SnafflerParser

Snaffler 输出文件解析器 尤其是在大型环境中，Snaffler 的输出会变得非常庞大且耗时难以分析。 此脚本解析 Snaffler 输出文件（需要 TSV 格式）并： 将结果美化为可读表格，并导出为 TXT、CSV、HTML、JSON 或 PS Gridview。 生成交互式 HTML 报告，具有： 过滤（严重性、扩展名、修改年份）和全文搜索 动态排序 预览文本中的关键词高亮 直接操作（打开父文件夹、下载文件、复制 UNC、复制父 UNC） 带持久状态的审查工作流： ★ 标记（感兴趣） ✓ 完成（已审查） 可选的 unescape 模式，提高预览可读性（实验性）...

zeek2es

zeek2es.py 此 Python 应用程序将 Zeek 的 ASCII TSV 和 JSON 日志转换为 ElasticSearch 的批量加载 JSON 格式。 目录： 简介 安装 Elastic v8.0+ Docker 升级 zeek2es ES 摄取管道 数据过滤 Python 过滤器 按键过滤 命令行示例 命令行选项 要求 备注 Humio JSON 日志输入 数据流 辅助脚本 Cython 简介 想要查看同一连接 ID uid 或文件 ID fuid 对应的多个 Zeek 日志吗？以下是单个 uid 在 files.log、http.log 和 conn.log...

CVE-2023-36250

CVE-2023-36250 Vulnerabilidad de inyección CSV en el rastreador de tiempo de GNOME versión 3.0.2, que permite a atacantes locales ejecutar código arbitrario a través de un archivo .tsv manipulado al crear un nuevo registro. Tipo de Vulnerabilidad Inyección CSV Descubridor Bruno Teixeira Referenci...

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

UBUNTU-CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

CVE-2025-61873

Best Practical Request Tracker RT before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via ticket values when TSV export is used...

CVE-2025-61873

Summary: CVE-2025-61873 affects Best Practical Request Tracker (RT). The connected Debian advisory confirms the issue is a CSV injection vulnerability in RT exports to TSV from search results, caused by ticket values containing certain characters and exported in TSV, enabling injection. Debian li...

FreeBSD : RT -- CSV injection (b374df95-afa8-11f0-b4c8-792b26d8a051)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b374df95-afa8-11f0-b4c8-792b26d8a051 advisory. Gareth Watkin-Jones from 4armed reports: RT is vulnerable to CSV injection via ticket values with speci...

[SECURITY] [DSA 6032-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6032-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 22, 2025 https://www.debian.org/security/faq -...

Debian dsa-6032 : request-tracker4 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-6032 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6032-1 [email protected] https://www.debian.org/security/...

SurrealDB has local file read of 2-column TSV files via analyzers

An authenticated system user at the root, namespace, or database levels can use the DEFINE ANALYZER statement to point to arbitrary file locations on the file system, and should the file be tab separated with two columns, the analyzer can be leveraged to exfiltrate the content. This issue was...

GHSA-2CVJ-G5R5-JRRG SurrealDB has local file read of 2-column TSV files via analyzers

An authenticated system user at the root, namespace, or database levels can use the DEFINE ANALYZER statement to point to arbitrary file locations on the file system, and should the file be tab separated with two columns, the analyzer can be leveraged to exfiltrate the content. This issue was...

[SECURITY] Fedora 39 Update: pandoc-3.1.3-29.fc39

Pandoc is a Haskell library for converting from one markup format to another. The formats it can handle include - light markup formats many variants of Markdown, reStructuredText, AsciiDoc, Org-mode, Muse, Textile, txt2tags - HTML formats HTML 4 and 5 - Ebook formats EPUB v2 and v3, FB2 -...

tsv-buesum.de Cross Site Scripting vulnerability OBB-3831871

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-bad-blankenburg.de Cross Site Scripting vulnerability OBB-3830541

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-betzingen.de Improper Access Control vulnerability OBB-3820487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-wuchzenhofen.de Improper Access Control vulnerability OBB-3820488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-milbertshofen-fussball.de Improper Access Control vulnerability OBB-3780338

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-leinfelden.de Improper Access Control vulnerability OBB-3775245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tsv-langenau.de Improper Access Control vulnerability OBB-3772837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...