21 matches found
SecurityShepherd
OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...
CVE-2026-108741
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
CVE-2026-108741 Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
CVE-2026-108741
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
CVE-2026-108741 Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
CVE-2026-108741 Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
CVE-2026-108741
The Shepherd (shepherd-ai) software, version 0.3.1 and below, is vulnerable to a Server-Side Request Forgery (SSRF) via DNS Rebinding in the citation-checker extra. The root cause is a Time-of-check Time-of-use (TOCTOU) race condition where the public_url guard validates a resolved address, but t...
EUVD-2026-96907
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
CVE-2026-108741: Time-of-check Time-of-use (TOCTOU) Race Condition
Shepherd shepherd-ai through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the publicurl guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and...
PT-2026-110144
Name of the Vulnerable Software and Affected Versions Shepherd shepherd-ai versions prior to 0.3.2 Description A server-side request forgery guard bypass exists in the citation-checker extra. The issue occurs because the public url guard validates a resolved address, but the fetch function...
Shepherd-Agents Shepherd race condition vulnerabilities
Shepherd-Agents versions prior to Shepherd 0.3.1 have a vulnerability due to a race condition issue. This vulnerability stems from an SSRF protection in the citation-checker extension. The publicurl protection only verifies resolved addresses, but the fetch function reresolves the hostname during...
OWASP-Pentest-Suite
OWASP Web Application Penetration Testing University of t...
Malicious code in down_load_ebook_daughters_of_night_by_laura_shepherd_robinson_1y8gt (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2154 Malicious code in down_load_ebook_causa_de_la_muerte_by_richard_shepherd_2a7ov (npm)
--- -= Per source details. Do not edit below this line.=-...
australianshepherd.de Improper Access Control vulnerability OBB-3774604
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
australian-shepherd.de Improper Access Control vulnerability OBB-3765381
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft SharePoint Server 2019 - Remote Code Execution
Exploit Title: Microsoft SharePoint Server 2019 - Remote Code Execution Google Dork: inurl:quicklinks.aspx Date: 2020-08-14 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: SharePoint Enterprise Server 2013 Service Pack 1, SharePoint Enterprise Server 2016 ,...
shepherduniversity.edu XSS vulnerability
Vulnerable URL: http://www.shepherduniversity.edu/esl/wp-content/themes/dt-nimble/likewindow.php?img=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Mobile Application Security Training Platform: Security Shepherd
The OWASP Security Shepherd project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienced engineers and sharpen...
OWASP Security Shepherd - Web And Mobile Application Security Training Platform
The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienced engineers and sharpen...