dark-web-osint-tools

🕵️‍♂️ 다크 웹을 위한 OSINT 도구 🔎 다크 웹 검색 엔진 도구 Katana - https://github.com/adnane-X-tebbaa/Katana OnionSearch - https://github.com/megadose/OnionSearch Darkdump - https://github.com/josh0xA/darkdump Ahmia 검색 엔진 - ahmia.fi, https://github.com/ahmia/ahmia-site Darkus - https://github.com/Lucksi/Darkus Onion...

querytool

QUERYTOOL - OSINT용으로 설계된 Google 스프레드시트 소개 QueryTool은 Google 스프레드시트에 통합된 전문 OSINT 프레임워크로, 다양한 검색 엔진에 대한 쿼리를 생성하여 특정 결과를 얻는 과정을 간소화하는 것을 목표로 합니다. 정찰의 초기 단계로 설계된 QueryTool을 통해 사용자는 용어, 사용자 이름, 이메일 주소, 파일 등에 대한 정교한 검색을 수행할 수 있습니다. 주로 검색 결과에 직접 액세스할 수 있는 리소스 집합으로 구성되어 있으며, 주관적인 도구 및 서비스 모음을 통해 사이버 수사...

GeoSentinel

🌍 GeoSentinel GeoSentinel 은 실시간으로 글로벌 이동을 추적하는 지리공간 모니터링 플랫폼입니다. 선박 및 항공 경로, 실시간 좌표, 지리 데이터를 통합 시스템으로 집계하여 분석, 시각화 및 의사 결정을 위한 명확한 지리 및 지정학적 인사이트를 제공합니다. 🚀 !TIP 🚀 블로그 방문하기 Geo Sentinel 업데이트 및 인사이트 🌐 블로그 열기 🚀 공식 웹사이트 🌍 사이트 방문 🚀 공식 웹사이트 🌍 사이트 방문 !CAUTION 🚨 Geo Sentinel AI 업데이트 — 최신 Geo Sentinel AI...

Ominis-OSINT

Ominis-OSINT: 웹 헌터 🌐🕵️‍♂️ SURPRISE UPDATE SCHEDULED FOR DEVELOPMENT 일정이 변경되었습니다. WINTERGATE가 이 프로젝트를 확장할 예정입니다 Github Actions Visit actions/workflows and chose any of the 3 options to try out Ominis OSINT right from github! Web Search :...

CVE-2017-5638

CVE-2017-5638 Google Dork : "site:com filetype:action"...

Astra Linux – Vulnerability in Chromium

The use of “after free” in web searches in Google Chrome before version 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption through profile destruction...

Malicious code in @or-sdk/web-search (npm)

npm/@or-sdk/web-search is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-11738 Malicious code in @or-sdk/web-search (npm)

npm/@or-sdk/web-search is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the web search process. An attacker can gain unauthorized access to restricted operations by exploiting misconfigured input paths. Remediation Upgrade openclaw...

EUVD-2026-43538

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198

OpenClaw 2026.5.28 before 2026.6.6 contains an authorization bypass in native web search that lets lower-trust callers perform actions requiring stronger policy checks. Exploitation would involve misconfigured input paths to bypass intended authorization controls and execute restricted operations...

CVE-2026-62198

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

PT-2026-57900

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-40516

OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the webfetch and websearch tools that allows attackers to access private and localhost HTTP services by manipulating tool parameters without proper validation of target addresses. Attackers can influence an...

CVE-2026-45331 Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validateurl in backend/openwebui/retrieval/web/utils.py calls validators.ipv6ip, private=True, but the validators library does NOT implement the private keyword for IPv6 — the call...

CVE-2026-45331

CVE-2026-45331 concerns Open WebUI’s validate_url() in backend/open_webui/retrieval/web/utils.py, where a call to validators.ipv6(ip, private=True) raises a ValidationError due to the library not implementing the private keyword for IPv6. This causes IPv6 addresses to bypass the intended filter, ...