7876 matches found
CVE-2026-101117
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...
EUVD-2026-119618
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...
CVE-2026-101117
IBM WebSphere eXtreme Scale (versions 8.6.1.0 through 8.6.2.2) is vulnerable to a security bypass because of an improper Content Security Policy configuration (CWE-16 ). A remote attacker can exploit this flaw to bypass security restrictions, resulting in high impact on confidentiality and integr...
PT-2026-140025
Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.2.2 Description IBM WebSphere Extreme Scale Liberty deployment is susceptible to Cross-Site Scripting XSS, a flaw where malicious scripts are injected into trusted websites. This issue...
CVE-2026-101117: IBM WebSphere Extreme Scale: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due…
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...
Super-UEFIinSecureBoot-Disk
Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...
CPSC253_CybersecurityFinalProjectReports
Introduction These papers were part of my final project for my Cybsecurity class: CPSC 253 - Cybersecurity Foundations and Principles The premise of my final project was that I was a newly hired consultant in a research center and helped optimize their security around their server room. Phase 1 W...
scorecard
OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard MCP Server Scorecard Command Line Interface Prerequisites Installation Authentication Basic...
brave-browser
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
zappzarapp-php-security
⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...
JSONBee
JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...
browsertunnel
browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...
CVE-2026-21834
HCL AION is affected by a vulnerability where the Content-Security-Policy CSP security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and...
CVE-2026-21834
HCL AION is affected by a security vulnerability where application responses lack the Content-Security-Policy (CSP) security response header. The absence of this header prevents the browser from restricting the sources of scripts and other content, which increases exposure to cross-site scripting...
EUVD-2026-118310
HCL AION is affected by a vulnerability where the Content-Security-Policy CSP security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and...
CVE-2026-21834 HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where the Content-Security-Policy CSP security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and...
CVE-2026-89238
A flaw was found in Apache WSS4J. A remote attacker can exploit an element confusion issue in encrypted header processing by sending a specially crafted message. This vulnerability causes the application to treat an attacker-controlled plaintext element as a decrypted header, potentially leading ...
CVE-2026-87830
A flaw was found in Apache WSS4J. In the streaming security policy validator, specific XML Path Language XPath expressions can fail to resolve against actual message structures. A remote attacker can exploit this issue to bypass security policy checks by sending message elements that lack require...
CVE-2026-21834: HCL Software HCL AION: HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security response header was missing…
HCL AION is affected by a vulnerability where the Content-Security-Policy CSP security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and...