Ultimate-Social-Scrapers

Scrapers Sociales Definitivos de Cyfy Labs 📢 Actualización Importante 📢 Cyfy Labs ya no está activo. Gracias por todo tu apoyo en este camino! 🫶 Cyfy Labs proporciona herramientas modernas de scraping de redes sociales. Nuestros productos permiten a empresas e investigadores recopilar cientos de...

web

Aún no tengo datos. Es un error mayúsculo teorizar antes de tener datos. Insensiblemente uno comienza a torcer los hechos para que se ajusten a las teorías, en lugar de teorías que se ajusten a los hechos. 🚧 ⚠️ Trabajo en progreso; Aún no listo para usar,todavía ⚠️ 🚧 Presentando OSINTBuddy...

osintbuddy

Aún no tengo datos. Es un grave error teorizar antes de tener datos. Insensiblemente uno empieza a torcer los hechos para que se ajusten a las teorías, en lugar de ajustar las teorías a los hechos. | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | Presentando...

OSINT-Search

Descripción de OSINT-Search Script en Python que aplica técnicas OSINT buscando datos públicos usando direcciones de correo electrónico, números de teléfono, dominios, direcciones IP o URLs. Crea una cuenta en https://pipl.com/api y obtén la clave API. Crea una cuenta en https://www.opencnam.com/...

coeus-ci

Coeus CI Inteligencia Competitiva que lo ve todo. Nombrado en honor a Coeus SEE-us, el Titán griego de los cien ojos de la mente inquisitiva — cuyo nombre significa literalmente "indagar". CI significa Inteligencia Competitiva. Una herramienta OSINT de inteligencia empresarial que construye...

cveye

C V E y e Zero-dependency CLI for CVE details & expl...

Belati

Belati Belati - La navaja suiza tradicional para OSINT Belati es una herramienta para recolectar datos públicos y documentos públicos de sitios web y otros servicios con fines de OSINT. Esta herramienta está inspirada en Foca y Datasploit para OSINT : Versión actual v0.2.4 Belati en acción ¿Por q...

MAL-2026-10225 Malicious code in @logdna-web/shared (npm)

The @logdna-web/shared package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the @logdna-w...

CVE-2026-24755

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource...

CVE-2026-6376 Missing authentication for critical function in SpiceJet Online Booking System

A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or verification mechanisms. This results in exposure of extensive personal, travel, and booking metadata to any unauthenticated user...

CVE-2026-40259

SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authentication that accepts publish-service RoleReader tokens. The handler passes a caller-controlled id directly to a model...

PT-2026-27232

Security Advisory — Page Content Retrieval Improper Authorization Summary An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

The Iranian Cyber Capability 2026

The Iranian Cyber Capability 2026 By John Fokker and Ernesto Fernández Provecho · March 5, 2026 Introduction In 2024, we published an assessment of the Islamic Republic of Iran’s cyber capabilities, outlining the structure, tradecraft, and strategic intent of Iranian-aligned threat actors. The co...

CVE-2026-24422

phpMyFAQ is an open source FAQ web application. In versions 4.0.16 and below, multiple public API endpoints improperly expose sensitive user information due to insufficient access controls. The OpenQuestionController::list endpoint calls Question::getAll with showAll=true by default, returning...

Directory Traversal

Overview gapless-crypto-data is a Cryptocurrency OHLCV data collection with gap-free guarantee. Retrieves microstructure-enriched kline data from Binance Public Data Repository with automatic gap detection and filling. Affected versions of this package are vulnerable to Directory Traversal due to...

Password Strength Analysis through Social Network Data Exposure: A Combined Approach Relying on Data Reconstruction and Generative Models

Although passwords remain the primary defense against unauthorized access, users often tend to use passwords that are easy to remember. This behavior significantly increases security risks, also due to the fact that traditional password strength evaluation methods are often inadequate. In this...

EUVD-2018-1384

Malware in sbrugna...

EUVD-2022-52762

Malicious code in bioql PyPI...

CVE-2025-27238 API hostprototype.get lists data to users with insufficient authorization.

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...

PT-2025-36741

Name of the Vulnerable Software and Affected Versions: Open5GS versions prior to 2.7.3 Description: An issue in Open5GS allows a remote attacker to cause a denial of service by sending a crafted Create Session Request message to the SMF PGW-C, utilizing the IP address of a legitimate UE in the PD...