813 matches found
OWASP-Calculator
OWASP 风险评估计算器 🧮 一个基于 OWASP 风险评估方法评估 Web 漏洞风险的在线计算器。 前往在线计算器 来自西班牙的 ❤️ 制作...
TIWAP
Progetto Applicazione Web Totalmente Insicura TIWAP TIWAP è un laboratorio di test di sicurezza web realizzato con Flask per aspiranti appassionati di sicurezza per imparare varie vulnerabilità web. Ispirato da DVWA, i contributori hanno fatto del loro meglio per riprodurre varie vulnerabilità we...
AllAboutBugBounty
Tutto sul bug bounty Queste sono le mie note sul bug bounty che ho raccolto da varie fonti, puoi contribuire anche tu a questo repository! Elenco Vulnerabilità Caricamento di File Arbitrario Iniezione CRLF Cross Site Request Forgery CSRF Cross Site Scripting XSS Negazione del Servizio DoS Codice...
xvna
XVNA Applicazione Node Estremamente Vulnerabile XVNA è un'applicazione node estremamente vulnerabile scritta in Node.js Express.js/MongoDB che aiuta gli appassionati di sicurezza a imparare la sicurezza delle applicazioni. Non è consigliabile ospitare questa applicazione online poiché è intesa pe...
easy-exploits
easy-exploits Questo repository contiene exploit di diversi ID CVE identificati in passato da me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451, CVE-2021-41753,...
cyberange
大家好，我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...
CVE-2026-15085 AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI SEO/GEO Analyzer allows Stored XSS. This issue affects AI SEO/GEO Analyzer versions: from 0.0.0 to 1.1.3...
CVE-2026-13375 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS Autotask Technology Integration module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13938. This issue affects Fireware O...
Oracle Siebel Server <= 26.5 (June 2026 CSPU)
The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory. - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing. Supported versions that are affected are 17.0-26....
sentinelx
sentinelx SentinelX AI — Next-gen AI-powered cybersecurit...
secure-software-development
Secure Software Development — Notes & Exercise Writeups Perso...
cve-2026-poc-collection
CVE-2026 PoC Collection Report Collection date: May 19, 2...
exploitra
🚀 EXPLOITRA v1.0 - Advanced Vulnerability Engine EXPLOITRA...
Caido-Plugin
Github • Documentation  ...
RedTrace
RedTrace v3.0 — Web Vulnerability Scanner Professional-grad...
IBM Aspera Orchestrator 安全漏洞
IBM Aspera Orchestrator is a web-based application developed by IBM. It provides efficient file processing pipelines for data-driven businesses. There were security vulnerabilities in the version 3.0.0 to 4.1.2 of IBM Aspera Orchestrator. These vulnerabilities stemmed from the storage of sensitiv...
Web-Application-Vulnerability-Scanner
WebVulnScan A beginner-to-intermediate web application vuln...
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
For the last few months, we've been using the GitHub Security Lab Taskflow Agent along with a new set of auditing taskflows that specialize in finding web security vulnerabilities. They also turn out to be very successful at finding high-impact vulnerabilities in open source projects. As security...