Lucene search
+L

338 matches found

Kitploit
Kitploit
added 2026/09/22 12:47 p.m.8 views

dataviz

OpenDNS Data Visualization Framework Official documentation at www.opengraphiti.com...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 8:39 a.m.18 views

mxmap

MXmap — mapas de infraestructura de correo electrónico municipal !IMPORTANT MXmap tiene un sucesor. Este proyecto se convirtió en un esfuerzo de investigación en equipo que cubre todos los municipios de Alemania, Austria y Suiza: secassure2026.mxmap-project.org código fuente. El mapa suizo en...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/22 8:00 a.m.24 views

Mimir

Mimir OSINT威胁情报接口 - 以古北欧神话中的知识之神命名。 Mimir作为一个命令行界面,连接至HoneyDB,简而言之,它是一个OSINT聚合威胁情报池。启动程序后,您将进入一个菜单,其选项如下: root@kitploit: 1. 获取威胁信息流 5. 在浏览器中可视化排名靠前的恶意主机 2. 获取恶意主机列表 6. 在浏览器中可视化排名靠前的目标服务 3. 执行WHOIS查询 7. 在浏览器中可视化单主机的查询结果 4. 调用Nmap扫描 8. 退出...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 10:57 a.m.15 views

detectree

Detectree Detectree es una herramienta de visualización de datos para equipos azules. Proporciona una representación gráfica de los datos de detección, lo que permite a un analista generar opiniones casi instantáneas sobre la naturaleza de la actividad subyacente y comprender relaciones complejas...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 10:59 p.m.14 views

dashbuilder

Dashbuilder Dashbuilder 是一个通用的仪表盘和报告Web应用,它允许: 可视化的仪表盘配置和个性化 使用多种图表库支持不同类型的可视化 功能完整的图表可视化定义编辑器 定义交互式报表表格 通过不同协议从外部系统提取数据 同时支持分析型和实时仪表盘 采用 Apache License 2.0 许可 更多信息,请访问项目网站 dashbuilder.org 即将推出的功能 基于 D3 JS、Lienzo GWT 和 Chart JS 的新渲染器 层次化(嵌套分组)展示器类型:树图和饼图 支持多个动态数据系列 丰富的移动端支持 告警和SLA配置 RESTful API 架...

5.7AI score
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 12:31 a.m.15 views

EUVD-2026-46987

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS7.2AI score0.0027EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 12:31 a.m.15 views

EUVD-2026-46768

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

3.7CVSS7AI score0.00275EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 10:17 p.m.11 views

CVE-2026-60354

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

3.7CVSS0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.18 views

PT-2026-62448

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper version 12.2.1.4.0 Oracle JDeveloper version 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise th...

3.7CVSS7.2AI score0.00275EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.17 views

PT-2026-62667

Name of the Vulnerable Software and Affected Versions Oracle JDeveloper versions 12.2.1.4.0 Oracle JDeveloper versions 14.1.2.0.0 Description A flaw in the Data Visualization Tools component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise...

7.5CVSS7.1AI score0.0027EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/15 8:17 p.m.12 views

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...

8.3CVSS0.00459EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/15 8:17 p.m.18 views

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...

8.7CVSS0.00377EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/15 7:41 p.m.53 views

CVE-2026-46684

CVE-2026-46684 (DataEase) : Open-source data visualization tool DataEase prior to 2.10.23 is affected by an unauthorized command execution vulnerability. The issue stems from enterprise token handling where TokenFilter#doFilter() may pass X-DE-TOKEN values to TokenUtils.validate(), which only che...

9.5CVSS6.1AI score0.00319EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/15 7:41 p.m.14 views

EUVD-2026-44785

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase enterprise token handling can let TokenFilterdoFilter pass X-DE-TOKEN values to TokenUtils.validate, which checks only token presence and length before userBOByTokentoken uses JWT.decode without signature...

9.5CVSS6.1AI score0.00319EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/07/15 7:40 p.m.18 views

CVE-2026-45320

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

8.7CVSS6.1AI score0.00467EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/07/07 9:17 p.m.26 views

CVE-2026-55647

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, dashboard text components render stored component content with Vue v-html without server-side HTML sanitization, allowing an authenticated user who can edit dashboard component data to inject HTML with executable...

5.1CVSS0.00467EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/07 8:39 p.m.24 views

EUVD-2026-42099

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid...

8.7CVSS6AI score0.00496EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/07 8:35 p.m.15 views

EUVD-2026-42096

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQL in Quota2SQLObj.getYWheres without applying the SQL literal validation and escaping used by other filter paths,...

8.7CVSS6AI score0.00412EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/07 8:27 p.m.15 views

EUVD-2026-42090

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of the H2 zip protocol and file dropper fix allows an authenticated attacker to upload a zip archive disguised with a .ttf extension through FontManage.saveFile and then exploit it through the zip protocol...

8.7CVSS6.3AI score0.00798EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/07 12:00 a.m.43 views

PT-2026-56251

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description An authenticated attacker can bypass previous fixes for the H2 zip protocol and file dropper. By uploading a zip archive disguised with a .ttf extension via the FontManage.saveFile function, the...

8.7CVSS6.2AI score0.00798EPSS
SaveExploits0References8
Rows per page
Query Builder