Lucene search
+L

28 matches found

Kitploit
Kitploit
•added 2026/10/19 8:39 a.m.•391 views

maigret

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

6.2AI score
SaveExploits0References11
Kitploit
Kitploit
•added 2026/09/19 9:59 a.m.•19 views

maigret v0.6.6

Maigret English · 简体中文 · Français 📖 Documentation Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors Noimosiny is a comprehensive...

6.2AI score
SaveExploits0References11
Kitploit
Kitploit
•added 2026/08/25 5:14 p.m.•17 views

maigret v0.6.5

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

5.8AI score
SaveExploits0References21
vulnersOsv
vulnersOsv
•added 2026/06/19 3:12 p.m.•14 views

@claude-flow/plugin-agent-federation (>=1.0.0-alpha.9, <=1.0.0-alpha.15), @turtlepusher/plugin-agent-federation (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2026-58195 via agentic-flow (>=2.0.2-alpha, <=2.0.12-fix.8)

agentic-flow NPM version =2.0.2-alpha, =1.0.0-alpha.9, =1.0.0, =0.5.0, =0.3.0, =0.3.1 Source cves: CVE-2026-58195 Source advisory: SNYK:JS-AGENTICFLOW-17818150...

8.8CVSS5.8AI score0.00866EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/13 10:53 p.m.•20 views

CVE-2025-62487

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...

3.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/10 12:30 a.m.•27 views

EUVD-2025-206271

Details On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different...

3.5CVSS6.3AI score0.00223EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/09 10:16 p.m.•19 views

CVE-2025-62487

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...

3.5CVSS0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/09 9:17 p.m.•15 views

CVE-2025-62487 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...

3.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/09 9:17 p.m.•40 views

CVE-2025-62487 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...

3.5CVSS0.00223EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/09 9:17 p.m.•13 views

CVE-2025-62487

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...

3.5CVSS5.5AI score0.00223EPSS
SaveExploits0References2Affected Software3
CVE
CVE
•added 2026/01/09 9:17 p.m.•31 views

CVE-2025-62487

CVE-2025-62487 affects Palantir Dossier and Slides apps (Dossier front-end). Root cause: a May 2025 change intended to enable cross-artifact file sharing caused uploads to not be properly marked with security levels. In CBAC-enabled deployments, a security picker dialog lets users set the level, ...

3.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•37 views

PT-2026-1839

Name of the Vulnerable Software and Affected Versions Palantir Dossier and Slides apps affected versions not specified Description Images uploaded through the Dossier front-end app were not consistently marked with the correct security levels. This issue stemmed from a change implemented in May...

3.5CVSS6.3AI score0.00223EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•22 views

Palantir Gotham和Palantir Dossier 安全漏洞

Palantir Gotham and Palantir Dossier are both products of Palantir Corporation, a U.S.-based company.Palantir Gotham is a commercially available, artificial intelligence-enabled operating system.Palantir Dossier is a writing survey and dynamic reporting tool. A security vulnerability exists in...

3.5CVSS6.7AI score0.00223EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•7 views

CVE-2025-62487: Incorrect Authorization

On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...

3.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
•added 2025/06/25 11:04 a.m.•21 views

What LLMs Know About Their Users

Simon Willison talks about ChatGPT's new memory dossier feature. In his explanation, he illustrates how much the LLM--and the company--knows about its users. It's a big quote, but I want you to read it all. Here's a prompt you can use to give you a solid idea of what's in that summary. I first sa...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/28 4:25 p.m.•15 views

Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/02/28 4:25 p.m.•14 views

MAL-2025-1577 Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2024/04/04 9:51 a.m.•18 views

dossierpolitico.com Cross Site Scripting vulnerability OBB-3900986

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/08/04 12:00 a.m.•7 views

PT-2023-26567

Name of the Vulnerable Software and Affected Versions Knowage versions 6.x.x through 8.1.7 Description Knowage is an open source analytics and business intelligence suite. The endpoint "/knowage/restful-services/dossier/importTemplateFile" allows authenticated users to upload a template file on t...

9.9CVSS0.01172EPSS
SaveExploits1References5
Openbugbounty
Openbugbounty
•added 2023/05/05 11:11 p.m.•25 views

dossier-z.be Cross Site Scripting vulnerability OBB-3298130

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Rows per page
Query Builder