Emora-Project

Emora Emora est un outil OSINT qui vous permet de rechercher des comptes par nom d'utilisateur sur les réseaux sociaux. Inspiré par des outils comme Sherlock, Emora offre une interface graphique conviviale pour faciliter l'utilisation et la navigation dans les résultats. Aperçu Aperçu Démonstrati...

sherlock

Retrouvez des comptes de réseaux sociaux par nom d'utilisateur sur 400+ réseaux sociaux Installation • Utilisation • Contribuer Installation !WARNING Les paquets pour ParrotOS et Ubuntu 24.04, maintenus par un tiers, semblent être cassés. Les utilisateurs de ces systèmes devraient utiliser...

tookie-osint

Tookie-OSINT V4가 여기에 있습니다! Tookie-OSINT는 궁극의 성능을 위해 100% 처음부터 다시 작성되었습니다! 번역은 아직 준비되지 않았습니다. 위키와 readme는 일부 변경 중입니다. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma / Wählen Sie Ihre Sprache / Выберите язык / اختر لغتك / زبان خود را انتخاب...

go-sherlock

go-sherlock go-sherlock — это реализация sherlock, написанная на Go с некоторыми изменениями для повышения производительности и более точных результатов. Предоставлено Skele's Choice. Skele's Choice — лучший выбор! Спросите свои кости! skele.company Вдохновение, ссылки и благодарности sherlock...

Sherlock

Устарело. Взгляните на Watson вместо этого. Sherlock Скрипт PowerShell для быстрого поиска отсутствующих исправлений программного обеспечения для уязвимостей локального повышения привилегий. В настоящее время ищет: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 :...

Linux Distros Unpatched Vulnerability : CVE-2026-44590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is...

CVE-2026-44590 Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml

Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validatemodifiedtargets.yml is vulnerable to command injection via the pullrequesttarget trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltra...

sherlock 操作系统命令注入漏洞

Sherlock is an open-source username search tool developed by Sherlock. Versions of Sherlock prior to 0.16.1 contained a vulnerability related to operating system command injection. This vulnerability originated from the pullrequesttarget trigger in the GitHub Actions workflow...

Exploit for CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullr...

AutoRDPwn

This is a post-exploitation framework called AutoRDPwn, written in PowerShell. It is designed to automate the Shadow attack on Microsoft Windows computers, which allows a remote attacker to view and control the victim's desktop without their consent. The framework has a user-friendly interface an...

Malicious code in sherlock-frontier-client (npm)

The package sherlock-frontier-client was found to contain malicious code...

Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

MAL-2025-33092 Malicious code in sherlock-frontier-client (npm)

The package sherlock-frontier-client was found to contain malicious code...

MAL-2025-20733 Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation

Sherlock Holmes is famous for his incredible ability to sort through mounds of information; he removes the irrelevant and exposes the hidden truth. His philosophy is plain yet brilliant: "When you have eliminated the impossible, whatever remains, however improbable, must be the truth." Rather tha...

Malicious code in sherlock-front (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3013 Malicious code in sherlock-front (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4299

The system configuration interface of HGiga iSherlock including MailSherlock, SpamSherock, AuditSherlock fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability for Command Injection attacks, enablin...

stETH/ETH, rETH/ETH and cbETH/ETH chainlink oracles has too long of heartbeat and deviation threshold which can cause loss of funds

Lines of code Vulnerability details ChainlinkPriceOracle fetches prices from the Chainlink contracts. But the price feeds in the consideration has a very long price heartbeat and deviation rate which might lead to wrong price calculation and loss of token to the user. Impact According to the...

HGiga MailSherlock SQL注入漏洞

Hgiga MailSherlock is an enterprise email audit system from China Henderson Technology Hgiga. A SQL injection vulnerability exists in HGiga MailSherlock version 4.5, which stems from a query function that does not adequately validate user input. An attacker can exploit this vulnerability by...