Checklists

Introducción Aunque la prueba de penetración es un proceso creativo, la mayoría de las personas mantienen listas de verificación privadas para asegurarse de no olvidar probar redes, sistemas y aplicaciones contra diversos escenarios y mantener la calidad general de la evaluación. Propósito El...

awesome-security-hardening

awesome-security-hardening Una colección de excelentes guías de hardening de seguridad, buenas prácticas, listas de verificación, benchmarks, herramientas y otros recursos. Esto es un trabajo en curso: por favor contribuye enviando tus sugerencias. Puedes hacerlo creando tickets de incidencia o...

sectemplates

Sectemplates Me complace anunciar la creación de SecTemplates.com, un sitio web donde profesionales de la seguridad informática y equipos de ingeniería de startups que carecen de un equipo de seguridad pueden encontrar plantillas para ayudar a impulsar sus programas. El enfoque principal de este...

PentestingEverything

PentestingEverything Una base de conocimiento completa y buscable sobre pruebas de penetración en 23 dominios de seguridad. Sitio web en vivo: pentesting.m14r41.in Sitio web en vivo · PentestingChecklist · Contribuir · Reportar un problema Léelo en línea en pentesting.m14r41.in : completamente...

sh00t

A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task management...

sh00t

A Testing Environment for Manual Security Testers Sh00t es un gestor de tareas para que te centres en realizar pruebas de seguridad proporciona listas de verificación Por Hacer de casos de prueba ayuda a crear informes de errores con plantillas de errores personalizables Características: Gestor d...

CVE-2026-59154

Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistItems because updates are authorized only against the current source doc.cardId and do not inspect the destination...

CVE-2026-59154 Wekan: Checklist direct DDP updates can write checklist data into private boards

Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistItems because updates are authorized only against the current source doc.cardId and do not inspect the destination...

EUVD-2026-42935

Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistItems because updates are authorized only against the current source doc.cardId and do not inspect the destination...

CVE-2026-59154: Incorrect Authorization

Wekan is open source kanban built with Meteor. Prior to 9.64, Wekan has a cross-board authorization bypass in the direct Meteor collection allow rules for Checklists and ChecklistItems because updates are authorized only against the current source doc.cardId and do not inspect the destination...

OSCP-PEN200

🛡️ OSCP / PEN-200 Master Pentesting Database !License: MIT...

CVE-2026-25564 WeKan < 8.19 Checklist Deletion IDOR via Missing Relationship Validation

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

PT-2026-6927

Name of the Vulnerable Software and Affected Versions WeKan versions prior to 8.19 Description The software contains an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied...

CVE-2025-22171

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...

EUVD-2025-35605

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...

CVE-2025-22171

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...

CVE-2025-22175

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist...

CVE-2025-22171

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...

CVE-2025-22171

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...

CVE-2025-22171

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users...