APTRS

APTRS APTRS نظام تقارير اختبار الاختراق الآلي هو أداة تقارير آلية مبنية على Python و Django، مصممة لمختبرّي الاختراق والمؤسسات الأمنية. تعمل هذه الأداة على تبسيط عملية إنشاء التقارير من خلال تمكين المستخدمين من إنشاء تقارير PDF و Excel مباشرة، مما يلغي الحاجة إلى الأساليب اليدوية. بالإضافة إلى ذل...

CVE-2026-34406

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. Prior to version 2.0.1, the edituser endpoint POST /api/auth/edituser/ allows Any user who can reach that endpoint and submit...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

CVE-2024-56363

APTRS (Automated Penetration Testing Reporting System) v1.0 is affected by a server-side template injection in Jinja2 due to improper sanitization of user input passed from ckeditor fields. The vulnerability allows an attacker to inject Jinja2 syntax (e.g., {{ config }}, {{ self.class.mro[1].subc...

CVE-2024-56363 APTRS has SSTI vulnerability

APTRS Automated Penetration Testing Reporting System is a Python and Django-based automated reporting tool designed for penetration testers and security organizations. In 1.0, there is a vulnerability in the web application's handling of user-supplied input that is incorporated into a Jinja2...

PT-2024-36805

Name of the Vulnerable Software and Affected Versions APTRS version 1.0 Description The issue is related to the web application's handling of user-supplied input that is incorporated into a Jinja2 template. When user input is improperly sanitized or validated, an attacker can inject Jinja2 syntax...