40 matches found
cloud_enum
cloudenum Futuro di cloudenum Ho costruito questo strumento nel 2019 per un pentest che coinvolgeva Azure, poiché all'epoca nessun altro strumento di enumerazione lo supportava. Da lì è cresciuto e ho imparato molto aggiungendo funzionalità. Costruire strumenti è divertente, ma mantenerli è...
cansina
Cansina Cansina ist eine Anwendung zur Entdeckung von Webinhalten. Es ist bekannt, dass Webanwendungen nicht alle ihre Ressourcen oder öffentlichen Links veröffentlichen, sodass der einzige Weg, diese Ressourcen zu entdecken, darin besteht, sie anzufragen und die Antwort zu überprüfen. Die Aufgab...
CVE-2026-53569 Frappe: Missing authorization in toggle_like and mark_as_seen
Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted togglelike and markasseen endpoints in frappe/desk/like.py and frappe/desk/doctype/note/note.py do not enforce read permission before modifying likedby metadata or a Note seen state. An authenticated...
Astra Linux – Vulnerability in Firefox, Thunderbird
An attacker who enumerated resources from the WebCompat extension could obtain a persistent UUID that identified the browser. This UUID could be used to switch between container-based modes and normal/private browsing mode, but not profiles. This vulnerability has been fixed in Firefox 140, Firef...
EUVD-2021-30816
Malicious code in bioql PyPI...
PentestMCP: A Toolkit for Agentic Penetration Testing
Agentic AI is transforming security by automating many tasks being performed manually. While initial agentic approaches employed a monolithic architecture, the Model-Context-Protocol has now enabled a remote-procedure call RPC paradigm to agentic applications, allowing for the flexible constructi...
Omnissa Workspace ONE UEM 安全漏洞
Omnissa Workspace ONE UEM is an endpoint management platform from Omnissa USA. A security vulnerability exists in Omnissa Workspace ONE UEM that stems from server-side request forgery and could lead to internal network resource enumeration...
CVE-2025-53709
Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments. Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily...
Amazon Linux 2 : firefox (ALASFIREFOX-2025-040)
The version of firefox installed on the remote host is prior to 128.12.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2025-040 advisory. A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox o...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
firefox: thunderbird: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser and persisted between containers and...
Mozilla Firefox ESR < 128.12
The version of Firefox ESR installed on the remote Windows host is prior to 128.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-53 advisory. - The executable file warning did not warn users before opening files with the terminal extension. This bug only...
CVE-2020-11453
Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/. The functionality requires no authentication and, while it is not possible to pass parameters in the SSRF request, it is still possible to exploit ...
