web-inf-path-trav

WebXMLExp.py Herramienta para ayudar en la explotación de vulnerabilidades de path traversal en aplicaciones web Java. Esta herramienta se referencia en el informe técnico de Invicti Security Explotación de vulnerabilidades de path traversal en aplicaciones web Java. Instalación Para esta...

ios11-cookie-set-expire-issue

Problema de Establecer/Caducar Cookies en iOS 11 Parece haber un problema intermitente con el establecimiento y la caducidad de cookies en las aplicaciones web de la pantalla de inicio de iOS 11. Se pueden observar dos comportamientos erróneos: Cuando se establece una cookie y luego se cierra y...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

Azure-App-Tools

Azure-App-Tools Colección de herramientas para usar con aplicaciones de Azure. https://azure.microsoft.com/en-us/get-started/apps/ Requisitos previos Módulo de Azure PowerShell https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 Ejemplos: Códigos de dispositivo dinámic...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory The OWASP Vulnerable Web Applications Directory Project VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ is a comprehensive and well...

kiterunner

Kiterunner 介绍 长期以来，内容发现一直专注于查找文件和文件夹。虽然这种方法对于托管静态文件或在部分路径下返回 3xx 响应的传统 Web 服务器有效，但对于现代 Web 应用程序，尤其是 API，它已不再高效。 随着时间的推移，我们看到了大量时间投入到提高内容发现工具的速度上，以便可以使用更大的字典，但内容发现的艺术本身却没有得到创新。 Kiterunner 不仅能够以极快的速度执行传统内容发现，还能对现代应用程序中的路由/端点进行暴力破解。 现代应用框架（如 Flask、Rails、Express、Django 等）遵循显式定义路由的范式，这些路由期望特定的 HTTP...

atomicvulns

⚠️ Intentionally vulnerable. Run locally only. Never expose to the internet or a shared network. Read this in other languages: Português Brasil What is atomicvulns? Milestone — v1.0: the web series now covers all ten OWASP Top 10 2021 categories A01–A10 , across 38 atoms. See the v1.0 release...

CVE-2026-83149: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the...

CVE-2026-83148: Improper Privilege Management

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

ROS-20260915-73-0149

The vulnerability of Web apps for Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0197

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260914-73-0047

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

ROS-20260911-73-0112

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

UBUNTU-CVE-2026-88059

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering SSR and hydration u...

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Web apps components of Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of Web apps for Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

CVE-2026-70863: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite. Successfu...