chiasmodon

Chiasmodon Chiasmodon एक OSINT उपकरण है जो उपयोगकर्ताओं को विभिन्न स्रोतों से जानकारी एकत्र करने और डोमेन, Google Play एप्लिकेशन, ईमेल पते, आईपी पते, संगठनों, URL, और अधिक के आधार पर लक्षित खोज करने की अनुमति देता है। यह व्यापक स्कैनिंग क्षमताएं, अनुकूलन योग्य आउटपुट प्रारूप, और बेहतर डेटा विश्ले...

wtfis

wtfis أداة بحث سلبية عن أسماء المضيفين والنطاقات وعناوين IP مخصصة للبشر ما هو؟ wtfis هي أداة سطر أوامر تجمع معلومات حول نطاق أو FQDN أو عنوان IP باستخدام خدمات OSINT المختلفة. على عكس الأدوات الأخرى من نوعها، فهي مبنية خصيصًا للاستهلاك البشري، حيث تقدم نتائج جميلة قد تختلف النتائج حسب رأيك وسهلة...

pyhunter

pyhunter Tool to search possible emails indexed throught API's Hunter.io https://hunter.io Instalation You can download the latest version of pyhunter by cloning the GitHub repository: git clone https://github.com/n4xh4ck5/pyhunter.git Install the dependencies via pip: pip install -r...

pentesting-multitool

Pentesting-Multitool Introduction Pentesting-Multitool project arises from the need to gather some pentesting tools into one tool. It will be developed using Python3 adding some external libraries as DNSPython, pythonwhois or scapy. The main functions of the script is to collect information about...

rdap

OpenRDAP هو تطبيق عميل RDAP لسطر الأوامر مكتوب بلغة Go. https://www.openrdap.org - الصفحة الرئيسية https://www.openrdap.org/demo - عرض تجريبي مباشر الميزات عميل RDAP لسطر الأوامر صيغ الإخراج: نص، JSON، بأسلوب WHOIS أنواع الاستعلامات المدعومة: ip domain autnum nameserver entity help url...

Reverse_ip_Multithreading1

ReverseipMultithreading1 التبرع : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

spyder-osint

Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...

Rocky Linux 8 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel (crlsa-2024_4247)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244247 advisory. libuv: Improper Domain Lookup that potentially leads to SSRF attacks CVE-2024-24806 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel (crlsa-2024_4756)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244756 advisory. libuv: Improper Domain Lookup that potentially leads to SSRF attacks CVE-2024-24806 Tenable has extracted the preceding description block directly from the CIQ...

EulerOS 2.0 SP15 : proftpd (EulerOS-SA-2026-2941)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltabfetchclientscb in contrib/modwrap2sql.c allows a remote attacker ...

EulerOS 2.0 SP15 : proftpd (EulerOS-SA-2026-2900)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltabfetchclientscb in contrib/modwrap2sql.c allows a remote attacker ...

Malicious code in lakk-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a1a1a5f0fd81e6ba6198e7f4cbdeab1c16b8ceed3dbb7becc6b4b6f611ad52 [email protected] runs node index.js from an npm install lifecycle hook, which loads ./lib/core and constructs a subdomain from the installer's O...

Malicious code in dolyame-ui-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1110e4e32da50573666c0e5f281db639994fad22ed178e2039b9689cc350c284 The package advertises itself as a zero-dependency React calendar component library, but on require of index.js it loads shim.js, which selects a...

Malicious code in dolyame-ui-react-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a3c87278303f582f0f5f046a5edcaf081cd71ed9c00906d36d3bbba5911a33 On require, index.js loads helpers.js which runs setup at module load. The setup routine reconstructs mirror hostnames at runtime by joining split...

Malicious code in @sapappgyver/appgyver-descriptors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9396712a6bf4b08219d9ed2066ebf8c25a7558b988b6d9bf1c9ae57349a4741 The package declares an install lifecycle script that runs node index.js, which requires lib/core.js; the same module is the package main, so the...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the reverse DNS lookup process. An attacker can bypass hostname-based access controls by connecting from a hostname that should be denied, if the chroot environment lacks required resolution files. Remediation...

Malicious code in @leviosa86com/leviosa86-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96264a8719e17bd8ec21d47213fe31dec87445e01ff312a1e46af5819e028979 Package @leviosa86com/[email protected] ships src/poc/index.js which shells out via childprocess.exec to collect host identifiers hostname, pwd,...

CVE-2026-15485 TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub43F2C4 of the file /goform/toolsnslookup of the component DNS Lookup Handler. This manipulation of the argument nslookuptarget/dnsserver causes os command injection. The attack can be initiated remotely...

Malicious code in consumerweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74612bbfc323641d0141b4f1b495d6ea5f9b52129f2391bf21c5fabf63702ca7 On npm install, both preinstall and postinstall lifecycle hooks execute index.js, which collects host reconnaissance os.hostname, os.userInfo.usernam...

CVE-2026-56843

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...