inquisitor

Inquisitor 공지 이 프로젝트는 부분적으로만 완료되었으며, 아래 블로그 게시물에 설명된 많은 기능을 아직 구현하지 못했습니다: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor는 오픈소스 인텔리전스OSINT 소스를 활용하여 회사 및 조직에 대한 정보를 수집하는 간단한 도구입니다. Maltego와 recon-ng의 작동 방식에서 크게 영감을 받았으며, 이 도구는 해당 도구들의 일부 기능을 재구현하면서 에셋 유형 위에 의견 기반 의미론opinion-based...

CVE-2022-24818

CVE-2022-24818: Десериализация Java через непроверяемые JNDI-запросы в GeoServer и GeoTools Библиотека GeoTools содержит ряд источников данных, которые могут выполнять непроверяемые JNDI-запросы, что, в свою очередь, может быть использовано для десериализации классов и приводить к произвольному...

TelemetrySource

TelemetrySource TelemetrySource는 다양한 텔레메트리 소스에서 이벤트를 트리거하는 함수를 매핑하기 위해 만들어진 프로젝트입니다. 기본 매핑 시트: 이벤트 매핑 Google 시트 현재 매핑된 소스: Sysmon Windows 보안 이벤트 Microsoft-Windows-Security-Auditing 위협 인텔리전스 이벤트 Microsoft-Windows-Threat-Intelligence 각 소스에는 매핑이 어떻게 작동하는지 이해하는 데 필요한 정보를 담은 자체 README 파일이 있습니다. 블로그: 저...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.801...

disclo

disclo 도메인 연락처 찾기. 도메인을 입력하면 12개의 수동 소스에서 병렬로 해당 도메인과 연관된 모든 이메일, 핸들, 리드를 가져옵니다. root@kitploit: $ python disclo.py gitlab.com disclo - gitlab.com ---------------------------------------------------------------------- hackerone https://hackerone.com/gitlab url 예시: root@kitploit: python disclo.py...

coeus-ci

Coeus CI Конкурентная разведка, которая видит всё. Назван в честь Coeus Си-ус, стоглазого греческого титана пытливого ума — чье имя буквально означает «вопрошающий». CI расшифровывается как Competitive Intelligence Конкурентная разведка. Инструмент бизнес-аналитики и OSINT, который строит профили...

CVE-2026-87629

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit an incorrect authorization vulnerability in the Sources component. This could lead to the disclosure of sensitive information...

DEBIAN-CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87629

Google Chrome prior to version 153.0.8010.36 is affected by an incorrect authorization vulnerability in the Sources component. A remote attacker leveraging social engineering can leak sensitive information via a crafted HTML page. Chromium rates the security severity as Low . The CVSS 3.1 base sc...

CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-87629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information...

PT-2026-88729

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2024-11080

creationtimestamp| type| source ---|---|--- 2026-09-05 09:48:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iboyimczc3bcm 2026-09-05 10:07:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muraacd22e2f 2026-09-05 10:30:05+00:00| seen|...

EUVD-2026-70104

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

EUVD-2026-67691

Budibase before 3.41.3 fails to enforce per-table role restrictions on the POST /api/datasources/query endpoint, allowing low-privilege BASIC users to read, create, update, or delete rows in any table regardless of configured permissions. Attackers with BASIC role can submit crafted query request...

CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81335

Baserow before 2.3.1 is vulnerable to unauthenticated data disclosure via its Application Builder data sources. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/data_sources/views.py use a permission class that admits any caller, and DataSourceService.dispatch_data_so...

CVE-2026-78555

creationtimestamp| type| source ---|---|--- 2026-08-24 20:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu6ksdv5v25 2026-08-24 21:08:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hsi2l5kmjjwul 2026-08-24 22:07:41+00:00| seen|...