ffs

FFS - نظام الملفات F هذه أداة سطر أوامر للبحث في الملفات مثل grep لا تستخدم نواة نظام التشغيل لقراءة الملفات، بل تقرأ أقراصك مباشرة. إنها عديمة الفائدة عمليًا، ولكنها رائعة بشكل جنوني. هذا مجرد 1.5k سطر من كود C يقوم بـ: يتطلب صلاحيات sudo فقط عند قراءة عقدة جهاز خام مثل /dev/rdisk؛ البحث في ملف...

forensicscanner

This repository does not have a README...

WinShareEnum

WinShareEnum أداة تعداد مشاركات ويندوز تحميل https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe يتم التشغيل على نطاق من عناوين IP على شبكتي المحلية غير المرتبطة بالمجال، مع بعض المشاركات الوهمية. يرجى تذكر أن هذه الأداة مصممة أساسًا للشبكات المرتبطة بالمجال / الكبيرة:...

SauronEye

SauronEye SauronEye هي أداة بحث مصممة لمساعدة الفرق الحمراء في العثور على ملفات تحتوي على كلمات رئيسية محددة. الميزات : البحث في أقراص متعددة شبكة البحث في محتويات الملفات البحث في محتويات ملفات Microsoft Office .doc, .docx, .xls, .xlsx العثور على وحدات ماكرو VBA في ملفات .xls و .doc القديمة إصدا...

log4j-scanner

log4j-scanner Scanner de vulnérabilité Log4j 2 CVE-2021-44228 pour Windows OS. Exemple d'utilisation Utilisation root@kitploit: .\log4j-scanner.exe Terminal is used to output results, deploy this to machines via RMM and Start/Report from PowerShell or CMD Prompt. Compilation à partir des sources...

PT-2026-70175

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search search files tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the...

PYSEC-2026-2556 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

CVE-2026-55443 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

CVE-2026-55443

CVE-2026-55443 describes a path traversal / sandbox-escape flaw in LangChain prior to 1.3.9. The vulnerability arises when components that resolve filesystem paths or expand search patterns fail to confine results to a trusted root, allowing untrusted inputs (paths, globs, symlinks, or LLM-influe...

CVE-2026-55443 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

GHSA-CX9V-4QJ2-JRW6 Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

Summary Open WebUI has a Broken Object Level Authorization BOLA vulnerability in the builtin searchknowledgefiles tool. When native function calling is enabled and the selected model has no attached knowledge bases, an authenticated user can call searchknowledgefiles with an arbitrary knowledgeid...

GHSA-GR75-JV2W-4656 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

Symlink Attack

Overview langchain is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Symlink Attack via the file-search middleware and loaders that resolve filesystem paths and search patterns without confining the resolved path to the intended root...

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

Bugsink 安全漏洞

Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the source mapping and debugging file searching mechanisms, which did not limit the scope of the projects. A...

CVE-2026-26098

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

CVE-2026-26098

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

CVE-2026-26097 Uncontrolled Search Path Element in Owl opds

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request...

CVE-2026-26097

Owl opds 2.2.0.4 is affected by CVE-2026-26097, which concerns an Uncontrolled Search Path Element that can leverage/manipulate configuration file search paths via a crafted network request. The CVSS metrics indicate a HIGH impact across confidentiality, integrity, and availability, with a LOCAL ...

CVE-2025-15585

Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration...