Lucene search
+L

85 matches found

OSV
OSV
•added 2024/05/19 7:22 p.m.•28 views

CVE-2024-36076

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session...

8.8CVSS6.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/05/19 12:00 a.m.•21 views

PT-2024-26885

Name of the Vulnerable Software and Affected Versions SysReptor versions 2024.28 through 2024.30 SysReptor versions prior to 2024.40 Description The issue allows attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomai...

8.8CVSS6.5AI score0.00247EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/05/19 12:00 a.m.•18 views

Syslifters SysReptor 安全漏洞

Syslifters SysReptor is a fully customizable offensive security reporting solution from Syslifters. A security vulnerability exists in Syslifters SysReptor versions prior to 2024.40 that stems from the presence of a cross-site request forgery vulnerability...

8.8CVSS6.6AI score0.00247EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/19 12:00 a.m.•4 views

CVE-2024-36076: Cross-Site Request Forgery (CSRF)

Cross-Site WebSocket Hijacking in SysReptor from version 2024.28 to version 2024.30 causes attackers to escalate privileges and obtain sensitive information when a logged-in SysReptor user visits a malicious same-site subdomain in the same browser session...

8.8CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2023/07/14 12:30 p.m.•93 views

Sysreptor - Fully Customisable, Offensive Security Reporting Tool Designed For Pentesters, Red Teamers And Other Security-Related People Alike

Easy and customisable pentest report creator based on simple web technologies. SysReptor is a fully customisable, offensive security reporting tool designed for pentesters, red teamers and other security-related people alike. You can create designs based on simple HTML and CSS, write your reports...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder