Bug-Bounty-Arsenal-v.3

BugBounty Arsenal 一个面向漏洞赏金猎人和安全研究人员的免费全栈安全扫描平台 — 50+ 检测器、持续监控和 CI/CD 门禁，全部集成于一个仪表板。 ▶ 在线应用：bugbounty-arsenal.net — 免费，无需信用卡。 如果这个项目对你有用，请给仓库点个 ⭐ — 这真的很有帮助。 与众不同之处 大多数扫描器只运行一次就抛之脑后。BugBounty Arsenal 会持续监控你的目标，并且只呈现发生变化的内容： 🔁 定时扫描 — 按每日 / 每周 / 每月频率运行任意目标，仅在出现与上次运行相比新增 的发现时，通过邮件 / Slack / Discord...

aura-botnet

Aura ボットネット C2 サーバー ボットネットの C2 サーバーは、バックエンドとして Django フレームワークを利用しています。 最も効率的な Web サーバーとはほど遠いですが、以下の点で相殺されています。 Django は非常に移植性が高いため、テスト/教育目的に適しています。サーバーとデータベースは aura-server フォルダー内に含まれています。 Django には、ボットとコマンドの管理に使用できる、直感的で強力な管理サイトが含まれています サーバーは単純な POST リクエストを処理し、テキストを返すだけです 静的ファイルは、nginx...

PYSEC-2026-1684 Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

CVE-2026-44987

SysReptor (fully customizable pentest reporting platform) has a privilege-escalation issue in versions before 2026.29: users with User Admin permissions can change the emails of users with Superuser permissions. If the installed forgot-password feature is enabled (non-default), these users can re...

CVE-2026-44987 SysReptor: Privilege Escalation from User Admin to Superuser

SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissions can change the email addresses of users with "Superuser" permissions. If the SysReptor installation has the "Forgot Password" functionality enabled non-default, they can res...

EUVD-2024-1017

Malicious code in bioql PyPI...

Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

CVE-2024-26164

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

CVE-2024-26164

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

CVE-2024-26164 Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

...

KLA65143 ACE vulnerability in Microsoft SQL Server

A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-26164 Related products Microsoft-SQL-Server CVE list CVE-2024-26164 critical KB list Solution Install necessary updates...

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed and vulnerability in SQL Server. The vulnerability is located in the Django backend and allows a malicious party to be able to use the client application of the victim to execute an SQL injection and thus execute arbitrary code execute arbitrary code with the victim's privileg...

PT-2024-2256

Name of the Vulnerable Software and Affected Versions Microsoft Django Backend for SQL Server affected versions not specified Description The issue is related to the failure to protect the SQL query structure when handling an unsanitized parameter, which can be exploited by a remote attacker to...

Microsoft Django Backend for SQL Server Security Vulnerability

Microsoft Django Backend for SQL Server is a database backend for the Django web framework for connecting to and manipulating Microsoft SQL Server databases from Microsoft USA. A security vulnerability exists in Microsoft Django Backend for SQL Server. An attacker can exploit the vulnerability to...