unSafe.sh - 不安全

Ingress nginx annotation injection causes arbitrary command execution 2023-11-25 05:23:20 | 阅读: 7 | 收藏 |

Blind SQL injection on id.indrive.com 2023-11-24 22:37:55 | 阅读: 4 | 收藏 |

Password Reset Token Leak Via Referrer 2023-11-24 00:1:39 | 阅读: 9 | 收藏 |

[CVE-2023-38546] cookie injection with none file 2023-11-23 08:40:25 | 阅读: 10 | 收藏 |

IDOR vulnerability on profile picture changing mechanism which discloses other user's profile picture. 2023-11-22 23:8:47 | 阅读: 8 | 收藏 |

Organization members can delete reports in teams they have no access to 2023-11-22 19:46:38 | 阅读: 7 | 收藏 |

user_ldap app logs user passwords in the log file on level debug 2023-11-21 19:39:25 | 阅读: 7 | 收藏 |

Delete external storage of any user 2023-11-21 17:22:23 | 阅读: 4 | 收藏 |

HTML injection in search UI when selecting a circle with HTML in the display name 2023-11-21 17:22:7 | 阅读: 6 | 收藏 |

Enabling Birthday Contact to any user 2023-11-21 13:23:12 | 阅读: 5 | 收藏 |

Full account takeover of any user through reset password 2023-11-18 02:10:47 | 阅读: 6 | 收藏 |

XSS in Cisco Endpoint 2023-11-18 02:8:49 | 阅读: 8 | 收藏 |

Unathenticated file read (CVE-2020-3452) 2023-11-18 02:7:57 | 阅读: 7 | 收藏 |

Unauthorised CocoaPods Auth via Token Leakage & HTTP Header Injection 2023-11-17 00:20:18 | 阅读: 8 | 收藏 |

Able to see highest poll result without voting or view result 2023-11-16 05:27:16 | 阅读: 7 | 收藏 |

debug.log File Exposure that exposes (user/████) username and password at █████████ 2023-11-16 02:42:48 | 阅读: 6 | 收藏 |

subdomain takeover at █████████ 2023-11-16 02:39:53 | 阅读: 6 | 收藏 |

**"CSRF Vulnerability in Royal Canin Website Allows Attackers to Change User Profile Picture at my.royalcanin.pt"** 2023-11-16 01:44:30 | 阅读: 7 | 收藏 |

reflected xss in https://wordpress.com/start/account/user 2023-11-15 19:22:58 | 阅读: 6 | 收藏 |

Buffer overflow and affected url:-https://github.com/curl/curl/blob/master/docs/examples/hsts-preload.c 2023-11-15 18:10:19 | 阅读: 6 | 收藏 |