Threat-Intelligence-Hunter

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own set of indicators. Threat-Intelligence-Hunter...

screenpipe

English | 简体中文 | 日本語 | Français | Español | Português BR | Deutsch | Українська screenpipe デスクトップの24時間メモリー オープンソース版 rewind。100% ローカル。データはあなたのもの。 これは何？ screenpipeは画面と音声を24時間365日録画し、すべてをローカルに保存し、デジタル履歴をAIに接続できます。 root@kitploit:...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

passera

注記: Passera の開発を継続する時間がもうありませんが、プルリクエストは大歓迎です! 最も要望が多いのは、最新の API 変更で現在のリリースが壊れてしまったため、更新された Firefox 拡張機能です。 Passera 各ウェブサイトに対して強力でユニークなパスワードを、ローカルにもオンラインサービスにも保存する必要なく利用できるようにするシンプルなツールです。Linux/Mac/Windows 向けのコマンドラインツールと Android アプリとして提供されています。 Passera は、入力された任意のテキストを最大 64...

CVE-2026-48070

The open-source wiki software Docmost (prior to version 0.80.1 ) is vulnerable to an avatar URL path traversal flaw. Authenticated users can store attacker-controlled avatarUrl values which are subsequently processed by the avatar cleanup function without proper directory confinement on local-sto...

CVE-2026-48070 Docmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl values that are later reused by avatar cleanup without confinement to the intended directory on local-storage deployments. A low-privileged user can...

phonepe-sensitive-data-exposure-cve-2025-5154

-PhonePe Androidアプリにおけるユーザー機密データの安全でないローカル保存（未パッチ）- 発見者:hc4 報告日: 2025年4月 CVEステータス: CVE要求中（保留） CVE ID要求のためのCVE要求1862785 📌 概要 PhonePe Androidアプリ（テストバージョンv25.03.21.0）において、認証トークン、個人識別情報（PII）、KYCメタデータなどのユーザー機密データが、アプリのローカルSQLiteデータベースに暗号化されずに保存されている重大なローカル脆弱性が発見されました。...

CyberQRM

CyberQRM – 사이버 정량적 위험 관리 로컬에서 실행되는 오픈소스 플랫폼으로, FAIR v3.1정보 위험 요인 분석 프레임워크를 사용한 정량적 사이버 보안 위험 평가 를 제공합니다. 위협 모델링, 몬테카를로 시뮬레이션 실행, 통제 효과 측정, 위험 포트폴리오 관리 — 모두 브라우저에서 가능하며 클라우드 계정이 필요 없습니다. 기능 FAIR 기반 위험 모델링 — 각 시나리오에 대해 Threat Event Frequency, Vulnerability, Asset Value, Loss Event Impact를 삼각 분포, 로그...

CVE-2024-56428

CVE-2024-56428 iLabClient のローカルデータベース内の平文資格情報 設定（パスワードを含む）を読み出す iLabClient は、ラボサーバーから結果をダウンロードするために使用されます。設定データは、Apache Derby インスタンス iLabClient にローカルに保存されます。パスワードは平文で保存されます。これを読み取るには、まずローカルデータベースへの接続を確立する必要があります。例えば、CVE-2024-56429 に記載されている方法を使用します。 パスワードを読み出します: root@kitploit: select EINSTELLUNGE...

Astra Linux – Vulnerability in Ceph

A flaw was discovered in ceph-dashboard. The JSON Web Token JWT used for user authentication is stored by the frontend application in the browser’s localStorage, which is potentially vulnerable to attacks via XSS attacks. The most significant threat of this vulnerability is to data confidentialit...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed out-of-bounds access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can occur through tail calls. This occurs when two programs each utilize a cgroup local storage with...

The vulnerability of the bpf_selem_unlink() function in the kernel/bpf/bpf_local_storage.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a malicious actor to trigger a service failure.

The vulnerability of the bpfselemunlink function in the kernel/bpf/bpflocalstorage.c module, which is part of the BPF interpreter support for the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the `cgroup_storage_get_next_key()` function in the kernel/bpf/local_storage.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cgroupstoragegetnextkey function in the kernel/bpf/localstorage.c module, which is part of the Linux operating system’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

CVE-2026-84232

CVE-2026-84232 is a stored cross-site scripting (XSS) vulnerability in pulpcore's content serving application (python-pulpcore). The root cause is that files uploaded to Pulp file-type repositories are served with their original MIME type (e.g., text/html, image/svg+xml) and without a Content-Dis...

CVE-2026-55696: Improper Neutralization of Input During Web Page Generation

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAttachment in js/privatebin.js uses getAttachmentMimeType to accept attacker-controlled MIME types and uses getBlobUrl to create a same-origin blob before setting...

CVE-2026-74966

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74305: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in commit abad3d0bad72 "bpf: Fix oob access in cgroup local storage" is still incomplete. The prog-array compatibility check treats a program with no cgroup storag...

CVE-2026-73610

SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document...

CVE-2026-73610 SiYuan before v3.7.4 Information Disclosure via Local Storage

SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document...

EUVD-2026-57814

SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document...