Vulnerabilities

Examples of different vulnerabilities, in a variety of languages, shapes and sizes.

Useful for testing DAST and SAST tools.

Security

If you plan to host this, make sure only /web is reachable!

go (go.mod)
- grafana v8.2.3
java
- maven (pom.xml)
  - jackson-databind 2.9.2
  - log4j-core 2.10.0
javascript
- Static file (jquery.min.js)
  - jQuery v3.4.1
nodejs
- npm (yarn.lock & package.json)
  - tenvoy 7.0.2
- yarn (package-lock.json & package.json)
  - tenvoy 7.0.2
php
- composer (composer.lock & composer.json)
  - phpmailer/phpmaile 6.4.1
  - league/flysystem 1.1.3 ("forced" inherit dependency vulnerability)
python
- pip (requirements.txt)
  - tendenci 12.0.10

TODO

Name		Name	Last commit message	Last commit date
Latest commit History 37 Commits
.github/workflows		.github/workflows
c#/code		c#/code
c++/code		c++/code
c/code		c/code
docker		docker
go		go
html/code		html/code
java		java
javascript		javascript
kubernetes		kubernetes
nodejs		nodejs
php		php
python		python
ruby/code/rails/xss		ruby/code/rails/xss
secrets		secrets
swift/code/weak-crypto		swift/code/weak-crypto
typescript/code		typescript/code
web		web
xml		xml
.gitignore		.gitignore
README.md		README.md