网页文档中访问。 OWASP 开发者指南项目页面的内容位于其独立的仓库中。 OWASP 有一期关于 OWASP 开发者指南的历史 的播客，其中讨论了该项目的过去与未来。 贡献 欢迎为开发者指南提供贡献和建议；请从阅读贡献指南开始，并遵守贡献者行为准则。 如需对这些页面做出其他贡献，请创建 issue 或发起拉取请求。...
openclaw_vulnerabilities_and_solutions
OpenClaw — 漏洞、加固与 VPS 部署 经过匿名处理的公开文档，介绍如何在 VPS 上安全部署 OpenClaw：访问架构、已知漏洞以及实际故障案例及解决方案。 来自真实 OpenClaw 运营的公开、净化文档：如何在不暴露网关的情况下在 VPS 上部署平台，哪些 CVE/问题在实践中重要，以及生产环境中出现的故障（附修复方案）。 当前版本 / Current version: v1.1 · 更新日志 · GitHub Releases 本仓库是什么 / What this repository is...
cyberange
大家好，我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...
MINI-HCQR-5752-V68J
Bulletin has no description...
MINI-92X5-X256-9QPV
Bulletin has no description...
MINI-JVC5-QR6W-C5RC
Bulletin has no description...
CVE-2026-11624
The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced...
EUVD-2026-36650
The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced...
Exploit for SQL Injection in Progress Moveit_Cloud
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...
On Microsoft’s Lousy Cloud Security
ProPublica has a scoop: In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. The tech giant's "lack of proper detailed security documentation" left reviewers with a "lack of confidence in assessing th...
EUVD-2026-4355
Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through = 11.0.0...
EUVD-2025-204277
WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 is vulnerable to Broken Access Control in initial configuration wizard.cgi endpoint. Malicious attacker can change admin panel password without authorization. The vulnerability can also be exploited after the initial configuration has...
EUVD-2015-8123
Malware in sbrugna...
EUVD-2017-8323
Malware in sbrugna...
EUVD-2005-3449
Malware in sbrugna...
CVE-2025-8495
creationtimestamp| type| source ---|---|--- 2025-08-03 04:08:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvhsma4shh26...
CVE-2025-50090
Oracle E-Business Suite - Oracle Applications Framework Personalization vulnerability (CVE-2025-50090) affects 12.2.3–12.2.14. A low-privileged, network-access attacker can exploit via HTTP with user interaction to cause unauthorized data modification, insertion, deletion, or read access. Root ca...
CVE-2025-50065
...
CVE-2025-38089
creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...