The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

CVE-2024-21514

CVE-2024-21514 概念验证与批量扫描器 概述 CVE-2024-21514 的概念验证：在 OpenCart 自带的 Divido 支付扩展中发现了 SQL 注入问题，该扩展默认包含在 3.0.3.9 版本中。 此概念验证由 M Ali 创建，基于 Snyk 安全公告。 使用方法 最低要求 Python 3.6 或更高版本 requests 库 单目标扫描 扫描单个目标端点： root@kitploit: python cve-2024-21514 .py -u target 批量扫描 批量扫描多个目标： root@kitploit: python cve-2024-2151...

AWE

AWE：面向动态 Web 渗透测试的自适应智能体 Akshat Singh Jaswal · Ashish Baghel 被 NDSS LAST-X 2026 收录 摘要 现代 Web 应用程序日益通过 AI 辅助开发和快速无代码部署流水线构建，这进一步拉大了软件交付速度不断加快与现有安全工具适应性有限之间的差距。我们提出 AWE——一个用于自主 Web 渗透测试的记忆增强型多智能体框架，它在轻量级 LLM 编排层中嵌入了结构化、针对特定漏洞的分析流水线。在包含 104 个挑战的 XBOW 基准测试中，AWE 取得了 87% 的 XSS 成功率（较 MAPTA 提升 30.5%）和...

microctfs

microctfs Docker에서 실행되는 작은 CTF 챌린지 logviewer logviewer 챌린지 빌드 및 포트 8000에 노출하여 시작 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer logviewer 챌린지 재시작 root@kitploit: docker rm -f logchallenge && docker run -d -p 8000:80 --name logchalleng...

CVE-2023-23488-pmpro-2.8

脆弱性のDocker化 : CVE-2023-23488 このプロジェクトは、Dockerを使用して特定の脆弱性をDocker化することを目的としています。目標は、脆弱性を安全に悪用およびテストできる隔離環境を作成することです。 脆弱なアプリケーション Paid Memberships Pro v2.9.8 WordPressプラグイン - 未認証SQLインジェクション インストール このプロジェクトを実行するには、マシンに以下が必要です： Docker Python SQLMAP 前提条件がインストールされたら、次のコマンドでこのGitリポジトリをマシンにクローンできます：...

BurpSentinel

Burp Sentinel ウェブアプリケーションの一般的なセキュリティホールの発見を容易にします。 イントロ / チュートリアル: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction ブログ: http://dobin.github.io/ BurpSentinel を使うと、ペネトレーションテスターは HTTP リクエストのパラメータに対して、悪意のあるリクエストをすばやく簡単に大量に送信できます。それだけでなく、攻撃リクエストに対応する HTTP...

wp2shell-cve-2026-63030-root-cause

wp2shell CVE-2026-63030 + CVE-2026-60137: Análisis independiente de causa raíz WordPress core divulgó wp2shell el 2026-07-17 como un RCE crítico no autenticado que afecta a las instalaciones por defecto WordPress 6.9.0-6.9.4, 7.0.0-7.0.1, sin necesidad de plugins. El descubridor original...

NeutrinoBotHack

NeutrinoBotHack 盲SQL注入在Neutrino面板中...

Grafana-Final-Scanner

Grafana Final Scanner Grafana 用のコマンドライン脆弱性スキャナです。インストール済み Grafana のバージョンを特定し、バージョン対応の CVE チェック一式を実行し、一般的な設定上の弱点を監査し、結果をローカルデータベースに保存して、小さな Web ダッシュボードで表示できます。 法的注意 このツールは Grafana インスタンスにリクエストを送信し、一部のチェックでは既知のエクスプロイト経路（パストラバーサル、SQL...

SQLC2

SQLC2 SQLC2は、SQL Serverをコントロールサーバーとエージェントの両方として使用するコマンド＆コントロールシステムを展開および管理するためのPowerShellスクリプトです。 中核となるのは、SQLC2は単なるPowerShellスクリプト、TSQLスクリプト、そしてSQL Serverインスタンス内のエージェント、コマンド、結果を追跡するいくつかのテーブルにすぎません。凝ったものではありませんが、一部のエンゲージメントでは役立つかもしれません。...