emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

LeakSearch

LeakSearch LeakSearch は、ProxyNova の COMB（Combination Of Many Breaches）を使用してインターネット上の平文パスワードを検索・解析するシンプルなツールです。カスタムプロキシを設定でき、独自のパスワードファイルを使用して、ユーザー、ドメイン、パスワードなどの異なるキーワードで検索することもできます。 さらに、ターミナルに表示する結果の数を指定し、JSON または TXT ファイルとしてエクスポートできます。コードがシンプルなため、新しいソースの追加が非常に容易で、将来的にはさらに多くのプロバイダが追加される予定です。 要件...

Command Injection

Overview @snyk/sweater-comb is a “Sweats the small stuff, so you don’t have to. OpenAPI linting rules for Snyk APIs.” Affected versions of this package are vulnerable to Command Injection through the expectGitBranch function in src/lint.ts. An attacker can execute arbitrary OS commands by supplyi...

CVE-2026-75486

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-75486 Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-75486 Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

EUVD-2026-67789

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-75486

Synk Sweater Comb (Snyk) before 3.8.8 contains a command injection vulnerability. The root cause is in the expectGitBranch() function in src/lint.ts, which passes an unsanitized branch name—sourced from the linters..optic-ci.original field in the .vervet.yaml configuration file—directly into chil...

Scalable Ultrafast Random Bit Generation Using Wideband Chaos-Based Entropy Sources

The exponential growth of data transmission and processing speeds in modern digital infrastructure requires entropy sources capable of producing large volumes of true randomness for information security. Chaotic emissions from semiconductor lasers are attractive in this context because of their...

EUVD-2010-2434

Malware in sbrugna...

EUVD-2021-2598

Malware in sbrugna...

Malicious code in @zalastax/nolb-comb (npm)

The package @zalastax/nolb-comb was found to contain malicious code...

MAL-2025-10972 Malicious code in @zalastax/nolb-comb (npm)

The package @zalastax/nolb-comb was found to contain malicious code...

LeakSearch - Search & Parse Password Leaks

LeakSearch is a simple tool to search and parse plain text passwords using ProxyNova COMB Combination Of Many Breaches over the Internet. You can define a custom proxy and you can also use your own password file, to search using different keywords: such as user, domain or password. In addition, y...

EmploLeaks - Finding Leaked Employees Info for the Win

Developed by Faraday security researchers, this cutting-edge tool utilizes the power of OpenSource Intelligence techniques. EmploLeaks extracts valuable insights by scouring various platforms, to compile a comprehensive list of employees associated with a given company and cross-reference these...

GHSA-VXR4-RXW7-G7V6 Prototype Pollution in comb

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...

Prototype Pollution in comb

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...

Prototype Pollution

comb is vulnerable to prototype pollution. The function deepMerge allows an attacker to get control of value of “path” and modify attributes such as proto, constructor and prototype...

CVE-2021-23561

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...

CVE-2021-23561

CVE-2021-23561 affects the npm package comb, where the deepMerge() function enables Prototype Pollution. The vulnerability arises from unsafe recursive merge and path-based property assignment, allowing an attacker to modify Object.prototype properties (e.g., proto , constructor, prototype). Docu...