osint-suite-tools

重要！ 作者不承担使用此应用程序的任何责任。 此应用程序是根据GNU许可证发布的开源版本。然而，付费版本通过算法和数据交叉获得更好的结果，而此版本不执行这些操作。 为了使应用程序正常工作，需要使用我留给您的机器人进行大数据处理。不知道如何操作？为您的企业需要它？请联系我，我会教您如何操作。我的联系方式在下方。 版本| 许可证| 链接 ---|---|--- Dante's Gates Telegram Bot| 付费| https://quantika14.com/dantes-gates-telegram-bot/ Dante's Gates Mobile| 付费（注册后可搜索10次）...

CVE-2025-67875

CVE-2025-67875: ChurchCRM tiene XSS almacenado a través de Asignación de Propiedad de Persona que lleva al Secuestro de Sesión de Administrador Resumen Campo| Detalles ---|--- ID CVE| CVE-2025-67875 Gravedad| ALTA Aviso| Ver Aviso Descubierto por| Lukasz Rybak Productos Afectados ChurchCRM/CRM...

PT-2026-104657

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order...

CVE-2025-55287-POC

CVE-2025-55287-POC El Cross-Site Scripting Almacenado autenticado XSS en la aplicación Genealogy anterior a 4.4.0 permite la ejecución arbitraria de JavaScript y la escalada de privilegios desde el rol Editor+ a Administrador. Resumen Tipo de vulnerabilidad: Cross-Site Scripting Almacenado CWE-79...

WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.9 - Authenticated (Sales Person+) Privilege Escalation vulnerability

Authenticated Sales Person+ Privilege Escalation vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Groundhogg versions = 4.9...

CVE-2026-100575

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-100575

OpenClaw Slack versions before 2026.8.1 contain a vulnerability where multi-person direct messages fail to properly enforce sender allowlists . This flaw allows disallowed participants to bypass configured sender policies, enabling them to trigger Slack agents and gain unauthorized access to the ...

CVE-2026-100575: Missing Authorization

OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlists in multi-person direct messages. Disallowed participants can trigger Slack agents and access tools and data granted to those agents by bypassing configured sender policies...

CVE-2026-48541

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

CVE-2026-48541

Krayin CRM version 2.2.6 and prior is vulnerable to a stored client-side template injection leading to Cross-Site Scripting (XSS) . The root cause is the application's failure to sanitize the person name field , allowing authenticated attackers to inject Vue.js template expressions using double-b...

CVE-2026-48541 Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

EUVD-2026-86445

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

CVE-2026-48541 Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

CVE-2026-48541 Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

CVE-2026-48541: Improper Neutralization of Input During Web Page Generation

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

PT-2026-98262

Name of the Vulnerable Software and Affected Versions Krayin CRM versions prior to 2.2.7 Description Authenticated attackers can execute arbitrary JavaScript in other users' browsers via stored client-side template injection. This occurs when Vue.js template expressions, using double-brace syntax...

EUVD-2026-83648

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface...

CVE-2026-86552

CVE-2026-86552 affects the ZTE SmartLife APP , where the app dynamically generates new authentication parameters at runtime. An attacker possessing valid SmartLife authentication credentials can complete account registration with any arbitrary email address via the backend endpoint /account/perso...

CVE-2026-86552 A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface...

CVE-2026-86552: Improper Privilege Management

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface...