RedTeam-Physical-Tools

Red Team – 물리적 보안 – 은밀 침투 – EDC 승인된 물리적 보안 평가, 레드팀 활동 및 은밀 침투 훈련에서 일반적으로 참조되는 상업적으로 이용 가능한 도구들의 엄선된 목록입니다. 법적 및 윤리: 서면 승인 을 받고 현지 법률에 따라 사용하십시오. 많은 도구는 귀하의 관할권에서 주거침입 도구로 간주될 수 있습니다. 저자는 오용에 대해 책임을 지지 않습니다. 제휴사 공개: 일부 링크는 제휴 링크입니다. 아마존 어소시에이트로서 저는 귀하에게 추가 비용 없이 적격 구매로 수수료를 받습니다. 가격 참고: 가격은 2026년 ...

CVE-2025-65270

CVE-2025-65270 ⚠️ 免責事項 このリポジトリは教育および防御的なセキュリティ研究のみ を目的としています。 🔥 概要 ClinCapture EDC 3.0 および 2.2.3 における反射型クロスサイトスクリプティング XSS の脆弱性により、認証されていないリモート攻撃者が被害者のブラウザのコンテキストで JavaScript コードを実行できる可能性があります。 🧪 概念実証 脆弱性を実証するには、パスワード回復タブに移動し、name または email パラメータにペイロードを指定するか、または 1 つのリクエストを送信します。 🔓 name パラメータを介して...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2025-65270: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

PT-2025-52667

Name of the Vulnerable Software and Affected Versions ClinCapture EDC versions 2.2.3 and 3.0 Description A reflected cross-site scripting XSS issue exists that allows a remote attacker to execute JavaScript code within a user's browser. The attacker does not need to be authenticated to exploit th...

EUVD-2024-1371

Malicious code in bioql PyPI...

EUVD-2024-45457

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-_edc (npm)

The package @zalastax/nolb-edc was found to contain malicious code...

MAL-2025-9969 Malicious code in @zalastax/nolb-_edc (npm)

The package @zalastax/nolb-edc was found to contain malicious code...

Malicious code in edc-ng2-select (npm)

The package edc-ng2-select was found to contain malicious code...

MAL-2025-19215 Malicious code in edc-ng2-select (npm)

The package edc-ng2-select was found to contain malicious code...

CVE-2024-4536

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component https://github.com/eclipse-edc/Connector , an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security...

CVE-2024-51625

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

CVE-2024-51625

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

CVE-2024-51625

CVE-2024-51625 is a WordPress plugin issue in Quran Shortcode (EDC Team) with an SQL injection vulnerability. Connected sources confirm: affected software is Quran Shortcode versions up to 1.5 (and earlier); root cause is improper neutralization of special elements in SQL commands, leading to bli...

CVE-2024-51625 WordPress Quran Shortcode plugin <= 1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

PT-2024-34768 · Unknown · Edc Team Quran Shortcode

Name of the Vulnerable Software and Affected Versions: EDC Team Quran Shortcode versions 1.5 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...

AZL-48249 CVE-2024-43909 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference for smu7 optimize the code to avoid pass a null pointer hwmgr-backend to function smu7updateedcleakagetable...