Max

Massimizzare BloodHound con una semplice suite di strumenti Descrizione Nuova release: dpat - BloodHound Domain Password Audit Tool DPAT Una semplice suite di strumenti: get-info - Estrai elenchi di informazioni dal database Neo4j mark-owned - Segna un elenco di oggetti come Posseduti mark-hvt...

cypher

🌹 CYPHER TOOLS 🌹 Scritto da TMRSWRR Versione 1.0.0 Strumenti tutto in uno per CRITTOGRAFIA. Instagram: Capture the Root 🖼️ Schermate 🖼️ 📹 Come usare 📹 Fai clic sull'immagine... 🧰 Funzionalità 🧰 Questo strumento include: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍...

cypheroth

Cypheroth Set di strumenti automatizzati ed estensibili che esegue query Cypher contro il backend Neo4j di Bloodhound e salva l'output in fogli di calcolo. Descrizione Questo è uno script bash che automatizza l'esecuzione di query Cypher sui dati di Bloodhound memorizzati in un database Neo4j. Mi...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

BlueHound

BlueHound è uno strumento open-source che aiuta i blue team a individuare i problemi di sicurezza che contano davvero. Combinando informazioni su permessi utente, accesso di rete e vulnerabilità non patchate, BlueHound rivela i percorsi che gli attaccanti seguirebbero se fossero all'interno della...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

thingernet-graph

thingernet-graph Python-Skript zur Erzeugung einer neo4j-Cypher-Darstellung einer Sammlung von IoT-Geräten für Visualisierung und Abfrage. Das Skript liest ein Verzeichnis von JSON-Dateien, die 'Things' beschreiben, und erzeugt den relevanten neo4j-Cypher-Text für den Import in neo4j, um eine...

CVE-2026-46591

camel-neo4j Cypher इंजेक्शन रीप्रोड्यूसर CVE-2026-46591 यह प्रोजेक्ट Apache Camel के camel-neo4j घटक में Cypher इंजेक्शन को प्रदर्शित करता है, जिसे CVE-2026-46591 के रूप में ट्रैक किया जाता है। प्रोड्यूसर अपने मैच/रीट्रीव और डिलीट ऑपरेशनों के लिए CamelNeo4jMatchProperties मैप से Cypher WHERE क्लॉ...

CVE-2026-32247

CVE-2026-32247 — Iniezione Cypher in graphiti-core tramite nodelabels non sanificati Gravità : Alta CVSS 8.1 CWE : CWE-943 — Neutralizzazione impropria di elementi speciali nella logica delle query di dati Componente interessato : graphiti-core = 0.28.1 pip Corretto in : 0.28.2 Avviso : GHSA NVD ...

AD_Miner

AD Miner è uno strumento di audit per Active Directory on-premise e Entra ID che: Utilizza query Cypher per analizzare i dati del database grafico BloodHound Neo4j. Fornisce una panoramica completa delle vulnerabilità esistenti attraverso un report statico basato sul web. Caratteristiche dei repo...

CVE-2026-76223 ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION

ArcadeDB com.arcadedb versions 26.7.3 and earlier fail to enforce the UPDATESCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library. A user with only database access can add or overwrite SQL or Cypher functions in an existing library and persist the...

CVE-2026-76223

ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce the UPDATE_SCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library. A user with only database access can add or overwrite SQL or Cypher functions in an existing library and persist th...

CVE-2026-76223 ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION

ArcadeDB com.arcadedb versions 26.7.3 and earlier fail to enforce the UPDATESCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library. A user with only database access can add or overwrite SQL or Cypher functions in an existing library and persist the...

CVE-2026-75842

ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in the OpenCypher LOAD CSV FROM clause that allows authenticated users to read local files. Attackers with read query privileges can use the file:// protocol in LOAD CSV statements to access arbitrary files with server...

CVE-2026-75841

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

CVE-2026-75841

ArcadeDB versions before 26.8.1 are vulnerable in the Cypher range() function: authenticated users can submit oversized range() expressions with large bounds, exhausting heap memory and triggering OutOfMemoryError, causing temporary service degradation. CVSS 3.1 base score is 4.3 (MEDIUM). No pub...

EUVD-2026-60605

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

CVE-2026-75841 ArcadeDB before 26.8.1 Denial of Service via range()

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

CVE-2026-75841 ArcadeDB before 26.8.1 Denial of Service via range()

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: opensearch, spark, apache-tika, neo4j, druid, zipkin, thingsboard, infinispan, kserve-modelmesh, akhq, kafka, apache-activemq-artemis, flink, keycloak-config-cli, strimzi-kafka-operator, celeborn, apache-pulsar, solr, sonarqube, wavefront-proxy, spdx-tools-java, wild...