zappzarapp-php-security

⚡ zappzarapp/security 全面的 PHP 安全库，提供 CSP、安全响应头、CSRF 防护、安全 Cookie、密码验证、输入净化、速率限制、SRI、密钥加载、加密、会话安全、TOTP 双因素认证、签名 URL 和安全事件日志记录。 亮点 一体化 — 单个可组合包中包含 17 个安全模块 默认安全 — 严格的 CSP，无 unsafe-，HTTPS 优先 框架无关 — 适用于任何 PHP 8.4+ 应用程序 不可变且类型安全 — readonly 类、枚举、with API 质量保障 — PHPStan Level 8、Psalm Level 1、100% Mutati...

cspparse

cspparse 描述 cspparse 是一个用于评估内容安全策略（Content Security Policies）的工具。它利用 Google 的 API 获取 CSP 头，并以 ReconJSON 格式返回。它不仅通过 Google 的 API 检查头信息，还会解析目标站点的 HTML，查找 标签中指定的任何 CSP 规则。 安装 安装命令并通过 Go Get 下载源码 cspparse 命令将被安装到 $GOPATH/bin，源码（来自 https://github.com/lc/cspparse）将位于...

JSONBee

JSONBee 一个随时可用的 JSONP 端点集合，帮助绕过不同网站的内容安全策略。 该工具在 2018 年基辅的 HackIT 大会上展示。演示文稿可在此处查看（不确定为什么幻灯片格式乱了 :D）：https://www.slideshare.net/HackenEcosystem/ebrahem-hegazy-bug-hunters-manual-for-bypassing-contentsecuritypolicy 什么是 JSONBee？ 该工具的主要思想是自动找到能帮助绕过目标网站内容安全策略的 JSONP 端点。JSONBee 接收一个 URL 名称（例如...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

CSPBypass

CSP 绕过 欢迎使用 CSPBypass.com ，一款旨在帮助道德黑客绕过限制性内容安全策略（CSP）并利用 XSS（跨站脚本）漏洞的工具，适用于注入被仅允许某些白名单域的 CSP 所阻止的站点。 网站 访问 CSPBypass.com 搜索现成的 CSP 绕过 gadget，帮助您实现 XSS，或贡献您自己的发现。 离线使用 构建 Docker 镜像并在本地运行，以通过捆绑的数据集提供静态 UI： root@kitploit: docker build -t cspbypass . docker run --rm -p 8080:80 cspbypass 浏览到...

CVE-2020-6519

这最初发布于 PerimeterX 公司官方 Github，经由我的 工作 Github 账号。 尽管这是我的工作成果 - 所有权利和法律问题均归 PerimeterX 公司所有。 Chromium 83 零日漏洞：跨平台完整 CSP 绕过 CVE-2020-6519 Exploit DB 技术文章 POC（报告给 chromium 项目） 演示视频!...

CVE-2020-6519

Chromium 83 零日漏洞 完整 CSP 绕过 跨平台 CVE-2020-6519 技术文章 POC（正如向 chromium 项目所报告的） 演示视频！...

CVE-2026-82838

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

CVE-2026-82838

Venueless 's default Docker image had a vulnerability where uploaded SVG files could be served with executable JavaScript content, potentially allowing stored XSS. The root cause was the absence of a proper Content Security Policy (CSP) in the image's default configuration. The fix sets a valid C...

EUVD-2026-68392

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

CVE-2026-82838 Default webserver configuration with incorrect CSP

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set...

CVE-2026-81852

Use of Insufficiently Random Values vulnerability in ash-project ashadmin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. When mounted without :cspnonceassignkey, AshAdmin.Router.ashadmin/2 defaulted the img, style, and script nonces to the...

CVE-2026-54477

CVE-2026-54477：管理面板缺少安全标头（点击劫持 / XSS） 公告 字段| 值 ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03（Gardyn IoT Hub） CVSS 3.1| 5.4（中危） 向量（3.1）| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 向量（4.0）| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CWE（CISA 分配）| CWE-644（HTTP 标头脚本语法中和不当）...

PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction

Summary Stored cross-site scripting XSS in PrivateBin's attachment download link. An anonymous attacker can create a paste with a text/html attachment that, with certain user interaction, bypasses protections similar to CVE-2022-24833. When a victim opens the "Download attachment" link in a new...

EUVD-2026-43003

Snipe-IT has CSS Injection via headercolor Setting...

towaos-lab-cve-2020-11023

CVE-2020-11023 - Vulnerabilidade XSS no jQuery Payloads de ataque root@kitploit: alert1 root@kitploit: Medidas de mitigação ⚠️ Importante : o uso de .html não é totalmente evitado apenas com jQuery 1. Usar o método .text ⭐️Recomendado root@kitploit: // Seguro: não é interpretado como HTML...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy through a malicious Chrome Extension...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, and watchOS 10.4. Processing maliciously crafted web content may prevent the Content Security...