The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

AirmonGUI

AirmonGUI Une interface web locale pour la suite d'outils sans fil aircrack-ng. Captures d'écran · Démarrage rapide · Fonctionnalités · Feuille de route · Contribuer !WARNING Utilisez ceci uniquement sur des réseaux dont vous êtes propriétaire ou pour lesquels vous avez une autorisation écrite de...

interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

csaf

Translation / Traduction Philibert Gentil：@Philibert-Gentil Vous pouvez me contacter en cas d'erreur de traduction / d'interprétation. DAMN VULNERABLE WEB APPLICATION / BORDEL D'APPLICATION WEB VULNÉRABLE Bordel d'application web vulnérable BAWV, traduit DVWA est une application web PHP/MySQL...

CVE-2014-6271

CVE-2014-6271 - Shellshock.py Эксплойт Shellshock, он же CVE-2014-6271. Протестировано на Bash 3.2 и Bash 4.2. Для получения дополнительной информации об уязвимости посетите: https://nvd.nist.gov/vuln/detail/CVE-2014-6271 Примечание Эксплойт в основном тестировался на Hack The Box на следующих...

cygor

Cygor Présentation générale Cygor est un framework modulaire de découverte d'actifs qui réunit le scan, l'analyse et l'énumération de services dans un seul flux de travail. Il remplace la juxtaposition d'outils séparés par un processus automatisé qui gère la découverte, l'enrichissement et...

xpfarm

XPFarm Un scanner de vulnérabilités open-source qui encapsule des outils de sécurité open-source bien connus derrière une interface web unique. Sommaire Section| Description ---|--- Pourquoi| Motivation et philosophie derrière XPFarm Outils intégrés| Les 10 outils open-source orchestrés par XPFar...

ravage

Ravage Ravage는 귀하가 소유하거나 명시적으로 테스트 권한을 부여받은 실행 중인 웹 애플리케이션을 평가하기 위한 증거 우선evidence-first CLI입니다. 결정론적 정찰 및 검증과 선택적 모델 기반 공격 루프를 결합하면서, 범위, 인증, 트래픽 회계, 증거를 코드 소유 경계 내에 유지합니다. Ravage는 1.0 이전의 연구용 알파 버전입니다. 일회용 환경과 서면 규칙rule of engagement을 사용하세요. 보안 테스트는 애플리케이션 상태를 변경할 수 있습니다. Ravage는 발견 사항을 수정하거나 패치...

PULSE-C2

PULSE C2 Framework Infrastructure de Commande et Contrôle HTTPS avec tableau de bord web pour la gestion à distance d'agents Windows. ⚠️ Utilisation éducative uniquement - Toute utilisation illégale relève de votre responsabilité. Fonctionnalités Serveur C2 HTTPS avec chiffrement TLS Flask Tableau...

CVE-2019-11287

CVE-2019-11287: DoS via débordement de tas dans le plugin de gestion Web RabbitMQ Pivotal RabbitMQ, versions 3.7.x antérieures à 3.7.21 et 3.8.x antérieures à 3.8.1, et RabbitMQ for Pivotal Platform, versions 1.16.x antérieures à 1.16.7 et versions 1.17.x antérieures à 1.17.4, contiennent un plug...

BSCP-EXAM-GUIDE-BY-N3OARI-2026

README.MD МАРТ 2026 Этот репозиторий содержит каждую шпаргалку вместе с соответствующими наиболее важными лабораторными работами. Каждая тема включает свою собственную шпаргалку/методологию, наиболее релевантные лабораторные работы и полезные ресурсы. ⭐Это результат месяцев работы — надеюсь, он...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

owtf

Offensive Web Testing Framework OWTF OWASP OWTF aide les testeurs d'intrusion à rester efficaces et alignés sur les normes de sécurité telles que le Guide de test de sécurité Web OWASP, l'OWASP Top 10, PTES et NIST, afin qu'ils disposent de plus de temps pour : Voir la situation dans son ensemble...