338 matches found
dataviz
OpenDNS Data Visualization Framework Official documentation at www.opengraphiti.com...
mxmap
MXmap — mapas de infraestructura de correo electrónico municipal !IMPORTANT MXmap tiene un sucesor. Este proyecto se convirtió en un esfuerzo de investigación en equipo que cubre todos los municipios de Alemania, Austria y Suiza: secassure2026.mxmap-project.org código fuente. El mapa suizo en...
Mimir
Mimir OSINT威胁情报接口 - 以古北欧神话中的知识之神命名。 Mimir作为一个命令行界面,连接至HoneyDB,简而言之,它是一个OSINT聚合威胁情报池。启动程序后,您将进入一个菜单,其选项如下: root@kitploit: 1. 获取威胁信息流 5. 在浏览器中可视化排名靠前的恶意主机 2. 获取恶意主机列表 6. 在浏览器中可视化排名靠前的目标服务 3. 执行WHOIS查询 7. 在浏览器中可视化单主机的查询结果 4. 调用Nmap扫描 8. 退出...
detectree
Detectree Detectree es una herramienta de visualización de datos para equipos azules. Proporciona una representación gráfica de los datos de detección, lo que permite a un analista generar opiniones casi instantáneas sobre la naturaleza de la actividad subyacente y comprender relaciones complejas...
dashbuilder
Dashbuilder Dashbuilder 是一个通用的仪表盘和报告Web应用,它允许: 可视化的仪表盘配置和个性化 使用多种图表库支持不同类型的可视化 功能完整的图表可视化定义编辑器 定义交互式报表表格 通过不同协议从外部系统提取数据 同时支持分析型和实时仪表盘 采用 Apache License 2.0 许可 更多信息,请访问项目网站 dashbuilder.org 即将推出的功能 基于 D3 JS、Lienzo GWT 和 Chart JS 的新渲染器 层次化(嵌套分组)展示器类型:树图和饼图 支持多个动态数据系列 丰富的移动端支持 告警和SLA配置 RESTful API 架...
EUVD-2026-46987
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
EUVD-2026-46768
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2026-60354
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
PT-2026-62448
Name of the Vulnerable Software and Affected Versions Oracle JDeveloper version 12.2.1.4.0 Oracle JDeveloper version 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise th...
PT-2026-62667
Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 12.2.1.4.0 Oracle JDeveloper versions 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise...
CVE-2026-45533
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...
CVE-2026-45535
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...
CVE-2026-46684
CVE-2026-46684 (DataEase) : Open-source data visualization tool DataEase prior to 2.10.23 is affected by an unauthorized command execution vulnerability. The issue stems from enterprise token handling where TokenFilter#doFilter() may pass X-DE-TOKEN values to TokenUtils.validate(), which only che...
EUVD-2026-44785
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase enterprise token handling can let TokenFilterdoFilter pass X-DE-TOKEN values to TokenUtils.validate, which checks only token presence and length before userBOByTokentoken uses JWT.decode without signature...
CVE-2026-45320
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...
CVE-2026-55647
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable...
EUVD-2026-42099
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid...
EUVD-2026-42096
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQL in Quota2SQLObj.getYWheres without applying the SQL literal validation and escaping used by other filter paths,...
EUVD-2026-42090
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of the H2 zip protocol and file dropper fix allows an authenticated attacker to upload a zip archive disguised with a .ttf extension through FontManage.saveFile and then exploit it through the zip protocol...
PT-2026-56251
Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description An authenticated attacker can bypass previous fixes for the H2 zip protocol and file dropper. By uploading a zip archive disguised with a .ttf extension via the FontManage.saveFile function, the...