The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

SessionHop

SessionHop SessionHop is a C tool that utilizes the IHxHelpPaneServer COM object, configured to run as an Interactive User, to hijack specified user sessions. By creating a session moniker and utilizing the COM object's Execute interface, operators can run arbitrary files within another user's...

SPiCa

SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...

LID

root@kitploit: ██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux Integrity Drift — "Linux is Dying" — Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LI...

fim-ebpf

FIM-eBPF: Monitoreo de Integridad de Archivos con eBPF Un programa eBPF ligero para monitorear eventos de creación y modificación de archivos en Linux. Esta herramienta aprovecha eBPF Extended Berkeley Packet Filter para rastrear operaciones de archivos directamente desde el kernel, proporcionand...

slsa

SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...

CVE-2020-3766_APSB20-12

CVE-2020-3766APSB20-12 https://vulners.com/cve/CVE-2020-3766 https://helpx.adobe.com/security/products/integrityservice/apsb20-12.html...

CVE-2019-13496

CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity check Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...

feroxbuster

!ADVERTENCIA Aviso de seguridad – Suplantación de dominio El dominio feroxbuster.com NO está afiliado con este proyecto, sus mantenedores ni ninguna versión oficial de feroxbuster. Las descargas oficiales de feroxbuster se distribuyen SOLAMENTE a través de: https://github.com/epi052/feroxbuster...

CVE-2025-0108-SCAN

CVE-2025-0108 PAN-OS: Bypass de autenticación en la interfaz web de gestión Un bypass de autenticación en el software PAN-OS de Palo Alto Networks permite que un atacante no autenticado con acceso de red a la interfaz web de gestión omita la autenticación que de otro modo exige la interfaz web de...

CVE-2023-33668

CVE-2023-33668 Summary DigiExam is a surveillance exam and proctoring software. The software is installed in schools' or students' computers. When the student joins an exam, DigiExam will: ensure it's not running in a Virtual Machine, terminate all applications, fullscreen itself, and prevent the...

in-toto

in-toto in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit. in-toto requires a project owner to create...

tarian

Tarian Protege tus aplicaciones ejecutándose en Kubernetes de ataques maliciosos pre-registrando tus procesos confiables y firmas de archivos confiables. Tarian detectará procesos desconocidos y cambios en los archivos registrados, luego enviará alertas y tomará una acción automatizada. ¡Protege ...

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 Se optimizó el POC, ya no es una verificación de una sola vez. POC optimizado, ya no es una validación de una sola vez. Advertencia: este programa destruirá la integridad de la información de los registros, ¡haga una copia de seguridad de los datos del servidor!...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection

Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-42071 info: name: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection author: gy741 severity: critical description: Visual...

wanderer

Wanderer Wanderer es un programa de código abierto que recopila información sobre los procesos en ejecución. Esta información incluye el nivel de integridad, la presencia de AMSI como módulo cargado, si se ejecuta en 64 o 32 bits, así como el nivel de privilegios del proceso actual. Esta...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...