Watcher

AI驱动的自动化网络安全威胁检测平台 Watcher 是一个基于 Django 和 React JS 的平台，旨在通过 AI 驱动的威胁情报分析 发现并监控新兴网络安全威胁。它可以部署在 Web 服务器上，或通过 Docker 快速运行。 Watcher 的能力 Watcher 通过全面的威胁检测和监控能力，增强您的安全运营： AI 驱动的威胁情报 - 将原始威胁数据转化为可操作的情报：自动生成每周摘要（涵盖前五大热门网络安全话题）、实时突发新闻警报（当威胁出现时即时推送）、支持对任意安全关键词进行按需摘要（包括相关 CVE 和威胁行为者详细信息）。 CVE 与勒索软件情报 -...

searxng

.. SPDX-License-Identifier: AGPL-3.0-or-later .. metasearch engine: https://en.wikipedia.org/wiki/Metasearchengine .. Installation guide: https://docs.searxng.org/admin/installation.html .. Configuration guide: https://docs.searxng.org/admin/settings/index.html .. CONTRIBUTING:...

DorXNG

DorXNG 🔎🌎 DorXNG 是一个现代化解决方案，用于通过多个上游搜索提供商的先进搜索引擎操作符来收集 OSINT 数据。在后端，它利用了一个专门构建的容器化镜像 SearXNG，这是一个自托管、可破解、注重隐私的元搜索引擎。 我们的 SearXNG 实现将所有搜索查询通过 Tor 网络路由，同时每十秒通过 Tor 的 MaxCircuitDirtiness 配置指令刷新电路。我们还禁用了 SearXNG 的所有客户端超时功能。这些设置允许规避在多次重复搜索查询中常见的搜索引擎限制。 DorXNG 客户端应用程序使用 Python3 编写，并与 SearXNG API...

EUVD-2017-6234

Malware in sbrugna...

EUVD-2024-0191

Malicious code in bioql PyPI...

Care what you share

Welcome to this week's edition of the Threat Source newsletter. As we navigate our daily routines, certain tasks become second nature to us, especially if they are integral to our professions. However, what feels instinctive to one person might be foreign to another. This disparity is akin to a...

Whoogle Search Path Traversal vulnerability

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...

Whoogle Search Cross-site Scripting vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in requests.py. The returned...

GHSA-3Q6G-QMPX-RQW4 Whoogle Search Server-Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

Server side request forgery (ssrf)

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

PYSEC-2024-18

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

Design/Logic Flaw

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The config function in app/routes.py does not validate the user-controlled name variable on line 447 and configdata variable o...

Cross site scripting

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in requests.py. The returned...

CVE-2024-22205

CVE-2024-22205 (Whoogle Search) describes a server-side request forgery in versions ≤ 0.8.3 of Whoogle Search, where the window endpoint fails to sanitize user input from the location variable and passes it to the send method, causing the server to issue GET requests on internal or external resou...

CVE-2024-22205 Whoogle Search Server Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the window endpoint does not sanitize user-supplied input from the location variable and passes it to the send method which sends a GET request on lines 339-343 in request.py, which leads to a server-side request...

CVE-2024-22204

CVE-2024-22204 affects Whoogle Search (self-hosted metasearch engine). The issue arises in version 0.8.3 and earlier where config handling in app/routes.py does not validate user-controllable name and config_data, enabling path traversal via os.path.join and later pickle.dump of config data. The ...

CVE-2024-22203

Whoogle Search (self-hosted metasearch) is affected in versions before 0.8.4 by an SSRF flaw: the element method in app/routes.py fails to validate user-controlled src_type and element_url, forwarding them to send which performs a GET request. This allows crafting requests to internal and externa...

CVE-2024-22203 Whoogle Search Server Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in request.py, which leads to a...

CVE-2024-22203 Whoogle Search Server Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in request.py, which leads to a...

CVE-2017-14738

FileRun version 2017.09.18 and below suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module under the search function...