email-osint-ripper

email-osint-ripper EO-RIPPER.PY is a perfect tool for doing OSINT on an email or a list of emails. Its functionalities are diverse and allow us to obtain a lot of information about our target. Videos https://www.youtube.com/watch?v=Eo9mJLBc2c&t=254s...

whatsapp-census

हेलो! आप WhatsApp का उपयोग कर रहे हैं यह पेपर हेलो! आप WhatsApp का उपयोग कर रहे हैं: सुरक्षा और गोपनीयता के लिए तीन अरब खातों की गणना के विस्तारित संस्करण के लिए GitHub रिपॉजिटरी है। सारांश WhatsApp, 2025 की शुरुआत तक 3.5 अरब सक्रिय खातों के साथ, दुनिया का सबसे बड़ा इंस्टेंट मैसेजिंग प्लेटफॉर्म ह...

s3-account-search

S3 Account Search This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you...

Stalker

ما هو Stalker أداة OSINT بسيطة جدًا وربما مكتوبة بشكل سيئ، وستتيح لك البحث بسرعة عبر عدة مواقع ويب عن اسم مستخدم واحد. إنها تهدف إلى توفير الوقت، وأردت إبقاءها بسيطة، لذلك كل شيء في ملف .py واحد فوضوي. سأعمل قريبًا على تنظيف هذا قليلًا. طريقة الاستخدام أولًا، استنسخ هذا المستودع: git clone...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

blackbird

Blackbird أداة OSINT للبحث السريع عن الحسابات باسم المستخدم عبر 574 موقعًا. طائرة لوكهيد إس آر-71 "بلاكبيرد" هي طائرة استطلاع استراتيجية بعيدة المدى وعالية الارتفاع بسرعة تفوق ماخ 3، طورتها وصنعتها شركة الطيران الأمريكية لوكهيد. إخلاء مسؤولية root@kitploit: This or previous program is for...

CVE-2026-72699

The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration . The register() method in classes/Login.php throws a distinct exception (EMAIL_NOT_AVAILABLE) when a submitted email already belongs to an existing account, while allowing registration to pr...

Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison

Summary userpassword.Compare substituted a placeholder hash derived from the well-known string "hunter2" when the stored hash was empty. Submitting "hunter2" therefore matched accounts with no password hash nonexistent users and SSO-only users and a subsequent login-type check returned an HTTP 40...

CVE-2026-75046

In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...

Devolutions Server <= 2026.1.21 / 2026.2.0 <= 2026.2.5 Multiple Vulnerabilities (DEVO-2026-0017)

The version of Devolutions Server installed on the remote host is prior or equal to 2026.1.21 or 2026.2.0 prior or equal to 2026.2.5. It is, therefore, affected by multiple vulnerabilities, including: - Improper access control in PAM account discovery results in Devolutions Server 2026.2.5,...

EUVD-2026-37200

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results...

CVE-2026-11890

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results...

CVE-2026-11890

The CVE-2026-11890 entry concerns Devolutions Server versions 2026.1.21 and 2026.2.5, where improper access control in PAM account discovery allows an authenticated user to retrieve account discovery scan results. The connected documents confirm affected software and the root cause (in PAM accoun...

CVE-2026-11890

Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to retrieve account discovery scan results...

CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations...

CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations...

EUVD-2026-33937

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations...

CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations...

CVE-2026-9522

Improper access control in the PAM account discovery feature in Devolutions Server 2026.1.19 and earlier allows an authenticated user without administrative privileges to delete network discovery scan configurations...

CVE-2018-25350

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing...