Quantickle

Quantickle - Network Graph Visualization for Threat Intelligence A browser-based network graph visualization tool built on Cytoscape.js. Quantickle helps visualize and analyze connected data of any type, but is faceted towards threat intelligence. Installation Install instructions Table of Conten...

xolo

XOLO Autor: ET Lownoise Versión: 1.0 Herramienta para rastrear, visualizar e interactuar con enlaces de servidor SQL en un gráfico d3 para ayudar en sus ejercicios de equipo de pentest hacking de evaluaciones de riesgo rojo/azul/púrpura/... Requisitos: root@kitploit: Requests==2.18.4 Flask==0.12....

epagneul

epagneul Epagneul es una herramienta para visualizar e investigar registros de eventos de Windows. Despliegue Requiere tener instalados docker y docker-compose. Instalación root@kitploit: make Despliegue sin conexión En una máquina conectada a internet, construye una versión sin conexión:...

hexcymatix

hexcymatix hexcymatix is an exploratory research project, loosely envisioned as a binary reverse engineering tool for extracting structural information from repeated byte patterns in binary files. The idea never materialized into a usable tool, but still yields some fascinating representations of...

clairvoyance

🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; from French clair meaning clear and voyance meaning vision from Wikipedia. Overview clairvoyance creates a colorful visualization of the page protection of an entire 64-bit process address space user and kernel running on a Windows 64-bit kernel. To...

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...

CVE-2026-46684

CVE-2026-46684 (DataEase) : Open-source data visualization tool DataEase prior to 2.10.23 is affected by an unauthorized command execution vulnerability. The issue stems from enterprise token handling where TokenFilter#doFilter() may pass X-DE-TOKEN values to TokenUtils.validate(), which only che...

CVE-2026-45320

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

PT-2026-56251

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description An authenticated attacker can bypass previous fixes for the H2 zip protocol and file dropper. By uploading a zip archive disguised with a .ttf extension via the FontManage.saveFile function, the...

PT-2026-56244

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The /de2api/share/proxyInfo share interface generates and returns an X-DE-LINK-TOKEN before validating the share password or ticket. This allows unauthenticated attackers who possess a protected...

Exploit for Deserialization of Untrusted Data in Facebook React

🎨 react2shellexploitvisualized - Visualize Vulnerabilities wit...

CVE-2025-64163

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

EUVD-2025-37957

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...

EUVD-2025-6385

Malicious code in bioql PyPI...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version before 2.10.12 has a security vulnerability , the vulnerabilit...

VulnCheck KEV: CVE-2024-30269

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. The vulnerability has...

编号撤回

dtale is a pandas data structure visualization tool from Man Open Source. This CVE number has been withdrawn...

NagVis 安全漏洞

NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. NagVis has a security vulnerability that stems from vulnerability to cross-site scripting attacks...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase v1.18.19 before the version of a security vulnerability , the vulnerability stems from ClickHous...