gitcolombo

Gitcolombo GitリポジトリやGitHubから名前、メールアドレス、一見無関係なアカウント間のリンクといったアイデンティティを抽出するOSINTツールです。 Python CLI gitcolombo.py — リポジトリをクローンし、git log を辿り、よりリッチなシグナルを得るためにGitHub APIを呼び出すことも可能。 Web版 gitcolombo.html — 単一の静的HTMLファイル。ブラウザで開き、GitHub APIに直接問い合わせます。インストール不要。...

CVE-2026-34840

CVE-2026-34840 – OneUptime SSO (SAML) decoupled signature verification . Prior to 10.0.42, OneUptime’s SSO.ts uses isSignatureValid() to verify only the first in the XML DOM with xml-crypto while getEmail() reads identity from assertion[0] via xml2js, enabling an attacker to prepend an unsigned ...

CVE-2026-34840

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation App/FeatureSet/Identity/Utils/SSO.ts has decoupled signature verification and identity extraction. isSignatureValid verifies the first element in the XML DOM using...

PT-2026-29882

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 10.0.42 Description OneUptime, an open-source monitoring and observability platform, had a flaw in its SAML SSO implementation located in App/FeatureSet/Identity/Utils/SSO.ts. The issue stemmed from a separation...