pii-shield

PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. Same name, different projects. This is...

ODBParser

| ODBParser ---|--- TL;DR ODBParser is a tool to search for PII being exposed in open databases. ONLY to be used to identify exposed PII and warn server owners of irresponsible database maintenance OR to query databases you have permission to access! PLEASE USE RESPONSIBLY What is this? Wrote thi...

CVE-2026-40776

CVE-2026-40776 Eventin wp-event-solution Broken Access Control Unauthenticated PII disclosure and order forgery in the Eventin WordPress plugin 10,000+ active installs. A public REST endpoint hands out a wprest nonce to any visitor, and three downstream permission callbacks accept that nonce as a...

CVE-2025-66698

CVE-2025-66698 Target Software: Veda Semantic Machines v5.4.8 likely all prior versions. Vulnerability Type: Authentication Bypass. CVE ID: CVE-2025-66698. Summary: System improperly validates the ticket parameter, treating an empty string as a valid session. Project Link: Veda Semantic Machines...

presidio

Presidio - Data Protection and De-identification SDK 📣 Presidio is moving to a new home! Read more here 📣 Context aware, pluggable and customizable PII de-identification service for text and images. Component| Downloads| Coverage ---|---|--- Presidio Analyzer| | Presidio Anonymizer| | Presidio...

clawshield-public

ClawShield Security proxy for AI agents. Sits in front of OpenClaw and scans every message for prompt injection, PII leaks, and secrets — before they reach the model or leave the network. Ships with 5 specialized AI agents, a built-in dashboard, and a YAML policy engine. One command to start...

privacy-filter

OpenAI Privacy Filter OpenAI Privacy Filter is a bidirectional token-classification model for personally identifiable information PII detection and masking in text. It is intended for high-throughput data sanitization workflows where teams need a model that they can run on-premises that is fast,...

token-proxy

llm-token-proxy A transparent PII redaction proxy for LLM API traffic. Sits between your application and the LLM provider, pseudonymizing sensitive data on the way out and restoring it on the way back. Your LLM never sees real names, emails, IPs, or domains — it works entirely with structured...

pisiguard

PISIGuard Protect your personal and sensitive info when you chat with AI PISIGuard : P ersonally I dentifiable & S ensitive I nformation Guard PISIGuard demo. sensitive data is caught, masked and restored right in the browser I built PISIGuard because I've been horrified at how much personal &...

Octopii

Octopii ⠀⠀⠀⠀⠀⠀⠀⣤⣤⣄⣀⡀⠀⠀⠀⢀⣠⣤⣤⣄⡀⠀⠀⠀⢀⣀⣠⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠸⣿⣿⡿⠿⢿⣷⡄⢠⣿⣿⣿⣿⣿⣿⡄⢀⣾⡿⠿⢿⣿⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠈⠉⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⣠⣤⡀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠀⠀⠀⠀⠀⢀⣤⣄⠀⠀⠀ ⠸⣿⣿⣿⣿⣿⣿⣿⣿⣦⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠀ ⠀⠉⠉⠁⠀⠀⠀⠀⣿⣿⠀⢸⣿⡇⠀⠉⣿⣿⣿⣿⠉⠀⢸⣿⡇⠀⣿⣿⠀⠀⠀⠀⠈⠉⠉⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣀⣈⣻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣟⣁⣀⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀...

TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII including partner and contact names. id: CVE-2025-27225 info: name: TRUfusion Enterprise = 7.10.4.0 - Admin Conta...

skiptracer

Account moved to: https://gitlab.com/illwill No longer supported at this time. Python 3 migration in progress, please do not report issues yet, as the code and the sources need a bunch of upgrading. Project moved to https://gitlab.com/illwill/skiptracer...

exfilkit

exfilkit Data exfiltration utility for testing detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. Exfiltration How-To /etc/shadow - HTTP GET requests Server ./exfilkit-cli.py -m...

CVE-2026-14851

A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...

CVE-2026-14851

The Copart online billing service suffers from a vulnerability that leads to the unauthorised disclosure of information within its customer invoicing web application. The root cause is a lack of authorisation checks on the endpoint responsible for serving PDF invoice files , combined with certain...

EUVD-2026-100940

A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...

CVE-2026-97471

The Avada Fusion Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'argslinktarget' parameter. This makes it possible for unauthenticated attackers to extract arbitrary user meta values for any user ID, including...

EUVD-2026-100799

The Avada Fusion Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'argslinktarget' parameter. This makes it possible for unauthenticated attackers to extract arbitrary user meta values for any user ID, including...

CVE-2026-103423

The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve personally...

EUVD-2026-100762

The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve personally...