APTRS

APTRS APTRSAutomated Penetration Testing Reporting System는 침투 테스터와 보안 조직을 위해 설계된 Python 및 Django 기반의 자동 보고 도구입니다. 이 도구는 사용자가 PDF 및 Excel 보고서를 직접 생성할 수 있게 하여 수동 접근 방식이 필요 없도록 하여 보고서 생성 과정을 간소화합니다. 또한 APTRS는 다양한 프로젝트 내 취약점을 체계적으로 모니터링하고 관리하는 방법을 제공합니다. APTRS로 침투 테스트 프로젝트를 체계적이고 효율적으로 유지하십시오. 문서 !No...

CVE-2026-34406

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to version 2.0.1, the edituser endpoint POST /api/auth/edituser/ allows Any user who can reach that endpoint and submit...

CVE-2026-34406: Improperly Controlled Modification of Dynamically-Determined Object Attributes

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to version 2.0.1, the edituser endpoint POST /api/auth/edituser/ allows Any user who can reach that endpoint and submit...

CVE-2024-56363

APTRS (Automated Penetration Testing Reporting System) v1.0 is affected by a server-side template injection in Jinja2 due to improper sanitization of user input passed from ckeditor fields. The vulnerability allows an attacker to inject Jinja2 syntax (e.g., {{ config }}, {{ self.class.mro[1].subc...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

PT-2024-36805

Name of the Vulnerable Software and Affected Versions APTRS version 1.0 Description The issue is related to the web application's handling of user-supplied input that is incorporated into a Jinja2 template. When user input is improperly sanitized or validated, an attacker can inject Jinja2 syntax...

CVE-2024-56363: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...