security-culture

OWASP Security Culture これは、アプリケーションセキュリティプログラムを構築する際にセキュリティ文化を確立することの重要性と利点を説明する ドキュメントプロジェクトです。このガイドは、ソフトウェア開発ライフサイクル（SDLC）の各段階でセキュリティを考慮し、 安全な開発プラクティスの作成に役立ちます。 取り上げられるトピックは次のとおりです。成熟度目標の定義、セキュリティチームと開発 チームの連携、セキュリティチャンピオン、Capture the Flag などのアクティビティ、脅威モデリング、セキュリティテスト、 メトリクス。これらはすべて、関連する有用な OWA...

Security-Champions

OWASP セキュリティチャンピオンガイド https://securitychampions.owasp.org/ で、MKDocs を使用してコンテンツをホストしています（OWASP プロジェクトページの隣にあります）。 https://github.com/OWASP/API-Security と https://github.com/OWASP/Top10/tree/master/2021 に触発されています。 Windows でのローカルコピーの構築 Python をインストール python3 -m pip install -r requirements.txt python...

EUVD-2024-49633

Malicious code in bioql PyPI...

craveeatables.com Cross Site Scripting vulnerability OBB-3932724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

policeinterceptors.info Cross Site Scripting vulnerability OBB-3880544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ghsmart.com Cross Site Scripting vulnerability OBB-3853475

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

teotattoo.gr Improper Access Control vulnerability OBB-3835903

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

houtenspeelgoed-shop.nl Open Redirect vulnerability OBB-3790300

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ergonomio.de Improper Access Control vulnerability OBB-3770367

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wohnpark-roemerkessel.de Improper Access Control vulnerability OBB-3767945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

micsc.com Cross Site Scripting vulnerability OBB-3641201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rabbitears.info Cross Site Scripting vulnerability OBB-3210209

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vibber.com Cross Site Scripting vulnerability OBB-3186206

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

freeonlineconferences.com Cross Site Scripting vulnerability OBB-3142036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aller-liebst.com Cross Site Scripting vulnerability OBB-3069012

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

momig.uni-bielefeld.de Cross Site Scripting vulnerability OBB-3064924

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cafelafiancee.com Cross Site Scripting vulnerability OBB-2958303

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

m.zij2h1.cyou Cross Site Scripting vulnerability OBB-2859668

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ao-architecture.fr Cross Site Scripting vulnerability OBB-2838644

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

geyer-fliesen.de Cross Site Scripting vulnerability OBB-2835492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...