doork

doork description doork is a open-source passive vulnerability auditor tool that automates the process of searching on Google information about specific website based on dorks. doork can update his own database from ghdb and use it for find flaws without even contact the target endpoint. You can...

自动化安全评估系统

安全研究员需要对企业内外部代码工程做漏洞审计，但纯人工审计慢、覆盖不全、误报高、报告撰写耗时——本项目用 多智能体协同 + Docker 沙箱隔离，把"源码接入 → 静态审计 → 动态无害验证 → 攻击链推演 → 报告交付"整条链路自动化，产出可复现漏洞证据、Diff 修复补丁与专业评估报告...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packetrelease via NETDEVUP race packetrelease has a race window where NETDEVUP can re-register a socket into a fanout group’s arr array. The re-registration is not cleared by fanoutrelease, leaving a dangli...

dep-scan v6.3.0

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

SQLi-PoC

SQLi-PoC — CW... flag extractor A self-contained, sqlma...

cybersec-bad-folio

DevFolio Application portfolio étudiant — Spring Boot 3.2 + V...

EUVD-2014-0152

Malware in sbrugna...

EUVD-2010-0879

Malware in sbrugna...

EUVD-2021-31347

Malicious code in bioql PyPI...

EUVD-2023-27587

Malicious code in bioql PyPI...

BELL-CVE-2024-42228

Bulletin has no description...

PT-2024-13214 · Octopus Deploy +1 · Octopus Server

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows an API key to be logged in clear text in the audit log file after an invalid login attempt. Recommendations: At the moment, there is no information about a newer version...

CVE-2021-42633

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records...

Unspecified Vulnerability in Nextcloud (CNVD-2021-51814)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 19.0.13, 20.0.11, and 21.0.3, which stems from the audit logging feature failing to log...

Citrix StorageZones Controller Improper Access Restrictions / Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller vulnerable version: all versions before 5.4.2 fixed version: 5.4.2 CVE number: CVE-2018-16968,...

Avaya Radvision SCOPIA Desktop SQL Injection

https://www.osisecurity.com.au/avaya-radvision-scopia-desktop-dlgloginowneridjsp-ownerid-sql-injection.html Date: 04-Apr-2017 Product: Avaya Radvision SCOPIA Desktop Versions affected: v7.7.000.042 released in 2011 confirmed v8.2.101.046 relased in 2013 confirmed Vulnerability: Blind SQL injectio...