Skip to content

Pull requests: OWASP-CTF/DVWA

New pull request New
161 Open 135 Closed
161 Open 135 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Defensive hardening: SQL injection (sqli)
#296 opened Aug 10, 2026 by ajrequenez Loading…
Replace low XOR scheme with authenticated encryption
#295 opened Aug 10, 2026 by r1kka6 Loading…
Add lockout protection to low brute force login
#294 opened Aug 10, 2026 by r1kka6 Loading…
Secure low JavaScript token validation
#293 opened Aug 10, 2026 by r1kka6 Loading…
Harden low CSP script inclusion
#292 opened Aug 10, 2026 by r1kka6 Loading…
Enforce low authbypass admin checks
#291 opened Aug 10, 2026 by r1kka6 Loading…
Harden low file upload handling
#290 opened Aug 10, 2026 by r1kka6 Loading…
Fix low BAC profile authorization
#289 opened Aug 10, 2026 by r1kka6 Loading…
Remove password hashes from legacy user API responses
#288 opened Aug 9, 2026 by r1kka6 Loading…
Bind low security password change to CAPTCHA completion
#287 opened Aug 9, 2026 by r1kka6 Loading…
Fix SQL Injection Blind Low
#286 opened Aug 9, 2026 by r1kka6 Loading…
Restrict DOM XSS language selection in low security level
#285 opened Aug 9, 2026 by r1kka6 Loading…
Restrict file inclusion in low security level
#283 opened Aug 9, 2026 by r1kka6 Loading…
Fix SQL injection in low security level
#282 opened Aug 9, 2026 by r1kka6 Loading…
Fix stored XSS in low security level
#281 opened Aug 9, 2026 by r1kka6 Loading…
Harden Weak Session IDs Low
#280 opened Aug 9, 2026 by r1kka6 Loading…
Add CSRF protection to low security password changes
#279 opened Aug 9, 2026 by r1kka6 Loading…
Fix Open Redirect Low same-site validation
#278 opened Aug 9, 2026 by r1kka6 Loading…
Fix command injection in low security level
#277 opened Aug 9, 2026 by r1kka6 Loading…
Fix reflected XSS in XSS Reflected Low challenge
#276 opened Aug 9, 2026 by r1kka6 Loading…
fix(file-ops): implement whitelist validation for file operations (CW…
#273 opened Aug 9, 2026 by markuszaki Loading…
1
fix(crypto-csp): use CSPRNG and strict CSP headers to prevent cryptog…
#272 opened Aug 9, 2026 by markuszaki Loading…
1
fix(xss): encode all output with htmlspecialchars() to prevent XSS (C…
#271 opened Aug 9, 2026 by markuszaki Loading…
1
fix(auth): implement secure token validation and server-side CAPTCHA …
#270 opened Aug 9, 2026 by markuszaki Loading…
1
fix(sqli-blind): use prepared statements to prevent blind SQL injection (CWE-89)
#269 opened Aug 9, 2026 by markuszaki Loading…
1
ProTip! no:milestone will show everything without a milestone.