PwnDoc 路径遍历漏洞

PwnDoc is a penetration test report generator from the PwnDoc open source. A path traversal vulnerability exists in PwnDoc versions prior to 1.2.0, which stems from the backup recovery feature allowing the import of raw data containing path traversals, which could lead to remote code execution...

PT-2024-9874 · Pwndoc · Pwndoc

Name of the Vulnerable Software and Affected Versions: PwnDoc versions up to and including 0.5.3 Description: The issue is related to insufficient input validation in the audits interface of the PwnDoc tool, which can be exploited by an authenticated user to crash the backend by raising an...

PwnDoc 授权问题漏洞

PwnDoc is a software application. Penetration test report generator. A security vulnerability exists in PwnDoc version 0.5.3, which stems from a vulnerability that could allow a remote attacker to identify valid user account names by exploiting the response time of authentication attempts...