mnemosyne

Mnemosyne is a generic Windows-based memory scraping tool. It scans a process memory space for a search string or regex unicode and ascii then if found, spits these out either to stdout, a file or a socket to a remote listener. The utility is useful for memory scraping a process, as a...

ocr-recon

ocr-recon This tool is useful to find a particular string in a list of URLs using tesseract's OCR Optical Character Recognition capabilities Usage Usage: python3 ocr-recon.py listwithURLs stringtosearch...

xcavator

xcavator A network data locater using credentials obtained during penetration tests. Xcavator is a tool that scans a range of IP addresses for services that host files FTP, FTPS and SMB at the moment and for given credentials it will try to download everything it can and scan within the files for...

pecli

PEcli Tool to analyze PE files in python 3. Current features : Show information about the file import, exports, resources Search for interesting information in the file abnormal resources, peid... Dump sections or resources Check size Search for a string in the file Installation You can install i...

ocr-recon

ocr-recon Esta herramienta es útil para encontrar una cadena específica en una lista de URLs utilizando las capacidades de OCR Reconocimiento Óptico de Caracteres de Tesseract. Uso Uso: python3 ocr-recon.py listwithURLs stringtosearch...

discourse-CVE-2023-45806

yksivaihde-CVE-2023-45806 CVE: https://github.com/discourse/discourse/security/advisories/GHSA-hcgf-hg2g-mw78 Patch: https://github.com/discourse/discourse/commit/7d484864fe91ff79c478f57e7ddb1235d701921e usage: fixquoteattribution"Username|", , where "Username|" is the unique search string within...

CVE-2026-78691

ash_sql (an Elixir query library from the Ash ecosystem) is vulnerable to LIKE wildcard injection in its contains/2, string_starts_with/2, and string_ends_with/2 filters. The escape helpers prefix % and _ with a backslash but fail to escape a pre-existing backslash in user input, so \% becomes a ...

EEF-CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Summary Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an...

CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...

CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...

CVE-2026-34400

Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API q= was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version...

CVE-2026-34400 alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API

Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API q= was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version...

PT-2026-29356

Name of the Vulnerable Software and Affected Versions Alerta versions prior to 9.1.0 Description Alerta, a monitoring tool, had a SQL injection issue in the Query string search API. The vulnerability stemmed from directly interpolating user-supplied search terms into SQL strings via f-strings whe...

CVE-2026-34400: Improper Neutralization of Special Elements used in an SQL Command

Alerta is a monitoring tool. Prior to version 9.1.0, the Query string search API q= was vulnerable to SQL injection via the Postgres query parser, which built WHERE clauses by interpolating user-supplied search terms directly into SQL strings via f-strings. This issue has been patched in version...

Alerta SQL注入漏洞

Alerta is a Python-based monitoring system developed by individual developers. Versions prior to Alerta 9.1.0 contained a SQL injection vulnerability. This vulnerability stems from the Query String Search API directly inserting user-provided search terms into the SQL string, which could lead to S...

AZL-76457 CVE-2025-63651 affecting package fluent-bit 3.0.6-6

A use-after-free in the mkstringcharsearch function mkcore/mkstring.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

PT-2026-5338

Name of the Vulnerable Software and Affected Versions Monkey versions prior to commit f37e984 Description A use-after-free issue exists in the mk string char search function located in mk core/mk string.c. This allows attackers to cause a Denial of Service DoS by sending a crafted HTTP request to...

CVE-2025-63651

A use-after-free in the mkstringcharsearch function mkcore/mkstring.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2025-63651

A use-after-free in the mkstringcharsearch function mkcore/mkstring.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...

CVE-2025-63651

The Monkey Server , an open-source HTTP server developed by Monkey I/O , contains a use-after-free vulnerability in the mk_string_char_search function located in mk_core/mk_string.c. This flaw exists in versions prior to commit f37e984 . An unauthenticated attacker can exploit this by sending a c...