AD_Miner

AD Miner 是一个 Active Directory（本地和 Entra ID）审计工具，它： 利用 Cypher 查询 分析来自 BloodHound 图数据库 Neo4j 的数据。 通过静态的基于 Web 的报告提供现有弱点的全面概览。 基于 Web 的报告功能： 已识别弱点的 详细列表 用于可视化分析的 动态图表 随时间跟踪变化的 历史关键指标 用于优先级排序的 风险评级 报告快速概览 Active Directory 风险的全面缓解路径 基于风险的 Active Directory 弱点评级，以及全面的缓解路径。 动态 Web 界面...

Max

利用一套简单的工具最大化 BloodHound 描述 新版本发布： dpat - BloodHound 域密码审计工具 DPAT 一套简单的工具： get-info - 从 Neo4j 数据库中提取信息列表 mark-owned - 将对象列表标记为已控制 mark-hvt - 将对象列表标记为高价值目标 query - 运行原始 Cypher 查询并返回输出 export - 将域对象的所有出站控制权限导出为 CSV 文件 del-edge - 从数据库中删除一条边 add-spns - 创建 HasSPNConfigured 关系，一种新的攻击原语 add-spw -...

BlueHound

BlueHound 是一款开源工具，可帮助蓝队精准找出真正重要的安全问题。通过结合用户权限、网络访问和未修补漏洞的信息，BlueHound 能揭示攻击者若进入你的网络可能采取的路径。 它是 NeoDash 的一个分支，经过重新设计，使其适用于防御安全目的。 要开始使用 BlueHound，请查看我们的介绍视频、博客文章和 Nodes22 会议演讲。 BlueHound 支持以表格、图、柱状图、折线图、地图等多种形式呈现数据。它包含一个 Cypher 编辑器，可以直接编写填充报告的 Cypher 查询。你可以将仪表板保存到数据库，并与他人共享。 主要功能 1. 完全自动化...

cypheroth

Cypheroth 自动化、可扩展工具集，对 Bloodhound 的 Neo4j 后端运行 Cypher 查询，并将输出保存为电子表格。 描述 这是一个 bash 脚本，可自动化对存储在 Neo4j 数据库中的 Bloodhound 数据运行 Cypher 查询。 我发现自己多次重新运行相同的查询（通过 Neo4j Web 界面）进行多个评估，心想一定有更简单的方法。😅 要运行的 Cypher 查询列表是完全可扩展的。下面的格式示例展示了如何添加你自己的查询。 请分享任何其他有用的查询，以便我将它们添加到这个项目中！ 已全面测试，可在 Linux、macOS 和 Windows 的...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

CVE-2026-55615

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.5, Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt...

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...

CVE-2026-41274

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline without proper sanitization. An attacker can inject arbitrary Cypher commands that ar...

CVE-2026-42156

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher...

Flowise 安全漏洞

Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Prior versions of Flowise, up to 3.1.0, contained a security vulnerability. This vulnerability stemmed from the GraphCypherQAChain node directly passing user inputs into the Cypher query executio...

CVE-2026-35402

mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the readonly mode enforcement can be bypassed using APOC CALL procedures, potentially allowing unauthorized write operations or server-side request forgery. This issue is fixed in...

CVE-2026-35402

mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the readonly mode enforcement can be bypassed using APOC CALL procedures, potentially allowing unauthorized write operations or server-side request forgery. This issue is fixed in...

PT-2026-33508

Name of the Vulnerable Software and Affected Versions mcp-neo4j-cypher versions prior to 0.6.0 Description The read only mode enforcement can be bypassed using APOC CALL procedures. This may allow unauthorized write operations or server-side request forgery, which is a technique where an attacker...

Improper Neutralization of Special Elements in Data Query Logic

Overview graphiti-core is an A temporal graph building library Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the SearchFilters.nodelabels process. An attacker can execute arbitrary Cypher queries within the privileges of th...