tirreno

tirreno tirreno is open security analytics. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your applications from cyber threats, account takeovers, bots, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a denial of service vulnerability due to Apache HttpComponents Client

Summary Apache HttpComponents Client is used by IBM Integrated Analytics System as an HTTP client library for Java applications. CVE-2026-64607 affects classic I/O-based Apache HttpClient versions 5.0-alpha1 through 5.6.2, where the client fails to properly release underlying connections back to...

plaso

Plaso Plaso Langar Að Safna Öllu - super timeline all the things Plaso Plaso Langar Að Safna Öllu, or super timeline all the things , is a Python-based engine used by several tools for automatic creation of timelines. Plaso default behavior is to create super timelines but it also supports creati...

CVE-2022-24637

CVE-2022-24637 — Open Web Analytics prior to 1.7.4 Defensive notes on a critical unauthenticated information-disclosure issue in Open Web Analytics OWA that can lead to privilege escalation. Encountered while working the Fruityloops box on echoCTF, which ran Open Web Analytics 1.7.3. Summary Fiel...

tgspyder

🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...

Adama

Adama Searches For Threat Hunting and Security Analytics A collection of known log and / or event data searches for threat hunting and detection. They enumerate sets of searches used across many different data pipelines. Implementation details are for ELK. Adama is part of the SpaceCake project...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

usn_analytics

USN Analytics Build git clone https://github.com/4n6ist/usnanalytics.git Linux sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make Windows Install MinGW-W64...

CVE-2022-24638

AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026 THIS VERSION IS FIXED TO PREVENT FALSE NEGATIVES CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.4. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

Open Web Analytics 1.7.3 - Remote Code Execution

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. id: CVE-2017-18556 info: name: Google Analytics by BestWebSoft 1.7.1 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-google-analytics plugin before 1.7.1 for WordPress has...

IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection

IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. id: CVE-2019-4716 info: name: IBM Planning Analytics - Authentication Bypass & Remote...

SonicWall GMS and Analytics - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics:...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

WSO2 - Cross-Site Scripting

WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...

Sentinel-GPT

Sentinel-GPT: Agentic AI for Threat Hunting 🛡️ An automated cybersecurity pipeline that transforms raw Azure logs into actionable intelligence using LLM-based reasoning. 📖 Overview Sentinel-GPT is an AI Agent specialised for threat hunting in cybersecurity. It is integrated with Azure Log Analytic...

WordPress-NotificationX-CVE-2024-1698

Set-up docker-compose up --build Clean up docker-compose down Testing Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where id=1,1,1=36,SLEEP10,null-- -'...

multiscanner

MultiScanner Introduction MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built Python scripts, web APIs, software running on another machine, etc...