Aggregator

Supernova Supernova is an open-source tool that empowers users to securely encrypt and/or obfuscate their raw shellcode.Supernova supports various features beyond those typically found in a common shellcode encryptor tool. Features Supernova offers automatic...

The post Supernova: shellcode encryption tool appeared first on Penetration Testing Tools.

複数のマイクロソフト製品には、脆弱性があります。同社は、今回修正された一部の脆弱性を悪用する攻撃をすでに確認しているとのことです。この問題は、Microsoft Updateなどを用いて、更新プログラムを適用することで解決します。詳細は、開発者が提供する情報を参照してください。

phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)

Hugging Face Transformers MobileViTV2 4.41.1 - Remote Code Execution (RCE)

Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)

NagVis 1.9.33 - Arbitrary File Read

Zabbix 7.0.0 - SQL Injection

ABB Cylon Aspect 3.08.02 - Cross-Site Request Forgery (CSRF)

ABB Cylon Aspect 4.00.00 (factorySetSerialNum.php) - Remote Code Execution

ABB Cylon Aspect 4.00.00 (factorySaved.php) - Unauthenticated XSS

ABB Cylon Aspect 3.08.03 (webServerDeviceLabelUpdate.php) - File Write DoS

phpMyFAQ 3.2.10 - Unintended File Download Triggered by Embedded Frames

ProConf 6.0 - Insecure Direct Object Reference (IDOR)

WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page

Garage Management System 1.0 (categoriesName) - Stored XSS

Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 - Authentication bypass

FLIR AX8 1.46.16 - Remote Command Injection

Ethercreative Logs 3.0.3 - Path Traversal

Ruckus IoT Controller 1.7.1.0 - Undocumented Backdoor Account

Car Rental Project 1.0 - Remote Code Execution