AperiSolve

Aperi'Solve Попробуйте сейчас: https://www.aperisolve.com Поддержите Aperi'Solve: Aperi'Solve — это открытая веб-платформа для стегоанализа, которая выполняет авто...

natlas

Natlas 요약 지도가 많아서 꽤 관리하기 어려워지고 있습니다. 어떻게 하시겠습니까? 그것들을 책에 넣고 아틀라스라고 부르면 됩니다. 이것은 비슷하지만, 웹사이트이며 nmap 수집물입니다. Natlas의 목표는 지속적인 스캔을 쉽게 수행하고 수집된 데이터를 검토할 수 있도록 하는 것입니다. Natlas의 목표는 반드시 수많은 취약점을 식별하는 것이 아니라, 오히려 노출을 식별하는 것입니다. 아마도 누군가 비밀번호 인증이 활성화된 ssh를 실행하고 있지 않은지 확인하고 싶을 수 있습니다. 또는 노출된 nfs, smb 또는...

VolWeb

소개 VolWeb은 Volatility 3 프레임워크의 강력한 기능을 활용하는 디지털 포렌식 메모리 분석 플랫폼입니다. 조사 및 사고 대응을 지원하기 위해 설계되었습니다. 🧬 목표 VolWeb의 목표는 중앙 집중식 시각적 웹 애플리케이션을 제공하여 사고 대응자와 디지털 포렌식 조사관의 메모리 수집 및 포렌식 분석 효율성을 향상시키는 것입니다. 조사관이 Linux 또는 Windows 시스템Mac은 곧 지원 예정에서 메모리 이미지를 획득하면 증거를 VolWeb에 업로드할 수 있으며, VolWeb은 Volatility 3 프레임워크...

grepmarx

Grepmarx - 애플리케이션 보안 플랫폼 Grepmarx는 크고 알 수 없는 코드베이스에서 취약점을 신속하게 이해, 분석 및 식별할 수 있는 단일 플랫폼을 제공하는 웹 애플리케이션입니다. 기능 SAST 정적 분석 보안 테스트 기능: 여러 언어 지원: C/C++, C, Go, HTML, Java, Kotlin, JavaScript, TypeScript, OCaml, PHP, Python, Ruby, Bash, Rust, Scala, Solidity, Terraform, Swift 여러 프레임워크 지원: Spring,...

wvctf

WebVulnCTF WVCTF или WebVulnCTF — это геймифицированная веб-платформа, которая в увлекательной форме способствует обучению пентестингу и безопасности разработки веб-приложений. Через систему вознаграждений пользователь должен найти набор флагов в уязвимом приложении, соответствующих частым...

iris-web

Система расследования инцидентов Текущая версия v2.4.20 Онлайн-демонстрация IRIS Iris — это веб-коллаборативная платформа, предназначенная для помощи специалистам по реагированию на инциденты в обмене техническими деталями во время расследований. Содержание Начало работы Запуск IrisWeb Конфигурац...

CVE-2025-58780

CVE-2025-58780 Раскрытие уязвимости: SQL-инъекция в ScienceLogic Обзор В данном документе описывается ответственно раскрытая уязвимость SQL-инъекции, обнаруженная в веб-платформе ScienceLogic. Уязвимость была сообщена разработчикам проекта в соответствии с практикой ответственного раскрытия для...

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

CVE-2026-45743

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

CVE-2026-42540 IRIS has a Mass Assignment issue

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

EUVD-2026-34327

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch...

EUVD-2026-34325

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Version 2.4.28 fixes the issue...

PT-2026-46385

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application can therefore be misused to host phishing pages, amongst other things. This also creates another...

Malicious Package

Overview @pulse-web-platform-core/scripts-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

PT-2026-47095

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting XSS such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscripten run script...

MAL-2026-4421 Malicious code in @pulse-web-platform-core/scripts-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c69fc52eb76aa05711ea0c128624eb1fc8c70655a58f2f3e646da1dcd20f254 On npm install, the package's preinstall.js performs an HTTP GET to http://$pkg.$scope.oob.moika.tech/poc.js and passes the response body directly to...

CVE-2026-44738

Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray from within a page body, dumping the entire merged site configuration — including all plugin secrets SMTP passwords, AWS keys, OAuth client secrets...

Directory Traversal

Overview potato-annotation is an A flexible, stand-alone, web-based platform for text annotation tasks Affected versions of this package are vulnerable to Directory Traversal via the validatepathsecurity function. An attacker can gain unauthorized access to files outside the intended project...

ROS-20260429-73-0044

A vulnerability in the ASP.NET Core software platform is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...