33175 matches found
public-bugbounty-programs
公开漏洞赏金计划 社区整理的公开漏洞赏金与负责任的披露计划列表。 该仓库作为ProjectDiscovery在Chaos上使用的公开漏洞赏金计划的中央管理系统。 数据模型 源文件：src/data.yaml 模式定义：src/data.schema.json 每个计划条目包含： name（字符串） url（http/https URL） bounty（布尔值） domains（根/顶级域名数组） src/data.yaml中的示例条目： - name: 示例漏洞赏金计划 url: https://example.com/bugbounty bounty: true domains: -...
pocs
pocs publicaremos pocs en este repositorio todos los bugs en este repositorio se divulgan de forma responsable...
CVE-2026-30503-OpenKM-6.3.12-Stored-XSS
🛡️ CVE-2026-30503 — Stored XSS in OpenKM v6.3.12 Discovered & Reported by Dharmendra Kumar — Security Researcher Cybersecurity | Penetration Testing | Vulnerability Research | Responsible Disclosure 📌 Table of Contents Overview CVE Details Affected Product Vulnerability Description Root Cause...
mbadanoiu
Bienvenido al Retiro de Fin de Semana de Matei "Mal" Badanoiu Este GitHub se utiliza para publicar mis CVEs e investigación de seguridad durante mi tiempo libre/fines de semana. Todos los materiales presentes en este perfil de GitHub están destinados a la investigación de seguridad y al hacking...
CVE-Disclosures
Investigación de Seguridad y Divulgaciones de CVE🔥 Un repositorio que documenta vulnerabilidades de seguridad descubiertas en Software Libre y de Código Abierto FOSS por VETTRIVEL U Solo hay dos tipos de empresas: las que han sido comprometidas y lo saben, y las que han sido comprometidas y aún n...
CVE
CVE Documentos de avisos y divulgación responsable para los CVE de CloudAware...
responsible-disclosure-email-gathering
Recopilación de Correos Electrónicos de Divulgación Responsable Propósito Es posible que hayas encontrado una vulnerabilidad en un host, pero dicho host/organización no tiene un programa activo en HackerOne o BugCrowd. Si este es el caso, ¡este flujo de trabajo es para ti! En términos generales,...
CVE-2025-11371
Disclaimer This project is published for educational and research purposes only. Use of this software for attacking targets without explicit prior consent is illegal. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. Always follow...
Wordfence Bug Bounty Program Monthly Report – May 2026
In May 2026, the Wordfence Bug Bounty Program received 1095 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat...
Exploit for CVE-2026-65058
Trezor Safe Calldata Confirmation-Binding Bypass — CVE-2026-65...
CVE-2026-8169
ExtremeXOS EXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expected response and activate debug-mode...
PYSEC-2026-2040 Weblate has an arbitrary file read via symbolic links
Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Resources Thanks to Jason Marcello for responsible disclosure...
Weblate has improper validation upon invitation acceptance
ImpactIt was possible to accept an invitation opened by a different Weblate user. Patches https://github.com/WeblateOrg/weblate/pull/16913 WorkaroundsUsers should avoid leaving Weblate sessions with an unattended opened invitation. ReferencesThanks to Nahid0x for responsibly disclosing this...
PYSEC-2026-2042 Weblate has improper validation upon invitation acceptance
Impact It was possible to accept an invitation opened by a different Weblate user. Patches https://github.com/WeblateOrg/weblate/pull/16913 Workarounds Users should avoid leaving Weblate sessions with an unattended opened invitation. References Thanks to Nahid0x for responsibly disclosing this...
Security fix: Addressing a GX mods vulnerability
News, Security Security fix: Addressing a GX mods vulnerability Share July 3rd, 2026 Hi Opera users, Recently, an independent security researcher responsibly disclosed a vulnerability in Opera GX. The vulnerability, which has since been patched, took advantage of our mods functionality. After...
Weblate is vulnerable to RCE through Git config file overwrite
ImpactIt was possible to overwrite Git configuration remotely and override some of its behavior. ResourcesThanks to Jason Marcello for responsible disclosure...
PYSEC-2026-571 Weblate is vulnerable to RCE through Git config file overwrite
Impact It was possible to overwrite Git configuration remotely and override some of its behavior. Resources Thanks to Jason Marcello for responsible disclosure...
PT-2026-53623
Impact TorchServe's check on allowed urls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being downloaded into the model store. Once a file is downloaded, it can be referenced without providing a URL the second time, which...