CVE-2024-39304

Description Ce script est un PoC pour CVE-2024-39304, où une injection SQL est possible en raison d'un manque de sanitisation dans le projet ChurchCRM. Utilisation python3 CVE-2024-39304.py -u -p -b -v Exemple : python3 CVE-2024-39304.py -u FirstLast -p Password123 -b http://localhost/churchcrm -...

CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer

Cybersecurity company CrowdStrike is alerting of a phishing campaign that exploits its own branding to distribute a cryptocurrency miner that's disguised as an employee CRM application as part of a supposed recruitment process. "The attack begins with a phishing email impersonating CrowdStrike...

CRMAPP SQL Injection

Crm Application - Time-Based Blind Injection =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.crmapp.com/ Time-Based Blind...