408 matches found
ThreatHunting
威胁狩猎项目 一个关于在IT环境中狩猎对手的信息库。 请务必访问 ThreatHunting.net 获取关于此仓库的更多信息。 许可证 简明扼要地说： 此仓库专为社区而设。你可以将其用于个人或商业用途，但需以某种可见方式注明出处。我们建议使用"数据由威胁狩猎项目提供，https://github.com/ThreatHuntingProject/ThreatHunting" 或大致相似的表述。不过请务必包含URL，以帮助更多人找到我们。...
HackingAllTheThings
HackingAllTheThings 摘要 此仓库用于整理我在争取某些 IT 安全认证时使用的工具和笔记结构。部分工具由我编写，其余则来自不同来源的资源。...
dradis-ce
Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...
Bramble
🌱 Bramble, un nuevo conjunto de herramientas de hacking de código abierto. 📜 Resumen El software de Bramble ha sido diseñado para el proyecto Bramble. Incorpora muchas características de pentesting y seguridad informática. Es fácil de usar y completamente editable. Permite a los principiantes...
WMD
WMD 大规模杀伤性武器 这是一个Python工具，集合了多种IT安全软件。这些软件被封装在“模块”中。模块由纯Python代码和/或外部第三方程序组成。 主要功能 1. 要使用一个模块，运行命令“use modulecall”，例如“use apsniff”，来激活该模块。 2. 模块的选项可以通过“set parameter value”更改。 3. 在模块内部，你始终可以使用命令“so”查看选项。 4. 你的环境设置在 core/config.ini 中。请在使用前进行调整。 截图： Web菜单 在控制台中运行命令“www”，启动一个Flask服务器，在浏览器中显示模块。通过...
hackazon
Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...
CVE-2026-70834
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61291
creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
EUVD-2018-5740
Malware in sbrugna...
EUVD-2021-16230
Malware in sbrugna...
EUVD-2021-26923
Malware in sbrugna...
EUVD-2023-27677
Malicious code in bioql PyPI...
EUVD-2022-1795
Malicious code in bioql PyPI...
CVE-2024-51094
An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...
North Korean Hackers Stole $88M by Posing as US Tech Workers
Flashpoint uncovers how North Korean hackers used fake identities to secure remote IT jobs in the US, siphoning…...
The IT help desk kindly requests you read this newsletter
Welcome to this week's edition of the Threat Source newsletter. Authority bias is one of the many things that shape how we think. Taking the advice of someone with recognized authority is often far easier and usually leads to a better outcome than spending time and effort in researching the...
Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Envoy denial of service vulnerabilitiy( CVE-2024-45810).
Summary Potential Envoy denial of service vulnerabilitiy CVE-2024-45810 has been identified that affects IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-45810 DESCRIPTION: Envoy is vulnerable to ...
Navigating the Future: Key IT Vulnerability Management Trends
As the cybersecurity landscape continues to evolve, proactive vulnerability management has become a critical priority for managed service providers MSPs and IT teams. Recent trends indicate that organizations increasingly prioritize more frequent IT security vulnerability assessments to identify...
CVE-2025-22313
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...