Just-Metadata

Just-Metadata Just-Metadata هي أداة يمكن استخدامها لجمع معلومات استخباراتية سلبية حول عدد كبير من عناوين IP، ومحاولة استقراء العلاقات التي قد لا تكون واضحة بخلاف ذلك. تحتوي Just-Metadata على وحدات "جمع" تُستخدم لجمع البيانات الوصفية حول عناوين IP المحملة في الإطار عبر موارد متعددة على الإنترنت...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

inquisitor

Inquisitor إشعار هذا المشروع مكتمل جزئيًا فقط ولم أقم بعد بتنفيذ العديد من الميزات الموصوفة في منشور المدونة التالي الذي كتبته: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor هي أداة بسيطة لجمع المعلومات عن الشركات والمؤسسات باستخدام مصادر الاستخبارات مفتوحة المصدر OSINT. وهي مستوحاة...

voidaccess

VoidAccess OSINT auto-hébergeable pour transformer des requêtes de recherche sur le dark web en renseignements structurés sur les menaces. Conçu pour les chercheurs en sécurité, les équipes de renseignement sur les menaces et les enquêteurs autorisés qui ont besoin de collecte, d'enrichissement, ...

CVE-2020-0665

CVE-2020-0665 - تجاوز فلترة SID إثبات المفهوم لـ CVE-2020-0665، والذي يسمح بتجاوز فلترة SID في غابات Active Directory هجوم عبر الغابات. متطلبات الهجوم يجب ألا يكون جهاز Domain Controller الهدف قد تلقى تحديثات بعد فبراير 2020. الاختراق السابق لـ Domain Controller في الغابة الموثوقة يتطلب هذا الهجو...

Cooper-ndss-2022

Cooper : Tester le code de liaison des langages de script avec mutation coopérative Cooper utilise la mutation coopérative pour tester le code de liaison des langages de script afin de détecter des problèmes de sécurité mémoire. La mutation coopérative modifie simultanément le code du script et l...

the-endorser

🚨 لم يعد The Endorser قيد الصيانة. إذا كنت بحاجة إلى دعم أو استشارة لأنشطة OSINT الخاصة بك، أرسل لي بريدًا إلكترونيًا على [email protected] 🚨 The Endorser أداة OSINT تتيح لك استخراج العلاقات بين الأشخاص على LinkedIn عبر التأييدات/المهارات. اطّلع على المثال digraph، الذي يعتمد على ملفي الشخصي...

CVE-2022-30190_EXP_PowerPoint

CVE-2022-30190EXPPowerPoint Ceci est un exploit de CVE-2022-30190 sur PowerPoint. Modifiez le suffixe du fichier en 'zip' et décompressez le fichier, vous pouvez éditer \ppt\slides\rels\slide1.xml.rels et remplacer par l'ip:port de votre vps comme ceci, puis recompressez de la même manière et...

Payload relationship-query authorization bypass

Impact A readable collection could expose information about protected documents in a related collection. You are affected if: - You expose a readable collection with a relationship to a collection protected by access.read where constraints. Patches Users should upgrade Payload packages to = 3.90....

GHSA-7C34-32V3-J575 Payload relationship-query authorization bypass

Impact A readable collection could expose information about protected documents in a related collection. You are affected if: - You expose a readable collection with a relationship to a collection protected by access.read where constraints. Patches Users should upgrade Payload packages to = 3.90....

NPM: Payload relationship-query authorization bypass

NPM: Payload relationship-query authorization bypass vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

CVE-2026-105852 Payload relationship-query authorization bypass

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where...

CVE-2026-105852 Payload relationship-query authorization bypass

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where...

CVE-2026-105852 Payload relationship-query authorization bypass

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where...

CVE-2026-105852

The Payload headless content management system is vulnerable to an authorization bypass in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . The root cause is that querying a readable collection with a relationship to another collection can expose information about documents in ...

CVE-2025-53786

Exploit CVE-2025-53786 Ce projet fournit une preuve de concept PoC exploitant une vulnérabilité critique dans les déploiements hybrides de Microsoft Exchange Server, identifiée sous le nom CVE-2025-53786. Cette vulnérabilité permet à un attaquant disposant d'un accès administrateur à un serveur...

SOCMIntelligence

SOCMIntelligence Multi-platform SOCMINT / OSINT web tool. What it is SOCMIntelligence collects public data from many platforms, turns each result into charts, finding tables and a relationship graph , and merges everything into a single cross-platform identity graph. Because the same account gets...

OsintCase

OSINTCase Based onOSINTMapper by Geistnigma. This project is a modified and extended version of OSINTMapper with additional features and changes focused on investigation case management, intelligence analysis and evidence handling. A browser-based OSINT investigation and case mapping tool. Organi...

PT-2026-105859

Impact What kind of vulnerability is it? Who is impacted? It has two related instances that share the same root cause: a user-controlled model field is assigned verbatim to a form field's help text, which is rendered with Django's |safe filter render field.html, bypassing auto-escaping. In both...

automation-controller: automation-controller-container: automation-controller: instance group attachment to schedules and workflow job template nodes checks only read permission, allowing use of restricted (controlplane / other-tenant) instance groups and privilege escalation to control-plane code execution

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...