writehat

WriteHat ist ein Berichtswerkzeug, das Microsoft Word und viele Stunden Leid aus dem Berichterstellungsprozess entfernt. Markdown -- HTML -- PDF. Entwickelt von Penetrationstestern, für Penetrationstester – kann aber zur Erstellung jeder Art von Bericht verwendet werden. Geschrieben in Django...

Ghostwriter

Ghostwriter...

FIR

Cos'è FIR? A chi è rivolto? FIR Fast Incident Response è una piattaforma di gestione degli incidenti di cybersecurity progettata con agilità e velocità in mente. Permette la facile creazione, tracciamento e reportistica degli incidenti di cybersecurity. FIR è per chiunque abbia bisogno di traccia...

YAASA

YAASA YAASA Yet Another APK Static Analyzer è un framework per divertirsi analizzando APK. Il progetto utilizza i seguenti strumenti ed è basato sul framework Django: APKTool: Uno strumento per il reverse engineering dei file apk Android AxmlParserPY: AxmlParser in Python PlagueScanner: Framework...

django-vulnerability-CVE-2025-32873

Django सुरक्षा मुद्दा striptags पर आवश्यकताएँ Django 5.2 Django Rate Limit pip install django-ratelimit...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2026-55571

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handlemount sends a "type":"navigate","to":... frame when loginrequired, permissionrequired, or a redirecting onmount hook denies a LiveView mount, but...

CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handlemount sends a "type":"navigate","to":... frame when loginrequired, permissionrequired, or a redirecting onmount hook denies a LiveView mount, but...

EUVD-2026-65600

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handlemount sends a "type":"navigate","to":... frame when loginrequired, permissionrequired, or a redirecting onmount hook denies a LiveView mount, but...

django-security-advisory-3.2.16

django-security-advisory-3.2.16 Rastreamento de avisos de segurança para vulnerabilidades do Django 3.2.16 - CVE-2023-23969 e CVE-2023-24580...

CVE-2022-28346

CVE-2022-28346 È stato trovato un difetto nel pacchetto Django, che porta a un'iniezione SQL. Questa falla consente a un utente malintenzionato di utilizzare un dizionario appositamente creato contenente query SQL dannose per compromettere completamente il database. Indice CVE-2022-28346...

django-cve-2025-64459

Django CVE-2025-64459 Questa applicazione illustra la CVE-2025-64459 che colpisce diverse versioni di Django. Questa vulnerabilità è stata corretta nelle versioni più recenti di Django. Iniezione SQL L'iniezione SQL avviene quando l'input fornito dall'utente viene trattato come parte di una query...

CVE-2020-7471-Django

CVE-2020-7471-PoC Django PoC für die SQL-Injection-Schwachstelle in PostgreSQL mit Django, gefunden in Django 1.11 vor 1.11.28, 2.2 vor 2.2.10 und 3.0 vor 3.0.3 Die Klasse django.contrib.postgres.aggregates.StringAgg zur Verwendung der PostgreSQL-STRINGAGG-Funktion wies eine...

CVE-2025-64458-Demo

CVE-2025-64458 — Windows पर Django रीडायरेक्ट DoS विवरण Django के रीडायरेक्ट रिस्पॉन्स में एक denial-of-service DoS समस्या है जो रीडायरेक्ट रिस्पॉन्स बनाते समय URL नॉर्मलाइज़ेशन के दौरान हमलावर को अत्यधिक CPU कार्य ट्रिगर करने की अनुमति देती है। Windows पर, Python का Unicode NFKC नॉर्मलाइज़ेशन...

CVE-2022-28346

CVE-2022-28346 Iniezione SQL in QuerySet.annotate, aggregate e extra Configurazione: Esegui ./setup.sh per la configurazione iniziale Apri l'immagine docker per avviare il database: docker exec -it containerid /bin/bash Esegui i seguenti comandi: root@kitploit: python manage.py makemigrations...

CVE-2026-55468

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in apifields without sufficient access control, allowing a user with Wagtail admin...

EUVD-2026-63564

django CMS: Page cache ignores plugin-declared Vary headers disclosure & poisoning...

django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)

Summary The CMS page cache key ignores the request headers that plugins declare via getvarycacheon. The header is added to the response Vary header, but the CMS's own cache key does not incorporate the header values, so the first visitor's variant is served to all subsequent visitors regardless o...

EUVD-2026-63565

django CMS: Plugin move endpoint allows cyclic reparenting DoS...

django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

Summary The moveplugin admin endpoint does not prevent a plugin from being reparented under itself or one of its own descendants. Doing so creates a cycle in the plugin tree, after which the recursive descendant/ancestor SQL queries loop without terminating, stalling the request worker. Details...