Tiredful-API

ما هي Tiredful API؟ Tiredful API هي تطبيق ويب معطوب عن قصد. الهدف من هذا التطبيق هو تعليم المطورين، واختبار الجودة، ومتخصصي الأمان عن الثغرات الموجودة في خدمات الويب REST API الناتجة عن ممارسات الترميز غير الآمنة. من يمكنه استخدام Tiredful API؟ مطورو الويب مختبرو الاختراق للويب متخصصو الأمان الطل...

crAPI

crAPI c ompletamente r idícula API crAPI ajudará você a entender os dez riscos de segurança de API mais críticos. crAPI é vulnerável por design, mas você poderá executá-la com segurança para se educar/treinar. crAPI é moderna, construída sobre uma arquitetura de microsserviços. Quando chegar a ho...

xvna

XVNA Aplicação Node Extremamente Vulnerável XVNA é uma aplicação node extremamente vulnerável codificada em NodejsExpressjs/MongoDB que ajuda entusiastas de segurança a aprender segurança de aplicações. Não é aconselhável hospedar esta aplicação online, pois ela é intencionalmente vulnerável...

The vulnerability of the allowed_urls configuration in the PyTorch TorchServe training and scaling tool allows a attacker to perform an SSRF attack.

The vulnerability of the allowedurls configuration in PyTorch TorchServe’s model servicing and scaling tools is related to insufficient validation of incoming requests during URL verification. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

Codex Exposed: Helping Hackers in Training?

How useful is the Codex code generator as a potential training tool?...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly stated, but the tool includes various web application vulnerabilities such as Burt Force brute force, XSS cross-site scripting, CSRF cross-site request forgery, SQL-Inject SQL injection, RCE remote...

vulhub

It is an offensive tool for web application security training. The primary vulnerability is not explicitly stated, but the repository contains a variety of vulnerable docker environments, including those for web applications, databases, and other services. The environments are designed to be...

vulhub

It is an offensive tool for web application security training. The repository contains a collection of pre-built vulnerable docker environments for web application security training. The tool is designed to be user-friendly, requiring no prior knowledge of docker, and can be installed and run wit...

vulhub-200710

It is an offensive tool for web application security training. The repository contains a collection of pre-built vulnerable environments based on Docker-Compose, designed for web application security training. The tool is not explicitly stated to be a PoC exploit or an exploit module/toolkit, but...

Intel Deep Learning Training Tool Elevation of Privilege Vulnerability

Intel Deep Learning Training Tool Beta is a set of deep learning training tools from Intel USA. The tool supports visual tuning and running deep learning algorithms. An elevation of privilege vulnerability exists in Intel Deep Learning Training Tool Beta 1. A remote attacker could exploit this...

CVE-2017-5719

A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user...

CVE-2017-5719

The CVE-2017-5719 entry pertains to Intel Deep Learning Training Tool Beta 1 and is supported by CNVD records describing an elevation-of-privilege vulnerability that could let a remote attacker execute code as a local user. Public details in the connected CNVD item indicate an elevation-of-privil...