MOVEit-Transfer-Data-Breach-Analysis.

MOVEit-Transfer-Data-Breach-Analysis. 针对CS50网络安全课程，对2023年MOVEit Transfer数据泄露事件（CVE-2023-34362）的详细分析。本项目探讨了未经身份验证的SQL注入的技术影响及其对全球数据隐私的后果，影响了超过2,700家组织。特别感谢David J. Malan教授及CS50全体工作人员。...

CVE-2022-24124

Préface Casdoor est une plateforme d'authentification centralisée à authentification unique SSO basée sur OAuth 2.0/OIDC. Identifiant Identifiant CVE : CVE-2022-24124 Identifiant CNPD : CNPD-202201-7304 Versions affectées Niveau de risque : Élevé 7.5 HIGH POC/EXP : Déjà divulgué Casdoor Casdoor...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 Repository con tutto ciò che ho per tracciare l'impatto di WSFTP CVE-2023-40044 Include organizzazioni e domini potenzialmente interessati che utilizzano metodi header. Ho anche creato un news ticker che tiene traccia delle nuove notizie su MOVEit e WSFTP, disponibile su...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

octosuite

Terminal-based toolkit for GitHub data analysis. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite Usage T...

Aaia

NOTA Questo repository non è in fase di sviluppo attivo. Tuttavia, sono aperto ad accettare PR. Aaia funziona ancora poiché non ci sono stati cambiamenti significativi in termini di API AWS che utilizza per raccogliere dati. Aaia Analisi di Identità e Accesso Nota: Espansione creata dopo che il...

BiBi-Windows-Wiper-Analysis

Technische Analyse des BiBi-Windows-Wipers, der israelische Organisationen angreift Am 30. Oktober entdeckte das Incident-Response-Team von Security Joes einen neuen Linux-Wiper namens „BiBi-Linux“ , der von einer pro-Hamas-Hacktivistengruppe eingesetzt wurde, um deren Infrastruktur zu zerstören...

CVE-2026-58417 REST API exposes organization membership of private organizations to public

REST API exposes organization membership of private organizations to public...

CVE-2026-58417 REST API exposes organization membership of private organizations to public

REST API exposes organization membership of private organizations to public...

CVE-2026-58417

The CVE-2026-58417 issue affects Gitea: the REST API endpoint /orgs/{org}/public_members/{username} leaks organization membership of private orgs to public. According to the sources, an authenticated user can probe membership of a user in a private org and receive a response (PoC shows HTTP 204) ...

CVE-2025-14779

The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...

CVE-2025-14779

The vulnerability CVE-2025-14779 affects the Secret Type Management REST API in WSO2 Identity Server. The issue is improper access control during deletion of a secret type: the on-delete cascade does not enforce organizational boundaries, allowing removal of secrets associated with that type acro...

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts. The intrusions reached at least 165 organizations and exposed records belonging to at...

EUVD-2026-52283

Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations. Attackers can supply a role UUID from another organization to groupsroles.php handle...

CVE-2026-67329 @better-auth/stripe before 1.6.21 Authorization Bypass via Organization Subscription

@better-auth/stripe versions = 1.4.11 and = 1.7.0-beta.0 and 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The middleware validates the organization ID taken from the request query string against the authorizeReference callback, but the handler reads the...

CVE-2026-67329 @better-auth/stripe before 1.6.21 Authorization Bypass via Organization Subscription

@better-auth/stripe versions = 1.4.11 and = 1.7.0-beta.0 and 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The middleware validates the organization ID taken from the request query string against the authorizeReference callback, but the handler reads the...

Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations...

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

Anthropic on Thursday became the latest artificial intelligence AI company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing without its knowledge. The AI firm said the...