vulnerable-code-snippets

易受攻击的代码片段 漏洞 | 编程语言 | 运行易受攻击的代码片段 | 安装 | 更新 YesWeHack 提供了包含多种不同漏洞的代码片段，让你能在安全的 Docker 化环境中练习代码分析。这些易受攻击的代码片段适合所有技能水平。 每周五 在 Twitter @yeswehack 上发布新的易受攻击的代码片段 ！🗒 如果你想看到一些特别的内容，或者你只是对易受攻击的代码片段有一个想法，欢迎创建一个「新建 Issue」来阐述你的想法，没有想法是愚蠢的 。 ⚠️ 请注意 请务必在安全的环境中运行这些代码，因为代码本身存在漏洞，仅供学习代码分析之用！...

PT-2026-5499

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Keycloak Admin API that allows an administrator with limited privileges to retrieve sensitive custom attributes. This is achieved through the /unmanagedAttributes API...

PrestaShop file deletion via CustomerMessage

Impact It is possible to delete files from the server via the CustomerMessage API Patches 8.1.1 Found by Kto94 via Yeswehack Workarounds none References none...

PrestaShop file deletion via attachment API

Impact It is possible to delete a file from the server by using the Attachments controller and the Attachments API. Patches 8.1.1 Found by Kto94 via Yeswehack Workarounds none References none...

PrestaShop SQL manager vulnerability

Impact Remote code execution through SQL injection and arbitrary file write in back office Patches 1.7.8.10 8.0.5 8.1.1 Found by Truff via yeswehack Workarounds none References none...