RapidWebRecon

Nuclei 到 PDF 报告生成器 一个专业级的自动化工具，旨在弥合技术漏洞扫描与高管报告之间的差距。由 Adi Mahluf Tenroot Cyber Security 开发。 🚀 概述 该项目提供了一个无缝的“一键命令”工作流，用于审计 Web 资产。它利用高性能的 Nuclei 引擎来识别漏洞和错误配置，然后自动将原始结果编译成格式化的、可直接交付客户的 PDF 报告。它专为安全架构师和事件响应团队量身定制，他们需要向利益相关者提供清晰、可操作的数据。 🛠️ 先决条件 为确保工具在不同环境中正确运行，必须在您的工作站上安装以下组件。 1. Nuclei 引擎 v3.x+...

bulwark

一款组织资产与漏洞管理工具，集成 Jira，专为生成应用安全报告而设计。 功能特性 多客户端漏洞管理 安全报告生成 Jira 集成 基于团队的角色授权 API 密钥与管理 电子邮件集成 Markdown 支持 用户激活/停用（管理员） 注意 请注意，该项目正处于早期开发阶段。 演示 Jira 集成 使用 Docker 启动 1. 安装 Docker 2. 创建一个 .env 文件并提供以下属性： root@kitploit: MYSQLDATABASE="bulwark" MYSQLPASSWORD="bulwark" MYSQLROOTPASSWORD="bulwark"...

natlas

Natlas Summary You've got a lot of maps and they are getting pretty unruly. What do you do? You put them in a book and call it an atlas. This is like that, except it's a website and it's a collection of nmaps. Natlas' objective is to make it easy to perform continuous scanning and review collecte...

CVE-2026-69151

creationtimestamp| type| source ---|---|--- 2026-08-03 16:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhvahdl2o 2026-08-03 18:20:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cpivbdhgtqa6k 2026-08-03 19:31:37+00:00| seen|...

PT-2026-42559

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description An Insecure Direct Object Reference IDOR exists where the '/ccm/frontend/conversations/message detail' endpoint returns the full content of any conversation message. This allows an unauthenticat...

CVE-Exploit-Research-Development

Objective To research, replicate, and develop a working expl...

CVE-2025-51479

creationtimestamp| type| source ---|---|--- 2025-07-22 21:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulgdh7nd722...

Data-Driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source Npm Packages

The npm Node Package Manager ecosystem is the most important package manager for JavaScript development with millions of users. Consequently, a plethora of earlier work investigated how vulnerability reporting, patch propagation, and in general detection as well as resolution of security issues i...

Fortinet FortiAnalyzer Input Validation Error Vulnerability (CNVD-2025-12793)

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

bic.at Cross Site Scripting vulnerability OBB-4043498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xlivetchat.hautetfort.com Cross Site Scripting vulnerability OBB-4041757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michiganassessmentconsortium.org Cross Site Scripting vulnerability OBB-4040560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heinonline.org Cross Site Scripting vulnerability OBB-4037903

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sv-virnsberg.de Cross Site Scripting vulnerability OBB-4033907

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

snowflake-connector-python vulnerable to SQL Injection in write_pandas

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandastools module is vulnerable to SQL injection. This vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1...

CVE-2024-48125

creationtimestamp| type| source ---|---|--- 2025-01-15 20:57:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113834371576114098 2025-01-15 21:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsor2cczi2t 2025-01-15 21:38:18+00:00| seen|...

CVE-2024-37758

creationtimestamp| type| source ---|---|--- 2024-12-20 19:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113686693262617989 2024-12-20 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wooi472x 2024-12-20 20:55:57+00:00| seen|...

iranpedia.ir Cross Site Scripting vulnerability OBB-3870563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ilportaledeibambini.net Improper Access Control vulnerability OBB-3858348

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

asaasesores.net Improper Access Control vulnerability OBB-3850234

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...