vPrioritizer

概述 | 工作原理 | 快速开始 | 路线图 | 联系我 概述 根据 vulndb 和 cve 等来源的数据，每天大约有 50 个新漏洞被业界知晓，并且可以预见这个数字还将进一步增长。这是一个庞大的漏洞数量，需要有效且快速地评估和修复。因此，如今的组织正致力于（或应该致力于）降低风险而非消除风险，漏洞管理几乎等同于风险优先级划分，而风险是一个由多重因素决定的动态变化概念。 理论上，考虑诸如基础 CVSS、资产可访问性、关键性、漏洞利用可用性、业务敏感性等因素的方法似乎很合适，但每个组织手动对每个漏洞针对每个资产进行此类操作并不现实。 目标与理念 为克服上述挑战，vPrioritizer...

zabbix-threat-control

Zabbix Threat Control ztc 将您已经在运行的 Zabbix 变成漏洞管理控制台。 ztc 通过标准的 zabbix-agent2 （无需部署额外代理）读取每台主机的软件清单，对照 Vulners 进行审计，并将按主机评分的发现结果 ——问题、仪表盘和 CVSS 图表——推回 Zabbix。一个静态二进制文件，一条命令即可安装。 为什么选择 ztc 无需新代理，无 RCE 风险。 主机通过标准 zabbix-agent2 的 UserParameter 上报清单。修复只通过一个白名单键 + 受限 sudoers 执行——绝不使用任意的 system.run。 支持...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer 是一款强大的工具，通过结合 CVSS、EPSS、CISA 的 已知被利用漏洞 以及 VulnCheck 的社区资源（NVD++、KEV），帮助您优先处理漏洞补丁。它提供了关于漏洞被利用的可能性以及对信息系统潜在影响的宝贵洞察。 为什么要结合 CVSS、EPSS 和 CISA KEV？ CVEPrioritizer 利用 CVSS 和 EPSS 分数之间的相关性，以增强漏洞修复工作。CVSS 捕捉漏洞的基本属性，而 EPSS 提供数据驱动的威胁信息，使您能够更好地确定补丁优先级。 目录 1. 为什么要结合 CVSS、EPSS ...

pwndoc

PwnDoc PwnDoc 是一款渗透测试报告应用程序，让编写调查结果和生成可自定义的 Docx 报告变得简单易行。 主要目标是通过在用户之间共享漏洞等数据，花更多时间进行 渗透 ，减少花在 文档 上的时间。 文档 安装 数据 角色 漏洞 审计 模板 设置 个人资料 功能 多语言支持 多数据支持 高度可定制 管理可复用的审计和漏洞数据 创建自定义章节 为漏洞添加自定义字段 漏洞管理，支持 CVSS v3 和 v4 评分 多用户报告，支持实时协作 重测和多重审计工作流 未保存工作的自动恢复 审计审查与审批工作流 带线程回复的审计评论 Docx 报告生成 Docx 模板自定义 通过...

writehat

WriteHat es una herramienta de informes que elimina Microsoft Word y muchas horas de sufrimiento del proceso de generación de informes. Markdown -- HTML -- PDF. Creada por probadores de penetración, para probadores de penetración, pero puede usarse para generar cualquier tipo de informe. Escrito...

blue-team-capstone

Blue Team Capstone Project Overview This project is a Blue Team cybersecurity capstone focused on vulnerability assessment, risk evaluation, and remediation. The assessment focuses on CVE-2009-0658 , a vulnerability affecting Adobe Acrobat and Reader. The goal of the project was to evaluate the...

freevulnsearch

freevulnsearch 此NMAP NSE脚本是Free OCSAF项目的一部分 - https://freecybersecurity.org。结合NMAP的版本扫描 "-sV"，自动使用CVE（通用漏洞与暴露）分配相应漏洞，并使用CVSS（通用漏洞评分系统）分配漏洞严重性。为更清晰，CVSS仍按对应的v3.0 CVSS等级分配： 严重（CVSS 9.0 - 10.0） 高危（CVSS 7.0 - 8.9） 中危（CVSS 4.0 - 6.9） 低危（CVSS 0.1 - 3.9） 无（CVSS 0.0）...

Vulnerability-and-Exploit-Analysis

🛡️ Vulnerability and Exploit Analysis Ethical Hacking labor...

pwndoc v1.7.0

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

Exploit for CVE-2017-0144

ExploitdbPro - Enhanced Edition Enhanced CLI tool for Exploit...

EUVD-2021-2360

Malware in sbrugna...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

libvpd bug fix and enhancement update

An update is available for libvpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...

tigervnc security update

An update is available for tigervnc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Virtual Network Computing VNC is a remote display system which allows users ...

libwacom bug fix update

An update is available for libwacom. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libwacom packages contain a library that provides access to a tablet mod...

python3.12-setuptools-rust bug fix and enhancement update

An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...

libmnl bug fix update

An update is available for libmnl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libmnl is a minimalistic user-space library oriented to Netlink developers...

cronie bug fix and enhancement update

An update is available for cronie. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

rpm-ostree bug fix update

An update is available for rpm-ostree. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rpm-ostree tool binds together the RPM packaging model with the OSTree...