61 matches found
cervantes
Cervantes 是一个开源协作平台，专为渗透测试人员和红队设计。它作为一个全面的管理工具，将项目、客户、漏洞和报告的组织集中在一个统一的位置。 通过高效的数据管理和提供统一的工作空间，Cervantes 旨在显著减少协调和执行渗透测试活动所需的时间和精力。 支持 Cervantes 是 OWASP 基金会 的一个项目...
AtomShields-cli
AtomShields Cli AtomShields Cli 是一个命令行界面，用于使用软件 AtomShields .. raw:: html 安装 .. code-block:: shell pip install atomshieldscli 基本用法 .. code-block:: shell ascli --target --name 允许的 action 值有： install : 根据设定的上下文安装检查器或报告。 uninstall : 根据设定的上下文卸载检查器或报告。 run : 运行扫描。 show : 根据设定的上下文显示检查器列表或报告列表。 help :...
EUVD-2026-61018
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...
CVE-2026-45124
MyBB (open-source forum software) prior to 1.8.40 contains an authorization flaw in the Mod CP Report Center . The modcp.php?action=do_reports "Mark Selected as Read" handler is reachable with only the canmodcp permission, even when the moderator lacks canmanagereportedcontent or canmanagereporte...
CVE-2026-45124
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...
PT-2026-77178
MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=do reports Mark Selected as Read handler is reachable with...
CVE-2026-11994
Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report...
EUVD-2026-38290
Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report...
CVE-2026-11994 Akaunting 3.1.21 - Authenticated stored XSS in report description rendering
Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report...
CVE-2026-11994 Akaunting 3.1.21 - Authenticated stored XSS in report description rendering
Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report...
CVE-2022-31956
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidentreports/managereport.php?id=...
EUVD-2024-48166
Malicious code in bioql PyPI...
EUVD-2024-48167
Malicious code in bioql PyPI...
EUVD-2024-17344
Malicious code in bioql PyPI...
EUVD-2024-48168
Malicious code in bioql PyPI...
EUVD-2025-7769
Malicious code in bioql PyPI...
CVE-2024-1604
Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any reports available within the application, even without proper permissions. The attacker must know the unique identifi...
CVE-2024-7197
A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/managecomplaint.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
CVE-2024-7199
A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file /admin/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2025-27401 In Tuleap, deleting a report can delete criteria filters in other reports
Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious user could create and delete reports multiple times to cycle through all the...