awesome-web-security

Awesome Web Security 🐶 웹 보안 자료 및 리소스의 엄선된 목록. 말할 필요도 없이, 대부분의 웹사이트는 다양한 유형의 버그로 인해 결국 취약점으로 이어질 수 있습니다. 왜 이런 일이 자주 발생할까요? 잘못된 설정, 엔지니어의 보안 기술 부족 등 여러 요인이 관련될 수 있습니다. 이에 대응하기 위해 최첨단 침투 기술을 학습하기 위한 웹 보안 자료 및 리소스의 엄선된 목록을 제공하며, 먼저 이 글 "So you want to be a web security researcher?"를 읽어보시기를 적극 권장합니다...

xssor2

XSS'OR XSS'OR - JavaScriptでハック。 オンライン 試してみてください： https://xssor.io および http://xssor.io/ 主要なモジュールは3つあります：Encode/Decode、Codz、Probe。 インストール Python 3（Django 3.0.）またはPython 2（Django 1.11. ） git clone https://github.com/evilcos/xssor2 または直接ダウンロード cd xssor2 xssor/payload/probe.js を編集 xssor.cmdurl =...

the-book-of-secret-knowledge

"지식은 강력하니, 사용할 때 조심하세요! " 영감을 주는 목록, 매뉴얼, 치트시트, 블로그, 해킹 기법, 원라이너, CLI/웹 도구 등이 담겨 있습니다. 📔 무엇인가요? 이 저장소는 제가 업무에서 매일 사용하는 다양한 자료와 도구를 모아 놓은 것입니다. 하나의 문서에 많은 유용한 정보가 담겨 있습니다. 제가 자주 참고하는 소중한 지식의 원천입니다. 🚻 누구를 위한 것인가요? 사실 모든 사람을 위한 것입니다. 여기에서 각자 취향에 맞는 내용을 찾을 수 있습니다. 하지만 정확히 말하자면, 시스템 및 네트워크 관리자, DevOps...

[SECURITY] [DLA 4802-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4802-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 29, 2026 https://wiki.debian.org/LTS -...

Debian dla-4802 : python-django-doc - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4802 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4802-1 [email protected]...

ROS-20260922-73-0134

The vulnerability in Python-Django is related to incorrect external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260922-73-0133

The vulnerability in Python-Django is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0132

The vulnerability in Python-Django is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Python-Django

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads with Content-Transfer-Encoding: base64, including excessive whitespace. Earlier, unsupported Django versions such a...

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter consumes significant memory when dealing with a string representation of a number in scientific notation with a large exponent...

Astra Linux – Vulnerability in Python-Django

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Permissions for inline model instances were not validated when submitting forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django versions such as 5.0.x, 4.1.x, and 3.2.x were not evaluated and...

Astra Linux – Vulnerability in Python-Django

A vulnerability was discovered in versions prior to 6.0.0, 6.0.2, 5.2.0 prior to 5.2.1.1, and 4.2.0 prior to 4.2.2.8. The methods django.utils.text.Truncator.chars and Truncator.words with html=True, along with the template filters truncatecharshtml and truncatewordshtml, allow a remote attacker ...

OESA-2026-3499 python-django security update

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the...

ROS-20260819-73-0075

The vulnerability in Python-Django relates to the exposure of information through caching. Exploiting this vulnerability allows an attacker to gain access to the memory of a supervisor machine or other virtual machines. This can be achieved by implementing attacks through secondary channels,...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099457)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099457 advisory. An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated Content-Length header can bypass the...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099501 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace fr...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099481 advisory. An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed from a...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099506 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not add Authorization to the...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099473 advisory. An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.core.mail.backends.smtp.EmailBackend in Django fails to prevent reuse of a...

[SECURITY] [DLA 4736-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 12, 2026 https://wiki.debian.org/LTS -...