CVE-2026-77875

Hide Photos – Secure vault (version 4.1.0 ) stores vault media and wallet records in shared external storage , where the data is not bound to the application's calculator-style passcode authentication boundary. A local actor with access to shared external storage—such as through an authorized non...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forense - CVE-2024-0044 Una herramienta robusta de forense digital para extraer y analizar artefactos de Google Chrome desde dispositivos Android Características • Instalación • Uso • Documentación 👤 Información del Autor Autor: JackTekno GitHub: github.com/JackTekno 📋 Resumen Esta...

ntdsdotsqlite

NTDS.Sqlite Este software puede utilizarse directamente como una utilidad CLI o como una biblioteca para obtener una base de datos SQLite a partir de un archivo NTDS.DIT. Los bits cifrados pueden descifrarse si se proporciona también el hive del sistema asociado. Instalación python -m pip install...

Hundred OSINT

h-osint h-osint A local-first, keyboard-driven OSINT workbench for the terminal — Neovim-style keybinds, Lua config, 12 themes, and a local SQLite case store. No account, no cloud backend, no telemetry. root@kitploit: kitty » h-osint Repository: h-osint · Binary: h-osint · Website:...

CVE-2026-69084-PoC

CVE-2026-69084 / CVE-2026-69085 — SiYuan Arbitrary SQL Execution & SQLi CVE-2026-69084: Arbitrary SQL Execution via /api/search/searchEmbedBlock CVE-2026-69085: SQL Injection via /api/filetree/searchDocs CVSS 9.9 Critical each · CWE-89 · SiYuan = v3.7.2 fixed in v3.7.3 Published 2026-08-03 · no...

DOGE

DOGE 暗网OSINT图形浏览器 仍在开发中，可以正常工作。 你应该将此工具与 Darknet OSINT Transform 结合使用。 注意 查询原型：SELECT DISTINCT customcolumnname AS input, anothercustomname AS output FROM sometable，显然你可以添加其他选项如 WHERE、ORDER BY 等。 使用方法 Database file：数据库文件名（sqlite3），例如：db.sqlite3 Graph file：无用（目前） Icon From："from" 实体的类型（email -...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – Fuga de información de coincidencias SQLite FTS3 mediante manipulación de consultas Código del programa Python root@kitploit: sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USI...

ransomwatch

RansomWatch RansomWatch 是一款勒索软件泄露站点监控工具。它会爬取多个勒索软件泄露站点上的所有条目，将数据存储在 SQLite 数据库中，并在出现新受害者或受害者被删除时通过 Slack 或 Discord 发送通知。 注意：RansomWatch 并未针对最新站点进行积极更新，主要依赖第三方贡献。请提交 Pull Request，和/或通过Twitter 私信联系我。 配置 在 configvol/ 目录下，请将 config.sample.yaml 复制为 config.yaml，并添加以下内容： 泄露站点...

EulerOS Virtualization 2.11.0 : sqlite (EulerOS-SA-2026-3561)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service...

EulerOS Virtualization 2.11.1 : sqlite (EulerOS-SA-2026-3474)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service...

EulerOS 2.0 SP10 : sqlite (EulerOS-SA-2026-3771)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

EulerOS Virtualization 2.12.1 : sqlite (EulerOS-SA-2026-3620)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause...

CVE-2025-26794-exploit

CVE-2025-26794: Exploit de inyección SQL ETRN en Exim Una herramienta de explotación proof-of-concept para CVE-2025-26794, que demuestra la vulnerabilidad de inyección SQL en el servidor de correo Exim 4.98 mediante el comando ETRN cuando se utiliza almacenamiento DBM de SQLite. ⚠️ Aviso Legal SOL...

burp-reflux

Analizador de registros reflux de Burp Proxy: conversor de registros de texto de Burp proxy a CSV y SQLLite Reflux para el análisis y conversión de registros de Burp Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Ollie Whitehouse, ollie punto whitehous...

DAMM

DAMM Una herramienta de análisis de memoria de código abierto construida sobre Volatility. Está pensada como un banco de pruebas para técnicas nuevas e interesantes que se pondrán a disposición de la comunidad. Estas técnicas son un intento de acelerar el proceso de investigación mediante la...

Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

Summary !IMPORTANT Only instances running on the SQLite driver better-sqlite3 are affected; SQLite is usually used in development/testing backend, so production deployments on PostgreSQL or MySQL/MariaDB are unaffected. The StringOperators.regex filter exposed on the public Shop GraphQL API is...

CVE-2026-63460

Vendure , an open-source headless commerce platform, is vulnerable to an unauthenticated Regular Expression Denial of Service (ReDoS) prior to version 3.6.5 . The public Shop GraphQL API exposes StringOperators.regex, which passes a user-supplied pattern to a synchronous JavaScript UDF registered...

CVE-2026-63460 Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop GraphQL API allows an unauthenticated caller to supply a catastrophically backtracking pattern through StringOperators.regex. packages/core/src/service/helpers/list-query-builder/parse-filter-params.ts passes th...

CVE-2025-68613_Scanner

Escáner de Internet n8n CVE-2025-68613 Una herramienta GUI basada en Tkinter para descubrir instancias n8n expuestas públicamente a través de Shodan y probar su exposición a CVE‑2025‑68613 en un amplio rango de versiones. El escáner: Consulta Shodan con múltiples huellas título, marcadores HTML,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...