doork

doork 描述 doork 是一款开源被动漏洞审计工具，它基于 dorks 自动化在 Google 上搜索特定网站信息的过程。 doork 可以从 ghdb 更新自己的数据库，并利用它来发现漏洞，而无需直接接触目标端点。 你可以提供自定义的单词列表，并将输出保存到任何位置。 安装 你可以通过克隆 Git 仓库来下载 doork： root@kitploit: git clone https://github.com/AeonDave/doork doork doork 可在任何平台上与 Python 版本 2.6.x 和 2.7.x 配合使用。 你还需要安装 root@kitploit...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Fixed a UAF Use-after-Allocation issue in packetrelease due to a race condition involving NETDEVUP. packetrelease has a race condition where NETDEVUP can re-register a socket into the arr array of fanout groups. This...

cybersec-bad-folio

DevFolio Application portfolio étudiant — Spring Boot 3.2 + V...

EUVD-2014-0152

Malware in sbrugna...

EUVD-2010-0879

Malware in sbrugna...

EUVD-2021-31347

Malicious code in bioql PyPI...

EUVD-2023-27587

Malicious code in bioql PyPI...

BELL-CVE-2024-42228

Bulletin has no description...

PT-2024-13214 · Octopus Deploy +1 · Octopus Server

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows an API key to be logged in clear text in the audit log file after an invalid login attempt. Recommendations: At the moment, there is no information about a newer version...

CVE-2021-42633

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records...

Unspecified Vulnerability in Nextcloud (CNVD-2021-51814)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 19.0.13, 20.0.11, and 21.0.3, which stems from the audit logging feature failing to log...

Citrix StorageZones Controller Improper Access Restrictions / Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller vulnerable version: all versions before 5.4.2 fixed version: 5.4.2 CVE number: CVE-2018-16968,...

Avaya Radvision SCOPIA Desktop SQL Injection

https://www.osisecurity.com.au/avaya-radvision-scopia-desktop-dlgloginowneridjsp-ownerid-sql-injection.html Date: 04-Apr-2017 Product: Avaya Radvision SCOPIA Desktop Versions affected: v7.7.000.042 released in 2011 confirmed v8.2.101.046 relased in 2013 confirmed Vulnerability: Blind SQL injectio...