99 matches found
getrails
GETRAILS Lib of OSINT and Dork hacking that work with Google, Duckduckgo and Torch Feel free to contribute Run import getrails getrails.search'site:scanme.nmap.org' Try Google search if return error use Duckduckgo "http://scanme.nmap.org",... getrails.gogle"term" Searching Google...
DuckDuckGo Now Blocks Most YouTube Ads Right Inside Its Browser
DuckDuckGo's browser now blocks most YouTube ads by default on supported devices. Here's how it works, which platforms support it, and its limits...
DuckDuckGo: RCE + Supply Chain Attack via pull_request_target in content-scope-scripts/semver-label.yml — Affects All DuckDuckGo Browsers
A vulnerability was discovered in the DuckDuckGo content-scope-scripts repository's GitHub Actions workflow. The workflow used the pullrequesttarget trigger without access controls, allowing untrusted code from fork pull requests to be checked out and executed. This could have led to remote code...
DuckDuckGo: SSRF with bypass leads to client side hosting / vulnerabilities ( XSS and others )
The web application was found to be vulnerable to server-side request forgery SSRF. The SSRF vulnerability was discovered through testing with an HTTP interception proxy. The vulnerability allowed an attacker to make arbitrary HTTP requests from the server, which could potentially lead to...
Malicious code in duckduckgo-eslint-config-poc (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48679 Malicious code in duckduckgo-eslint-config-poc (npm)
The package communicates with a domain associated with malicious activity...
DuckDuckGo Browser 安全漏洞
DuckDuckGo Browser is a web browser from DuckDuckGo, Inc. A security vulnerability exists in DuckDuckGo Browser that originates from an unauthenticated attacker having access to account data, which could lead to the disclosure of credentials and email protection information...
EUVD-2021-31501
Malicious code in bioql PyPI...
Can you disappear online? (Lock and Code S06E19)
This week on the Lock and Code podcast There's more about you online than you know. The company Acxiom, for example, has probably determined whether you’re a heavy drinker, or if you're overweight, or if you smoke or all three. The same company has also probably estimated—to the exact dollar—the...
DuckDuckGo Is Taking Its Privacy Fight to Data Brokers
Privacy-focused company DuckDuckGo is launching a tool to remove data from people-search websites, a VPN, and an identity theft restoration service...
Private and Secure Web Search Engines: DuckDuckGo, Brave, Kagi, Startpage
What you look for online is up to you—just make sure no one else is taking a peek...
CVE-2023-41055
LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery SSRF vulnerability in the "engines/google/text.php" and "engines/duckduckgo/text.php" files in versions before commit...
CVE-2023-41055: Server-Side Request Forgery (SSRF)
LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery SSRF vulnerability in the engines/google/text.php and engines/duckduckgo/text.php files in versions before commit...
Gootkit Malware Adopts New Tactics to Attack Healthcare and Finance Firms
The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from Cybereason. The cybersecurity firm said it investigated a Gootkit incident in December 2022 that adopted a new method of deployment, with the actors...
Gootkit Malware Adopts New Tactics to Attack Healthcare and Finance Firms
The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from Cybereason. The cybersecurity firm said it investigated a Gootkit incident in December 2022 that adopted a new method of deployment, with the actors...
How to Use DuckDuckGo’s Privacy-First Email Service
Tired of advertisers spying on your private communications? This beta promises to kick tracking technology to the curb...
Malicious Package
Overview duckduckgo-privacy-extension is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...
Malicious code in duckduckgo-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dc8632d9358f856597e226091e2aa6ed376e3c6dd628063d238d981b0d2506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2605 Malicious code in duckduckgo-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dc8632d9358f856597e226091e2aa6ed376e3c6dd628063d238d981b0d2506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...