CVE-2026-108711 Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/workspaces

Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped API key holders to read workspace data because getorcreateworkspace checks only the workspace claim. Attackers can submit their parent workspace name to the POST /v3/workspaces...

CVE-2026-104684

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

remove-ai-watermarks

AI 워터마크 제거 직접 생성한 이미지와 비디오에서 AI 출처 표시를 제거합니다: Google Gemini 반짝임 워터마크 및 벤더 텍스트 마크와 같은 알려진 가시적 라벨; 직접적인 로컬 포맷 교란 또는 확산 재생성을 통한 비가시적 픽셀 워터마크; C2PA, EXIF, XMP, IPTC 및 관련 AI 메타데이터. 비디오 지원은 출처 식별, 가시적 표시와 메타데이터의 완전한 정리, 디렉터리 배치, 가시적 Sora, Veo, Seedance, Doubao, Dola, Hailuo AI, Kling AI 마크 제거, 그리고 비디오...

CVE-2026-98244

A flaw was found in the Linux kernel's Btrfs file system. When an error occurs while rebuilding the free space tree, the kernel fails to properly reset an internal state flag on failure paths. A local user could exploit this condition during filesystem operations, leaving the flag set on an activ...

CVE-2026-104684 Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors...

CVE-2026-104684

The Envira Gallery WordPress plugin, in versions prior to 1.16.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) via shortcode. The plugin fails to verify if a user is authorized to read a gallery before rendering it. This flaw allows authors to embed and expose non-public gallery m...

EUVD-2026-96742

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors...

analyzeMFT

AnalyzeMFT Статус : Все тесты проходят на Python 3.8-3.12 в Windows, macOS и Linux. Быстрый старт Install pip install analyzeMFT Basic usage python analyzeMFT.py -f MFTFILE -o output.csv --csv Generate test MFT for testing python -c "from src.analyzeMFT.testgenerator import createtestmft;...

ptcpdump

ptcpdump %20e2e %20e2e Английский | 中文 ptcpdump — это совместимый с tcpdump анализатор пакетов на основе eBPF, автоматически аннотирующий пакеты метаданными процесса/контейнера/пода, когда это возможно. Вдохновлён jschwinger233/skbdump. Содержание Возможности Установка Требования Использование...

fatt

66 61 74 74 2e снимать отпечатки со всего! Более подробная информация о методах снятия отпечатков, примеры использования и результаты исследований будут добавлены в репозиторий в ближайшее время. Оставайтесь на связи! Скрипт для извлечения сетевых метаданных и отпечатков, таких как JA3 и HASSH, и...

gitrecon

gitrecon Outil OSINT pour obtenir des informations depuis un profil Github ou Gitlab et trouver les adresses email des utilisateurs divulguées dans les commits. 📚 Comment ça fonctionne ? GitHub utilise l'adresse email associée à un compte GitHub pour lier les commits et autres activités à un prof...

goca

Goca 는 Go로 작성된 FOCA 포크로, 문서에서 메타데이터와 숨겨진 정보를 찾는 데 주로 사용되는 도구입니다. 이러한 문서는 웹 페이지에 있을 수 있으며, Goca 로 다운로드하여 분석할 수 있습니다. 이는 다양한 문서를 분석할 수 있으며, 가장 흔한 것은 Microsoft Office, Open Office, PDF 파일이며, 예를 들어 Adobe InDesign이나 SVG 파일도 분석합니다. 이러한 문서는 다음과 같은 검색 엔진을 사용하여 검색됩니다: Google Bing DuckDuckGo Yahoo Ask 그런 다...

advisories

В этом репозитории нет README...

guac

GUAC : Graphe pour la compréhension de la composition des artefacts Remarque : GUAC est en cours de développement actif – si vous souhaitez contribuer, veuillez consulter le guide du contributeur. GUAC est un projet en incubation de l'OpenSSF sous l'égide du Supply Chain Integrity WG. Graph for...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

pymeta

PyMeta PyMeta est une réécriture en Python3 de l'outil PowerMeta, créé par dafthack en PowerShell. Il utilise des requêtes de recherche spécialement conçues pour identifier et télécharger les types de fichiers suivants pdf, xls, xlsx, csv, doc, docx, ppt, pptx à partir d'un domaine donné en...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

user-scanner

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 2720+ total scan vectors —including 210+ email-integrated sites and 2510+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...