IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

nextpnr

nextpnr -- una herramienta portátil de colocación y enrutamiento para FPGA nextpnr pretende ser una herramienta FOSS de colocación y enrutamiento para FPGA, independiente del fabricante y guiada por la temporización. Actualmente, nextpnr soporta: Dispositivos Lattice iCE40 compatibles con Project...

CVE-2020-13457

CVE-2020-13457 CVE-2020-13457 Línea de tiempo ================ 2020-05-04: Descubierto 2020-05-11: Revisar problemas en el ecosistema del investigador 2020-05-20: Exploit PoC probado en Windows 2012 x64 2020-05-25: Notificación al proveedor 2020-05-27: Exploit PoC probado en Windows 10 x64...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

should-i-trust

should-i-trust 摘要 should-i-trust 是一个用于评估域名的 OSINT 信号的工具。 要求 should-i-trust 需要以下来源的 API 密钥： Censys.io - 注册后前250次查询/月免费 VirusTotal - 免费 GrayHatWarFare - 免费，结果有限 使用场景 您是负责评估新供应商的审查委员会成员。您的具体职责是确保新供应商满足合规性和安全要求。 标准操作流程是要求提供以下一项或全部：SOC...

CVE-2018-12598

CVE-2018-12598 CVE-2018-12598 Cronología ================ 2018-06-08: Descubierto 2018-06-11: Re-prueba del entorno de staging 2018-06-12: Re-prueba del entorno en vivo 2018-06-19: Comunicación interna 2018-06-21: Notificación al proveedor 2018-06-XX: Retroalimentación del proveedor 2018-06-XX: E...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

cisco-security-research

Investigación de Seguridad de Cisco Investigador: 0xReadingSteiner Contacto: [email protected] Proveedor: Cisco Systems, Inc. Proveedor notificado: 2026-08-04 Cisco PSIRT, ZDI, SSD Respuesta del proveedor: Ninguna Por qué existe esto La investigación de seguridad independiente sobre producto...

CVE-2018-12597

CVE-2018-12597 CVE-2018-12597 Timeline ================ 2018-06-08: Discovered 2018-06-11: Retest staging environment 2018-06-12: Retest live environment 2018-06-19: Internal communication 2018-06-21: Vendor notification 2018-06-XX: Vendor feedback 2018-06-XX: Vendor feedback product will be...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

vamp-forticheck

vamp-forticheck Multi-Vendor Edge Device CVE Scanner — VampSecure Labs Overview vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis: 1. Passive detection —...

Php-unit-CVE-2017-9841

Vulnerabilidad de ejecución remota de código en phpunit CVE-2017-9841 Composer es una herramienta de gestión de paquetes de PHP. Al usar Composer para instalar un paquete de extensión, se creará una carpeta 'vendor' en el directorio actual y todos los archivos se colocarán allí. Normalmente, este...

Emlog Pro v2.1.14 - Cross-Site Scripting

Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. id: CVE-2018-6605 info: name: Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection author: DhiyaneshDk severity...

74cms - ajax_officebuilding.php SQL Injection

A SQL injection vulnerability exists in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php. id: CVE-2020-22210 info: name: 74cms - ajaxofficebuilding.php SQL Injection author: ritikchaddha severity: critical description: | A SQL injection vulnerability exists in 74cms 3.2.0 via the x...

74cms - ajax_street.php 'x' SQL Injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. id: CVE-2020-22208 info: name: 74cms - ajaxstreet.php 'x' SQL Injection author: ritikchaddha severity: critical description: | SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. impact: | Successful...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...