arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

Adama

Adama Searches For Threat Hunting and Security Analytics A collection of known log and / or event data searches for threat hunting and detection. They enumerate sets of searches used across many different data pipelines. Implementation details are for ELK. Adama is part of the SpaceCake project...

chiasmodon

Chiasmodon Chiasmodon es una herramienta OSINT que permite a los usuarios recopilar información de diversas fuentes y realizar búsquedas dirigidas basadas en dominios, aplicaciones de Google Play, direcciones de correo electrónico, direcciones IP, organizaciones, URL y más. Proporciona capacidade...

ASOS breach update: Hackers stole customer details and shopping searches

The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances. As we reported earlier this week, ASOS customers received a push notification through the ASOS app alleging that the company had been hacke...

GHSA-M9C2-85GV-8XR5 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Impact A vulnerability was found in Graylog's API endpoint for updating saved searches and dashboards. A user with edit permissions on a dashboard or saved search could grant owner permissions to an arbitrary account, which could then be used to delete the respective saved search or dashboard or ...

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Impact A vulnerability was found in Graylog's API endpoint for updating saved searches and dashboards. A user with edit permissions on a dashboard or saved search could grant owner permissions to an arbitrary account, which could then be used to delete the respective saved search or dashboard or ...

Missing Authorization

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Missing Authorization through the update flow in ViewsResource for saved searches and dashboards. An attacker can gain owner-level control over a view by sending an update reque...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

PT-2026-96190

Name of the Vulnerable Software and Affected Versions Graylog versions 6.3.0 through 6.3.13 Graylog versions 7.0.x prior to 7.0.9 Graylog versions 7.1.x prior to 7.1.4 Description The view update API for saved searches and dashboards allows a user with edit permissions, who is not the entity owne...

Astra Linux – Vulnerability in the 389-DS-base

A double-free was detected in the way that 389-ds-base handles virtual attribute contexts during persistent searches. An attacker could send a series of search requests, causing the server to behave unexpectedly and potentially crashing it...

CVE-2026-86488

In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...

CVE-2026-86488

In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...

CVE-2026-86488

In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...

CVE-2026-86488

JetBrains YouTrack prior to version 2026.2.18634 contains an Insecure Direct Object Reference (iDOR) vulnerability in the watchRules and issueListConfig endpoints, allowing a low-privileged authenticated user to access private saved searches belonging to other users. The CNA-assigned CVSS 3.1 sco...

EUVD-2026-72504

In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...

PT-2026-86860

In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...

Missing Authorization

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization via the Dashboard API endpoints searches and content-health, which enforce only authentication without proper permission checks. A...

Missing Authorization

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization via the Dashboard API endpoints searches and content-health, which enforce only authentication without proper permission checks. A...

CVE-2026-85589

phpMyFAQ before 4.2.0-alpha.2 contains a missing authorization vulnerability in the admin dashboard API endpoints searches and content-health that enforce only authentication without permission checks. Any authenticated user can access these endpoints to read site-wide search statistics and...