tinfoleak

tinfoleak 最全面的开源Twitter情报分析工具 简介 tinfoleak 是一款属于OSINT（开源情报）和SOCMINT（社交媒体情报）领域的开源工具，它能够自动提取Twitter上的信息，并便于后续分析以生成情报。通过输入用户标识符、地理坐标或关键词，tinfoleak 会分析Twitter时间线，提取大量数据，并向情报分析师展示有用且结构化的信息。 tinfoleak 被包含在多个Linux发行版中：Kali、CAINE、BlackArch 和 Buscador。它目前是Twitter情报分析方面最全面的开源工具。 tinfoleak 可以提取以下信息： 账户信息 /...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS, or Windows experimental. You have access to a remote network via ssh. You don't necessarily have admi...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

oss-fuzz

OSS-Fuzz：开源软件的持续模糊测试 模糊测试是一种广为人知的用于发现软件中编程错误的技术。许多这类可检测的错误，例如缓冲区溢出，可能具有严重的安全隐患。Google 通过部署对 Chrome 组件的引导式进程内模糊测试已发现数千个安全漏洞和稳定性缺陷，现在我们希望与开源社区共享这一服务。 与核心基础设施倡议和OpenSSF合作，OSS-Fuzz 旨在通过结合现代模糊测试技术与可扩展的分布式执行，使常见的开源软件更加安全稳定。不符合 OSS-Fuzz 条件（例如闭源软件）的项目可以运行自己的 ClusterFuzz 或 ClusterFuzzLite 实例。 我们支持...

Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

LionWiki <3.2.12 - Local File Inclusion

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...

LaRecipe < 2.8.1 Remote Code Execution via SSTI

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection SSTI, which could potentially lead to Remote Code Execution RCE in vulnerable configurations. id: CVE-2025-53833 info:...

security-advisories

security-advisories Avisos de seguridad públicos publicados por Me Chidubem Chukwu Terminal Venom, incluyendo divulgaciones de CVE e informes de vulnerabilidades para software de código abierto y de terceros...

OpenPLC_v3

OpenPLC Runtime versión 3 ⚠️ Este proyecto ha llegado al final de su ciclo de vida y ya no se mantiene. Ha sido reemplazado por OpenPLC Runtime v4. Visite el nuevo repositorio para obtener instrucciones de instalación, documentación y soporte. OpenPLC es un Controlador Lógico Programable de código...

CVE-2026-16466 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection...

KLA91278 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-57104 Exploitation Related products Microsoft-Azure CVE list CVE-2026-57104 critical Solution Install necessary...

CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by cross-site request forgery (CSRF) , allowing a remote attacker with no privileges but requiring user interaction to perform unauthorized actions. The flaw is attributed to open source software components within the product, as indicated b...

CVE-2026-80434 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference...

CVE-2026-82100 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82107 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two men...

CVE-2026-7657

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

CVE-2026-12942

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-16624 CVE-2026-16624

Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...