paragon

非推奨のお知らせ このプロジェクトは非推奨となりました。新しい Realm プロジェクト を参照してください。このリポジトリを構築した際の多くのアイデアを基にしています。 Paragon Paragon はレッドチームエンゲージメントプラットフォームです。シンプルな UI の背後で攻撃ツールを統合し、バックエンド作業の多くを抽象化することで、オペレーターはインプラントの作成に集中でき、データベースや CSS に悩む時間を減らすことができます。このリポジトリには、エンゲージメント中に使用できる Paragon に統合された攻撃ツールもいくつか含まれています。...

EUVD-2026-14512

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

EUVD-2025-17722

Malicious code in bioql PyPI...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

CVE-2025-47977 is a cross-site scripting (XSS) flaw in Nuance Digital Engagement Platform caused by improper neutralization of input during web page generation. The vulnerability allows an unauthenticated or unauthorized user to craft input that the system renders, enabling spoofing over a networ...

Nuance Digital Engagement Platform Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

PT-2025-24883 · Nuance · Nuance Digital Engagement Platform

Name of the Vulnerable Software and Affected Versions: Nuance Digital Engagement Platform affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows an authorized attacker to...

iClicker Website Hacked with Fake CAPTCHA in ClickFix Attack

Popular student engagement platform iClicker's website was compromised with a ClickFix attack. A fake "I'm not a robot"…...

Paragon - Red Team Engagement Platform With The Goal Of Unifying Offensive Tools Behind A Simple UI

Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css. The repository also provides some offensive tools already...