197 matches found
confused
Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...
sqlancer
SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...
The journey of a paper unicorn: adventures inside a modern warehouse
Introduction Imagine you've ordered a small paper unicorn from an online marketplace. You clicked "Buy", received a cheerful notification, and expect a courier to bring the box tomorrow. If the unicorn is delayed by a day, it will be annoying but not catastrophic: an apology, a discount promo cod...
0day
0day !GitHub forkshttps://img.shields.io/github/forks/he...
Bridging the Cybersecurity Gap between Web2 and Web3 - an Incident-Based Analysis of Organizational and Application-Level Security Failures
The rapid adoption of Web3 infrastructures has led to a growing number of security incidents affecting cryptocurrency exchanges, custody services and blockchain-based platforms. While existing research predominantly focuses on vulnerabilities in smart contracts and blockchain protocols, a...
WhatWeb Scanner 0.6.4
WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...
Exploit for OS Command Injection in Gnu Bash
AppAssault Lab — Attacking Common Applications ╔═════...
CVE-2023-40970
Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loanrules.php...
CVE-2023-40969
Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...
Advantech iView Management Tool Code Execution
The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of measures taken to protect the SQL query structure during the processing of the searchterm parameter. Exploiting this vulnerability allows a maliciou...
EUVD-2017-4272
Malware in sbrugna...
EUVD-2017-4270
Malware in sbrugna...
EUVD-2017-1703
Malware in sbrugna...
EUVD-2023-45509
Malicious code in bioql PyPI...
EUVD-2022-42440
Malicious code in bioql PyPI...
EUVD-2023-45508
Malicious code in bioql PyPI...
EUVD-2023-50258
Malicious code in bioql PyPI...
airbug
This repository is an offensive tool for collecting and utilizing web application vulnerabilities, specifically targeting Content Management Systems CMS. It is a Python-based tool that allows users to load and execute Proof of Concept PoC code for various vulnerabilities. The tool is designed to ...
