crAPI

crAPI c ompletely r idiculous API crAPI will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself. crAPI is modern, built on top of a microservices architecture. When time has come to buy your...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

xvna

XVNA 극도로 취약한 Node 애플리케이션 XVNA는 NodejsExpressjs/MongoDB로 작성된 극도로 취약한 Node 애플리케이션으로, 보안 애호가들이 애플리케이션 보안을 배우는 데 도움을 줍니다. 이 애플리케이션은 의도적으로 취약하게 설계되었으므로 온라인에 호스팅하지 않는 것이 좋습니다. 로컬 환경에서 호스팅하고 선택한 도구를 사용하여 애플리케이션 보안 기술을 연마하는 것을 권장합니다. 이 애플리케이션을 방해하거나 해킹하는 것은 합법적입니다. 개념은 커뮤니티에 애플리케이션 보안을 아마도 가장 좋고 기초적인 방법으...

The vulnerability of the allowed_urls configuration in the PyTorch TorchServe training and scaling tool allows a attacker to perform an SSRF attack.

The vulnerability of the allowedurls configuration in PyTorch TorchServe’s model servicing and scaling tools is related to insufficient validation of incoming requests during URL verification. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

Codex Exposed: Helping Hackers in Training?

How useful is the Codex code generator as a potential training tool?...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly stated, but the tool includes various web application vulnerabilities such as Burt Force brute force, XSS cross-site scripting, CSRF cross-site request forgery, SQL-Inject SQL injection, RCE remote...

vulhub

It is an offensive tool for web application security training. The primary vulnerability is not explicitly stated, but the repository contains a variety of vulnerable docker environments, including those for web applications, databases, and other services. The environments are designed to be...

vulhub

It is an offensive tool for web application security training. The repository contains a collection of pre-built vulnerable docker environments for web application security training. The tool is designed to be user-friendly, requiring no prior knowledge of docker, and can be installed and run wit...

vulhub-200710

It is an offensive tool for web application security training. The repository contains a collection of pre-built vulnerable environments based on Docker-Compose, designed for web application security training. The tool is not explicitly stated to be a PoC exploit or an exploit module/toolkit, but...

Intel Deep Learning Training Tool Elevation of Privilege Vulnerability

Intel Deep Learning Training Tool Beta is a set of deep learning training tools from Intel USA. The tool supports visual tuning and running deep learning algorithms. An elevation of privilege vulnerability exists in Intel Deep Learning Training Tool Beta 1. A remote attacker could exploit this...

CVE-2017-5719

A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user...

CVE-2017-5719

The CVE-2017-5719 entry pertains to Intel Deep Learning Training Tool Beta 1 and is supported by CNVD records describing an elevation-of-privilege vulnerability that could let a remote attacker execute code as a local user. Public details in the connected CNVD item indicate an elevation-of-privil...

CVE-2017-5719: Undefined Security Weakness

A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user...