SecurityShepherd

OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...

SecureCodingDojo

About the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application the Insecure.Inc website the training portal can be used in conjunction with other training applications. The strength of the platfo...

PwnzzAI

🍕 Welcome to PwnzzAI/pəʊnzɑː/ Shop – The Vulnerable Pizza Shop! 💻 At PwnzzAI Shop, every slice serves up a helping of holistic AI security instruction. This hands-on learning platform prepares professionals to understand the protection of AI technologies broadly delivered through an engaging,...

exp-labs

exp-labs Cybersecurity Training Platform This modern web secu...

cyberange

网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...

Knomary TMS Auth Bypass

The vulnerability of the Knomary TMS training platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2025-3410

A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code of the file trainingplatform/train-platform/src/main/java/top/aias/training/controller/LocalStorageController.java. The manipulation of the argument File leads to unrestricted...

Iced training platform Code Execution

The vulnerability of the Iced training platform for machine learning H2O is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SAP Enable Now Code Issue Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from a code issue vulnerability that stems from an unimplemented X-FRAME-OPTIONS response...

MAL-2022-6634 Malicious code in training-platform-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379e8de1999ec8549c82a99e55a439a22fba37f2c10ec080e8c355a42252b7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in training-platform-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in training-platform-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379e8de1999ec8549c82a99e55a439a22fba37f2c10ec080e8c355a42252b7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for SQL Injection in Zabbix

This is an offensive tool repository for Vulhub, a web application vulnerability training platform. The repository contains various tools and exploits for testing and demonstrating vulnerabilities in different web applications and frameworks. The primary classification of this repository is: "It ...

SQL Injection Vulnerability in Residency Standardized Training Platform of Chongqing Yuanqiu Technology Co.

Residency standardized training platform is a large-scale residency training platform for basic education, clinical guidance, assessment and training of residents in one. A SQL injection vulnerability exists in the residency training platform of Chongqing Yuanqiu Technology Co. An attacker can...

Arbitrary file reading vulnerability in the accounting training platform of Xiamen NetZhong.com Software Co.

Ltd. is a high-tech enterprise specializing in the development, service and sales of teaching software products for teaching accounting. Xiamen NetZhongNET Software Co., Ltd. accounting training teaching platform there is an arbitrary file reading vulnerability, attackers can use the vulnerabilit...

File Uploading Vulnerability in the Web-based Training Platform of Beijing Boswell Information Technology Co.

Ltd. is one of the "one-stop" providers of e-learning, online examination and knowledge management software products and their total solutions. A file upload vulnerability exists in the online training platform of Beijing Boshiway Information Technology Co., Ltd, which can be exploited by attacke...

SQL Injection Vulnerability in Betten's Innovation and Entrepreneurship Training Platform System

Hangzhou Berten Technology Co., Ltd. is a leading manufacturer of innovation and entrepreneurship practice education in China, and currently has more than 30 offices or branches across the country. There is a SQL injection vulnerability in the Beiten Innovation and Entrepreneurship Practical...

U.S. Dept Of Defense: Online training material disclosing username and password

Summary: A training document is revealing username and password details for what appears to be a DoD training system Description: Using the google dork site:.mil ext:ppt intext:password, I was able to find a number of powerpoint documents on .mil websites that include username and passwords. This...

Study Vulnerability Assessment in Tenable University for free

Not so long ago, Tenable presented renewed online training platform - Tenable University. It is publicly available even for non-customers, for example, for Nessus Home users. However, not all courses are available in this case. I decided to check it out, registering as non-customer. Logged in...

Mobile Application Security Training Platform: Security Shepherd

The OWASP Security Shepherd project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienced engineers and sharpen...