4586 matches found
Exploit for Command Injection in Ivanti Connect_Secure
🚨 CVE-2024-21887 Exploit Tool 🛠️ A robust tool for detecting...
Application Security Posture Management
Accelerating the Remediation of Vulnerabilities From Code To Cloud Written by Eric Sheridan, Chief Innovation Officer, Tromzo In this guest blog post by Eric Sheridan, Chief Innovation Officer at valued Rapid7 partner Tromzo, you’ll learn how Rapid7 customers can utilize ASPM solutions to...
CloudRecon - Finding assets from certificates
CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 Install You must have CGO enabled, and may have to install gcc to run CloudRecon sudo apt install gcc go install github.com/g0ldencybersec/CloudRecon@latest Description CloudRecon CloudRecon is a suite of tools f...
PT-2024-11968 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability has been reported, but details are not provided due to compliance with CNA rules. It is advised not to wait for vulnerability scanning results. Recommendations: At the...
Logsensor - A Powerful Sensor Tool To Discover Login Panels, And POST Form SQLi Scanning
A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning Features login panel Scanning for multiple hosts Proxy compatibility http, https Login panel scanning are done in multiprocessing so the script is super fast at scanning many urls quick tutorial & screenshots are shown a...
Facial Scanning by Burger King in Brazil
In 2000, I wrote: "If McDonalds offered three free Big Macs for a DNA sample, there would be lines around the block." Burger King in Brazil is almost there, offering discounts in exchange for a facial scan. From a marketing video: "At the end of the year, its Friday every day, and the hangover...
WebCopilot - An Automation Tool That Enumerates Subdomains Then Filters Out Xss, Sqli, Open Redirect, Lfi, Ssrf And Rce Parameters And Then Scans For Vulnerabilities
WebCopilot is an automation tool designed to enumerate subdomains of the target and detect bugs using different open-source tools. The script first enumerate all the subdomains of the given target domain using assetfinder, sublister, subfinder, amass, findomain, hackertarget, riddler and crt then...
CVE-2024-0206
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symboli...
Weak Password Vulnerability in Cloud Mirror Network Asset Vulnerability Scanning System of DeepTrust Technology Co.
CloudMirror Network Asset Vulnerability Scanning System is a new generation of vulnerability risk management products independently developed by DeepSense, combining years of practical experience in vulnerability mining and security services, to help users check the vulnerability risks of assets ...
CVE-2024-21663
CVE-2024-21663 affects the Discord-Recon bot. The affected component is the bot’s ability to execute shell commands via the server without requiring admin privileges, constituting a remote code execution (RCE) vulnerability. The issue is documented as fixed in version 0.0.8; versions prior to 0.0...
CVE-2023-52215
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and...
CVE-2024-20808
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
CVE-2024-20808
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
CVE-2024-20809
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
CVE-2024-20809
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
Improper access control
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
Improper access control
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
