281 matches found
forensicscanner
This repository does not have a README...
XSS-Catcher
XSS Catcher Blind XSS 탐지 및 XSS 데이터 캡처 프레임워크로, Flask, VueJS 및 PostgreSQL 기반입니다. XSS Catcher는 블라인드 크로스 사이트 스크립팅XSS 공격과 데이터 수집스크린샷 포함을 자동화하는 직관적인 도구입니다. 사용자 친화적인 페이로드 생성기를 통해 커스터마이징 가능한 XSS 페이로드를 만들 수 있으며, 웹훅 및 이메일 알림, 다중 인증, 다중 사용자 액세스와 같은 기능을 제공합니다. 간단하게 설계되어 Slack, Discord와 같은 플랫폼에 쉽게 통합되며, 쿠키, 로...
CVE-2023-2591
CVE-2023-2591: Teampass 3.0.6 のアイテムラベルにおける格納型HTMLインジェクション - M Nadeem Qazi 私は最近、人気のあるパスワード管理ツールである nilsteampassnet/teampass にセキュリティ脆弱性を発見しました。この脆弱性は CVE-2023-2591...
bettercap
This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...
Malicious code in atel-mcp-openclaw (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e4255e19fdb4f0352f184f35599be81651badab879e4f39d0f3bb4fda4a58e The package contains multiple structural fingerprints of an active credential-stealer / C2 implant. bin/install.js performs lifecycle-time HTTP POSTs...
[SECURITY] Fedora 44 Update: tcpflow-1.6.2-0.1.8d47b53.fc44
tcpflow is a program that captures data transmitted as part of TCP connections flows, and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but usually doesn't store the data that's actually being...
Anviz Multiple Products
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to conduct reconnaissance, capture or decrypt sensitive data, alter device configurations, gain unauthorized administrative or root‑level access, execute arbitrary code, compromise credentials or...
CVE-2024-55374
REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts...
ClinCapture EDC 安全漏洞
ClinCapture EDC is a clinical trial data capture system from ClinCapture, Inc. A security vulnerability exists in ClinCapture EDC versions 3.0 and 2.2.3, which originates in reflective cross-site scripting and could lead to the execution of JavaScript code by an unauthenticated, remote attacker i...
CVE-2025-65270
A reflected cross-site scripting (XSS) vulnerability exists in ClinCapture EDC versions 3.0 and 2.2.3 . This flaw allows an unauthenticated remote attacker to execute malicious JavaScript code within a victim's browser. The vulnerability is triggered by failing to properly neutralize input during...
CVE-2025-54346
A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
EUVD-2025-197628
A Stored Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
CVE-2025-54346
A Reflected Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
CVE-2025-54348
A Stored Cross Site Scripting XSS vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information...
Covert Surveillance in Smart Devices: A SCOUR Framework Analysis of Youth Privacy Implications
This paper investigates how smart devices covertly capture private conversations and discusses in more in-depth the implications of this for youth privacy. Using a structured review guided by the PRISMA methodology, the analysis focuses on privacy concerns, data capture methods, data storage and...
GHSA-WQM3-W3P6-XJGM Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers
Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via the quote function that fails to properly escape special characters. An attacker can execute arbitrary SQL commands by supplying specially crafted input values for database name or table names. Remediation Upgrade...
PT-2025-41380
Name of the Vulnerable Software and Affected Versions Apache Flink CDC version 3.4.0 Description The software is susceptible to a SQL injection due to maliciously crafted identifiers, such as a crafted database name or table name. The attack can only be triggered by a logged-in database user...