dradis-ce

Dradis 프레임워크에 오신 것을 환영합니다 - 자동화된 침투 테스트 보고 도구 Dradis는 오픈소스 협업 프레임워크이자 침투 테스트 보고서 생성기로, InfoSec 팀이 보고 워크플로를 간소화하는 데 도움을 줍니다. Burp Suite, Nessus, Nmap과 같은 도구에서 데이터를 가져오는 것을 지원하여, Dradis는 사이버 보안 테스트 워크플로의 지루한 부분을 자동화하여 분석 및 권장 사항에 집중할 수 있게 해줍니다. 더 적은 수작업으로 일관되고 전문적인 침투 테스트 보고서를 더 빠르게 생성하세요. Dradis...

CVE-2026-13083: Improper Neutralization of Input During Web Page Generation

A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker with cluster administrator privileges can inject a stored cross-site scripting XSS payload into cluster objects such as ClusterVersion...

CVE-2026-13083

CVE-2026-13083 concerns the Pen Drive report generator, where cluster-sourced data is rendered into HTML reports without proper escaping or sanitization, enabling stored XSS. An attacker with cluster administrator privileges can inject XSS payloads into cluster objects (e.g., ClusterVersion spec....

CVE-2026-13083

A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker with cluster administrator privileges can inject a stored cross-site scripting XSS payload into cluster objects such as ClusterVersion...

PT-2026-52630

Name of the Vulnerable Software and Affected Versions Pen Drive report generator affected versions not specified Description An issue exists where cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. This allows an attacker with cluster administrator...

CORScanner

CORS Exploiter Automated CORS misconfiguration scanner with...

web-pentest-tool

🛡️ AutoPenTest — Automated Penetration Testing Tool ⚠️ DI...

cyberops-security-suite

CyberOps Security Suite A comprehensive cybersecurity operati...

CVE-2026-33166: Improper Limitation of a Pathname to a Restricted Directory

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. The Allure report generator prior to version 2.38.0 is vulnerable to an arbitrary file read via path traversal when processing test results. An attacker can craft a malicious result file -result.json,...

CVE-2026-33140: Improper Neutralization of Input During Web Page Generation

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing...

PySpector 跨站脚本漏洞

PySpector is a high-performance Python static security analysis framework developed by Tommaso Bona. Versions of PySpector 0.1.6 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from a storage-based cross-site scripting mechanism in the HTML report generator,...

Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution

Summary PySpector versions = 0.1.6 are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing JavaScript payloads i.e. inside a string passed to eval , the flagged code snippet is interpolated into the HTML report...

CVE-2019-18932

log.c in Squid Analysis Report Generator sarg through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and...

EUVD-2008-7207

Malware in sbrugna...

EUVD-2017-1731

Malware in sbrugna...

EUVD-2019-8605

Malware in sbrugna...

EUVD-2008-7206

Malware in sbrugna...

EUVD-2008-1177

Malware in sbrugna...

EUVD-2020-30230

Malware in sbrugna...

CVE-2024-0720

A vulnerability, which was classified as problematic, was found in FactoMineR FactoInvestigate up to 1.9. Affected is an unknown function of the component HTML Report Generator. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...