forked from globocom/secDevLabs
-
Notifications
You must be signed in to change notification settings - Fork 0
Pull requests: ZeroPathAI/secDevLabs-demo
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Fix insecure deserialization by replacing pickle with JSON for session cookie handling in Python.
#14
opened Jul 7, 2025 by
zeropath-ai
bot
Loading…
Replace insecure pickle serialization with safe JSON serialization for session cookies to prevent arbitrary code execution.
#12
opened Jul 7, 2025 by
zeropath-ai
bot
Loading…
Fix insecure session cookie tampering by signing cookies with a secret key using SHA256.
#13
opened Jul 7, 2025 by
zeropath-ai
bot
Loading…
Sanitize user input by replacing innerHTML with textContent to prevent XSS in message username and content rendering.
#11
opened Jul 7, 2025 by
zeropath-ai
bot
Loading…
Fix SSTI by escaping user input and removing
tornado.template.Template usage for name parameter in server.py
#10
opened Jul 7, 2025 by
zeropath-ai
bot
Loading…
Replace insecure Pickle deserialization in cookie handling with safe JSON serialization to prevent remote code execution.
#9
opened Jul 7, 2025 by
zeropath-ai
bot
Loading…
"Fix authorization bypass in
GetTicket to ensure users can only access their own tickets."
#3
opened Feb 3, 2025 by
zeropath-ai
bot
Loading…
ProTip!
Follow long discussions with comments:>50.