unSafe.sh - 不安全

OAuth2 client_secret stored in plain text in the database 2023-11-15 15:22:13 | 阅读: 5 | 收藏 |

Yet Another CASB Integration Takeover of Active Integrations 2023-11-13 18:36:10 | 阅读: 4 | 收藏 |

CVE-2023-42663: Apache Airflow: Bypass permission verification to view task instances of other dags 2023-11-13 11:15:20 | 阅读: 6 | 收藏 |

Subdomain takeover on one of the subdomain under mozgcp.net 2023-11-12 20:19:31 | 阅读: 4 | 收藏 |

Subdomain takeover on one of the subdomain under mozgcp.net 2023-11-12 20:18:59 | 阅读: 4 | 收藏 |

Subdomain takeover on one of the subdomain under mozgcp.net 2023-11-12 20:17:27 | 阅读: 4 | 收藏 |

Password of talk conversations can be bruteforced 2023-11-12 16:15:39 | 阅读: 5 | 收藏 |

Memcached used as RateLimiter backend is no-op 2023-11-12 16:6:19 | 阅读: 4 | 收藏 |

CSRF + XSS REFLECT 2023-11-10 18:55:32 | 阅读: 4 | 收藏 |

Bypass R2 payment screen 2023-11-10 18:26:42 | 阅读: 4 | 收藏 |

YAML schema injection risk in Swagger UI via schema_url parameter at developers.cloudflare.com 2023-11-10 18:25:40 | 阅读: 4 | 收藏 |

Cross-Site Request Forgery 2023-11-5 17:16:0 | 阅读: 5 | 收藏 |

Google Docs link in JS files allows editing & reading survey information 2023-11-4 16:17:49 | 阅读: 6 | 收藏 |

[███████] Information disclosure due unauthenticated access to APIs and system browser functions 2023-11-4 01:18:54 | 阅读: 7 | 收藏 |

User automatically logged in as Sys Admin user on https://███/Administration/Administration.aspx 2023-11-4 01:15:45 | 阅读: 6 | 收藏 |

fetlife.com/signup_step_profile expose access_token of mapbox.com 2023-11-1 08:17:26 | 阅读: 4 | 收藏 |

CRLF injection leads to internal XSS on PangleGlobal 2023-11-1 06:32:32 | 阅读: 10 | 收藏 |

Title: Deceptive Manipulation of HTTP to HTTPS with VPN in Burp Suite 2023-10-31 17:10:56 | 阅读: 5 | 收藏 |

Stored xss at https://█.8x8.com/api/█/ID 2023-10-31 01:18:44 | 阅读: 11 | 收藏 |

Authenticated path traversal to Stored XSS and Denial-of-Service 2023-10-30 04:51:21 | 阅读: 6 | 收藏 |