Search results

Add AGENTS.md template with all the best security principles

Status: Open.

#12 In ukorvl/web-of-flaws;

· ukorvl opened on Feb 18, 2026

Mass Assignment Attack: not validating data before inserting in DB

Status: Open.

#11 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

Sensitive Data Exposure: hard-coded secrets

Status: Open.

#10 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

Container Escape Attack (Docker Escape): Gaining access to volumes

Status: Open.

#9 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

ReDoS: using inefficient regular expressions

Status: Open.

#8 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

SQL Injection: not sanitized queries

Status: Open.

#7 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

PP RCE: populating prototype with stringified commands

Status: Open.

#6 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

PP: populating __proto__ with fake properties

Status: Open.

#5 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

Timing attack: token comparison on the server side

Status: Open.

#4 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

Reflecting XSS using javascript: protocol

Status: Open.

#3 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

SSRF: using corrupted query params on the nodejs server side

Status: Open.

#2 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025

XSS: using browser query params

enhancementNew feature or requestNew feature or request

Status: Open.

#1 In ukorvl/web-of-flaws;

· ukorvl opened on Jun 5, 2025