OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ 이 저장소는 단계적으로 종료되고 있습니다. 향후 작업은 www-project-vulnerable-web-applications-directory를 통해 진행해야 합니다. OWASP Vulnerable Web Applications Directory 프로젝트VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/는 현재 제공되는 모든 알려진 취약한 웹 애플리케이션에 대한 포괄적이고 잘 유지관리되는...

web-inf-path-trav

WebXMLExp.py Java 웹 애플리케이션에서 path traversal경로 탐색 취약점을 악용하는 데 도움이 되는 도구입니다. 이 도구는 Invicti Security 백서 Java 웹 애플리케이션의 path traversal 취약점 악용에서 참조됩니다. 설치 이 도구에는 Python3가 필요합니다. 다음 명령을 실행하세요: root@kitploit: pip install -r requirements.txt 사용법: 설치 후 다음과 같이 익스플로잇 URL을 제공하세요: root@kitploit: usage: python...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

Azure-App-Tools

Azure-App-Tools Azureアプリケーションで使用するツールのコレクション。 https://azure.microsoft.com/en-us/get-started/apps/ 前提条件 Azure PowerShell モジュール https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 例: 動的デバイスコード @MrUn1k0d3r によるオリジナルPoC...

ios11-cookie-set-expire-issue

iOS 11 쿠키 설정/만료 문제 iOS 11 홈 화면 웹 앱에서 쿠키 설정 및 만료에 간헐적인 문제가 있는 것으로 보입니다. 두 가지 오류 동작이 관찰될 수 있습니다: 쿠키가 설정된 후 앱을 닫았다가 다시 열면, 앱을 다시 열었을 때 쿠키가 더 이상 존재하지 않을 수 있습니다 쿠키가 만료된 후 앱을 닫았다가 다시 열면, 앱을 다시 열었을 때 쿠키가 여전히 존재할 수 있습니다 재현 단계: 1. Mobile Safari에서...

yasuo

YASUO @0xsauby 설명 Yasuo는 취약한 타사 웹 애플리케이션을 스캔하는 Ruby 스크립트입니다. 네트워크 보안 평가내부, 외부, 레드팀 작업 등를 하다 보면 공개된 취약점을 악용하여 원격 서버를 손상시킬 수 있는 취약한 타사 웹 애플리케이션이나 웹 프론트엔드를 자주 발견하게 됩니다. 일반적이고 인기 있는 애플리케이션으로는 Apache Tomcat 관리 인터페이스, JBoss jmx-console, Hudson Jenkins 등이 있습니다. Exploit-db을 검색해보면 수많은 웹 애플리케이션/프론트엔드에 존재하는...

kiterunner

Kiterunner Введение Долгое время обнаружение контента было сосредоточено на поиске файлов и папок. Хотя этот подход эффективен для устаревших веб-серверов, которые обслуживают статические файлы или отвечают 3xx при частичном пути, он больше не эффективен для современных веб-приложений, особенно...

PT-2026-77860

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description A flaw exists that allows a low privileged attacker with Load Testing for Web Apps privileges and logon access to the infrastructure where the software executes to compromise the...

CVE-2026-5108

The CVE concerns the WordPress plugin Super Progressive Web Apps (versions

WordPress Super Progressive Web Apps plugin <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by lucsob in WordPress Plugin Super Progressive Web Apps versions = 2.2.43...

CVE-2026-68945

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...

SUSE CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17780

An inappropriate implementation flaw was found in the Isolated Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513485951...

CVE-2026-17909

An insufficient validation of untrusted input flaw was found in the Isolated Web Apps component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501693236...

SUSE CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...

CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-17780

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17909

Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...