The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain defects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

webcopilot

WebCopilot Una herramienta de automatización que enumera subdominios, luego filtra parámetros de xss, sqli, open redirect, lfi, ssrf y rce y luego escanea vulnerabilidades. Características • Instalación • Uso • WebCopilot • Herramientas Usadas • Agradecimientos WebCopilot es una herramienta de...

SMBCompScan

SMBCompScan Script de escaneo para identificar hosts vulnerables a CVE-2020-0796 Aviso Aviso legal Este script puede ayudar a identificar máquinas con la vulnerabilidad SMBv3 comprobando si la compresión está habilitada. Aún así, podría devolver 'vulnerable' para máquinas que tengan instalado...

CVE-2020-12800

CVE-2020-12800 Script POC para CVE-2020-12800: RCE a través de Carga de Archivos sin Restricciones Plugin vulnerable para pruebas alojado en: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Laboratorio de Pentester Academy...

PowerShell-Log4J-Scanner

PowerShell-Log4J-Scanner puede encontrar, analizar y parchear archivos Log4J debido a CVE-2021-44228, CVE-2021-45046 sitio oficial de Apache: https://logging.apache.org/log4j/2.x/download.html El script es para Powershell, debería funcionar en Win10 o Win11...

httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

httpstat

httpstat httpstat visualiza las estadísticas de curl1 de una manera bella y clara. Es un script de Python de un solo archivo🌟 que no tiene dependencias👏 y es compatible con Python 3🍻. Características Hermosa salida de terminal — desglose de tiempos de DNS, TCP, TLS, procesamiento del servidor y...

hayat

Hayat Google Cloud Platform Script de auditoría y endurecimiento ¿Qué significa "Hayat"? Bueno, la verdad es que me costó encontrar un nombre único. "Hayat" es una palabra turca que significa "Vida" en inglés y también es el nombre de mi sobrina. ¿Listo para conocerla? 😍 😍 😍 Hayat es un script de...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...

scan4log4j

scan4log4j Script de Python que envía solicitudes de payload de log4j CVE-2021-44228 a una lista de URLs MUY BETA uso Proporciona tu lista de URLs en urls.txt Coloca tus payloads en payloads.txt Opcional añade más encabezados en headers.txt Ejecuta ./scan4log4j.py...

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC is a simple PowerShell script that runs on Exchange servers to identify indicators of compromises IOCs from the Hafnium activity release by Mircosoft on 2021-03-02 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. The script may be...

Fix-Log4j-PowershellScript

Fix-Log4j-PowershellScript CVE-2021-44228 buscar y eliminar la clase JNDI Lookup de archivos log4j.jar en el sistema con Powershell Windows ¡asegúrate de usar la última versión del script! Versión de lanzamiento 1.6.2 y superiores Modo Kill para procesos Java implementado. $killMode por defecto e...

THM-Source-CVE-2019-15231

THM-Source-CVE-2019-15231 Un write-up sobre la sala Source de TryHackMe y un script de python para explotar la vulnerabilidad CRÉDITOS No me atribuyo ningún crédito por el descubrimiento de esta vulnerabilidad. Gracias a las siguientes personas por proporcionar los recursos para que personas como...

bincrypter

Privacidad y protección de derechos de autor para tus programas Un Cifrador de Binarios en Tiempo de Ejecución para Linux - ¡en BASH! Ofusca y cifra cualquier binario ELF Ofusca y cifra cualquier script SHELL Muerte de AV/EDR: Morfeo + firma diferente cada vez 100% en memoria. Sin archivos...