OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ Этот репозиторий сворачивается. Дальнейшая работа должна вестись через www-project-vulnerable-web-applications-directory Проект OWASP Vulnerable Web Applications Directory VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ — это всеобъемлющий и...

yasuo

YASUO @0xsauby Описание Yasuo — это скрипт на Ruby, который сканирует уязвимые сторонние веб-приложения. Во время оценки безопасности сети внутренней, внешней, redteam и т.д. мы часто сталкиваемся с уязвимыми сторонними веб-приложениями или веб-интерфейсами, которые позволяют скомпрометировать...

ios11-cookie-set-expire-issue

Проблема установки / истечения cookie в iOS 11 Существует перемежающаяся проблема с установкой и истечением cookie в веб-приложениях на домашнем экране iOS 11. Наблюдаются два ошибочных поведения: После установки cookie, закрытия приложения и его повторного открытия cookie может отсутствовать Пос...

kiterunner

Kiterunner Введение Долгое время обнаружение контента было сосредоточено на поиске файлов и папок. Хотя этот подход эффективен для устаревших веб-серверов, которые обслуживают статические файлы или отвечают 3xx при частичном пути, он больше не эффективен для современных веб-приложений, особенно...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

Azure-App-Tools

Azure-App-Tools Azure 애플리케이션에서 사용할 수 있는 도구 모음입니다. https://azure.microsoft.com/en-us/get-started/apps/ 필수 구성 요소 Azure Powershell 모듈 https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 예제: 동적 디바이스 코드 @MrUn1k0d3r의 원본 PoC...

CVE-2026-5108

The CVE concerns the WordPress plugin Super Progressive Web Apps (versions

WordPress Super Progressive Web Apps plugin <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by lucsob in WordPress Plugin Super Progressive Web Apps versions = 2.2.43...

CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

SUSE CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17780

An inappropriate implementation flaw was found in the Isolated Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513485951...

CVE-2026-17909

An insufficient validation of untrusted input flaw was found in the Isolated Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501693236...

SUSE CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

CVE-2026-17909

CVE-2026-17909 affects Google Chrome’s Isolated Web Apps, where insufficient validation of untrusted input could allow a remote attacker to leak cross-origin data through malicious network traffic. The public descriptions consistently reference the issue as a low-severity Chromium-related vulnera...