VulnInsights

All web-sec related stuffs.

Table of Contents

• Overview

• WebApp Hacking

• Secure Coding

• Reporting Templates

• Contributing

• License

• Questions?

Overview

VulnInsights provides a comprehensive reference for understanding and addressing various vulnerabilities in secure coding practices.

Web Application Vulnerabilities

Explore various vulnerabilities commonly found in web applications:

• Open Redirect Testing

• API Testing

• GraphQL Testing

Secure Coding

CWE-22

• Insecure Deserialization using JsonConvert.DeserializeObject (.NET)

• Path Traversal in Metasphere (Java)

• Path Traversal in BigBlueButton (Groovy)

CWE-89

• SQL Injection Vulnerability due to Insecure Processing of Authorization Header in anything-llm (JavaScript)

CWE-23

• Improper Input Validation Leads to Arbitrary File Deletion in anything-llm (Python)

CWE-98

• Restricted LFI in Suite-CRM (PHP)

CWE-338

• Use of Weak PRNG in Alova (Java)

Reporting Templates

• Open Redirect Vulnerability

Contributing

We welcome contributions and insights. Check Contributing Guidelines for details.

License

This project is under the MIT License.

Questions?

Feel free to open an issue. Thanks for your input!