The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the IAM Proxy component of the Identity & Access Management tool for managing access to information resources allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the Shtab project and task management service, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei模板 CVE-2022-1388 BIG-IP iControl REST 暴露 May 06, 2022 这仅通过访问认证端点来验证API的存在 该漏洞可能允许未经身份验证的攻击者通过网络访问BIG-IP系统的管理端口和/或自IP地址，从而执行任意系统命令、创建或删除文件，或禁用服务。没有数据平面暴露风险；仅为控制平面问题。 此模板是一个简单的检查 发送请求： 路径 BaseURL/mgmt/shared/authn/login 匹配条件： 关键词： "resterrorresponse" "message" 状态码： 401 POC 手动验证 curl -sk...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...

Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

Microfinance Management System V1.0 SQLインジェクション脆弱性（未認証） 1. 説明: Microfinance Management System は、/mims/updatecustomer.php 内のパラメータ customernumber を介してSQLインジェクションを許可します。この問題を悪用すると、攻撃者はアプリケーションを侵害したり、データにアクセスまたは変更したり、基盤となるデータベースの潜在的な脆弱性を悪用する可能性があります。 2. 実証コード: Burpsuiteで影響を受けるページからのリクエストを...

CVE-2023-49989

CVE-2023-49989 Hotel Booking Management v1.0 - 位于 update.php 中 "id" 参数的 SQL 注入漏洞 描述 ：Hotel Booking Management v1.0 被发现存在通过 update.php 中 id 参数的 SQL 注入漏洞。 受影响的产品版本 ：Hotel Booking Management v1.0 CVE 作者 ：Geraldo Alcântara 日期 ：28/11/2023 确认日期 ：19/12/2023 CVE ：CVE-2023-49989 测试环境 ：Windows 复现步骤：...

Log4J-Simulation-Tool

关于该项目 这是一个专为 CVE-2021-44228 精心打造的自动化漏洞扫描器、补丁管理与漏洞利用工具。它结合了 Python、Java 和 Linux Shell 程序，使网络管理员、端点安全开发人员和网络安全分析师能够更轻松地执行渗透测试，并保护自身免受 Log4Shell 漏洞的威胁。 因此，安全分析师既可以执行 Log4J JNDI 攻击，也可以通过内置的补丁管理器来缓解该安全问题。 一旦我收到安全警报，此漏洞分析工具将定期更新。 系统前置要求 从此处下载 Java 8 版本的 JDK，将其解压到 src 目录，并将 Java jdk 文件重命名为 jdk1.8.020 下载...

SCCMSecrets

SCCMSecrets SCCMSecrets.py 是一款 SCCM 策略利用工具。它不仅仅提取 NAA 凭据，还旨在提供一种针对 SCCM 策略利用的综合性方法。该工具可以在不同权限级别下执行，并尝试发现与策略分发相关的潜在错误配置。有关该工具及其用法的更多详细信息，请参阅相关文章： https://www.synacktiv.com/publications/sccmsecretspy-exploiting-sccm-policies-distribution-for-credentials-harvesting-initial 提供两个子命令：policies 和 files。...

graylog2-server

Graylog 欢迎！ Graylog 是一个免费且开源的日志管理平台。 您可以通过我们的网站了解更多项目信息，并在文档站点查阅文档。 问题跟踪 发现 Bug？有改进想法？欢迎随时提交问题。 参与贡献 帮助我们构建日志管理的未来，成为这个每天被成千上万人使用的项目的一员。 请遵循贡献者指南并阅读贡献说明以开始。 想通过开发我们免费开放的产品获得报酬吗？欢迎申请我们的职位！ 保持联系 欢迎在 freenode IRC 的 graylog 频道、libera 的 graylog 频道与我们聊天，或在我们的社区讨论论坛创建话题。 许可证 Graylog 根据 Server Side Publi...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

packman

packman Un proyecto de documentación y seguimiento con el objetivo de hacer que los sistemas de gestión de paquetes sean más seguros. Consulte problemas para obtener una lista muy aproximada de algunos de los problemas relacionados que hemos visto. Tabla de Sistemas de Gestión de Paquetes Lenguaj...

CVE-2024-42919

eScan 管理控制台 漏洞标题 : eScan 管理控制台 - 访问控制不当 作者 : Jeyabalaji 受影响版本 : 14.0.1400.2281 测试于 : Windows 11 CVE : CVE-2024-42919 描述: Escan 管理控制台实现了身份验证机制；但是，acteScanAVReport 端点不需要任何身份验证即可访问。 有效载荷 : acteScanAVReport 端点 复现步骤 : 1. 打开 eScan 管理控制台 2. 使用 'acteScanAVReport' 端点 3. 我们能够访问 eScan AV 报告 缓解措施 : 更新到最新版本。...

CVE-2026-45140

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-45140 CVE-2026-45140 Chamilo LMS 2.0.0 - chamilo I am @abraxasnull. Loopback lab. The client is CVE-2026-45140-Abraxas-Labs.py. The advisory did not name the file. Unauthenticated RCE via leftover CStudio...

testenv

SQL injection test environment A collection of web pages vulnerable to SQL injection flaws and more: conf/ - operating system configuration files used by deployment.sh. dbs/ - standalone databases for some database management systems e.g. Microsoft Access. libs/ - web API libraries to connect to...