813 matches found
AllAboutBugBounty
关于 Bug Bounty 的一切 这些是我从各种来源收集的 bug bounty 笔记，你也可以为这个仓库做出贡献！ 漏洞列表 任意文件上传 CRLF 注入 跨站请求伪造 CSRF 跨站脚本 XSS 拒绝服务 DoS 源代码泄露 主机头注入 不安全的直接对象引用 IDOR 本地文件包含 LFI 批量赋值 NoSQL 注入 NoSQLi OAuth 配置错误 开放重定向 反射型文件下载 RFD 远程文件包含 RFI 服务器端包含注入 SSI 注入 服务器端请求伪造 SQL 注入 SQLi Web 缓存欺骗 Web 缓存投毒 绕过列表 绕过 2FA 绕过 403 绕过 429 绕过验证码...
TIWAP
完全に安全ではないWebアプリケーションプロジェクト TIWAP TIWAPは、Flaskで作られたWebセキュリティテストラボであり、セキュリティ愛好家がさまざまなWeb脆弱性について学ぶために作られました。DVWAに触発され、コントリビューターはさまざまなWeb脆弱性を再現するために最善を尽くしました。 このアプリケーションは教育目的専用であり、合法的な環境でWebハッキングを学ぶために作られています。 こちらで詳細を読む 免責事項 ラボはライブWebサーバー（内部または外部）ではなく、仮想マシンにインストールすることを強くお勧めします。...
OWASP-Calculator
OWASP リスク評価計算機 🧮 OWASPリスク評価に基づいてWeb脆弱性のリスクを評価するオンライン計算機。 オンライン計算機に移動 スペインで ❤️ を込めて作成...
easy-exploits
easy-exploits このリポジトリには、過去に私が特定したさまざまなCVE...
cyberange
大家好，我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...
CVE-2026-15085 AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI SEO/GEO Analyzer allows Stored XSS. This issue affects AI SEO/GEO Analyzer versions: from 0.0.0 to 1.1.3...
CVE-2026-13375 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13938. This issue affects Fireware O...
Oracle Siebel Server <= 26.5 (June 2026 CSPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory. - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26....
sentinelx
sentinelx SentinelX AI — Next-gen AI-powered cybersecurit...
secure-software-development
Secure Software Development — Notes & Exercise Writeups Perso...
cve-2026-poc-collection
CVE-2026 PoC Collection Report Collection date: May 19, 2...
exploitra
🚀 EXPLOITRA v1.0 - Advanced Vulnerability Engine EXPLOITRA...
Caido-Plugin
Github • Documentation  ...
RedTrace
RedTrace v3.0 — Web Vulnerability Scanner Professional-grad...
IBM Aspera Orchestrator 安全漏洞
IBM Aspera Orchestrator is a web-based application developed by IBM. It provides efficient file processing pipelines for data-driven businesses. There were security vulnerabilities in the version 3.0.0 to 4.1.2 of IBM Aspera Orchestrator. These vulnerabilities stemmed from the storage of sensitiv...
Web-Application-Vulnerability-Scanner
WebVulnScan A beginner-to-intermediate web application vuln...
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
For the last few months, we've been using the GitHub Security Lab Taskflow Agent along with a new set of auditing taskflows that specialize in finding web security vulnerabilities. They also turn out to be very successful at finding high-impact vulnerabilities in open source projects. As security...