web-inf-path-trav

WebXMLExp.py Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications. This tool is referenced in the Invicti Security white paper Exploiting path traversal vulnerabilities in Java web applications. Install Python3 is required for this tool. Run the followin...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory The OWASP Vulnerable Web Applications Directory Project VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ is a comprehensive and well...

Azure-App-Tools

Azure-App-Tools Collection of tools to use with Azure Applications. https://azure.microsoft.com/en-us/get-started/apps/ Prerequisites Azure Powershell Module https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 Examples: Dynamic Device Codes Original PoC by @MrUn1k0d3r...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...

kiterunner

Kiterunner Introducción Durante mucho tiempo, el descubrimiento de contenido se ha centrado en encontrar archivos y carpetas. Si bien este enfoque es efectivo para servidores web heredados que alojan archivos estáticos o responden con 3xx ante una ruta parcial, ya no es efectivo para aplicaciones...

yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

ios11-cookie-set-expire-issue

Problema de Establecer/Caducar Cookies en iOS 11 Parece haber un problema intermitente con el establecimiento y la caducidad de cookies en las aplicaciones web de la pantalla de inicio de iOS 11. Se pueden observar dos comportamientos erróneos: Cuando se establece una cookie y luego se cierra y...

atomicvulns

⚠️ Intentionally vulnerable. Run locally only. Never expose to the internet or a shared network. Read this in other languages: Português Brasil What is atomicvulns? Milestone — v1.0: the web series now covers all ten OWASP Top 10 2021 categories A01–A10 , across . See the...

CVE-2026-83148: Improper Privilege Management

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-83149: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Test Manager for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. While the...

ROS-20260915-73-0197

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0149

The vulnerability of Web apps for Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. Chromium security severity: Medium...

ROS-20260914-73-0047

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

ROS-20260911-73-0112

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

UBUNTU-CVE-2026-88059

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering SSR and hydration u...

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Isolated Web Apps component in Google Chrome and Microsoft Edge is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause a service failure using a malicious file...

The vulnerability of the Web apps components of Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of Web apps for Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...