Cartero

Cartero Cartero现在是一个Go CLI，内置无需配置的工作区数据库，取代了旧版依赖MongoDB的运行时。 当前实现提供： 由Cobra和Lip Gloss驱动的精美终端体验 通过cartero serve运行的本地管理Web UI和安全测试页面 默认安全的战役验证和预览命令 位于.cartero/cartero.sqlite的嵌入式SQLite工作区存储 用于模板种子、克隆导入、受众同步、分析导出和交互记录的第一方插件 从CSV、JSON、SARIF和JSONL导入规范化发现 单向旧版Mongo导出迁移到当前工作区 单元测试、CLI测试和一致性测试，带有冒烟测试工作流...

CVE-2021-43829

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.7.7 PatrowlManager unrestrictly handle upload files in the findings import feature. This vulnerability is capable of uploading dangerous type of file to server leading to XSS attacks and...

PT-2021-23961

Name of the Vulnerable Software and Affected Versions: PatrOwl versions prior to 1.7.7 Description: The issue affects PatrOwl, a free and open-source solution for orchestrating Security Operations. In affected versions, PatrowlManager handles upload files in the findings import feature without...