xolo

XOLO Autore: ET Lownoise Versione: 1.0 Strumento per esplorare, visualizzare e interagire con i collegamenti di SQL Server in un grafico d3 per aiutare nelle esercitazioni del team di pentest hacking nelle vostre valutazioni del rischio rosso/blu/viola/... Requisiti: root@kitploit: Requests==2.18...

epagneul

epagneul Epagneul ist ein Werkzeug zur Visualisierung und Untersuchung von Windows-Ereignisprotokollen. Bereitstellung Erfordert, dass Docker und docker-compose installiert sind. Installation root@kitploit: make Offline-Bereitstellung Erstellen Sie auf einer mit dem Internet verbundenen Maschine...

clairvoyance

🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; dal francese clair che significa chiaro e voyance che significa visione da Wikipedia. Panoramica clairvoyance crea una visualizzazione colorata della protezione delle pagine dell'intero spazio di indirizzi di un processo a 64 bit utente e kernel in...

Quantickle

Quantickle - Visualizzazione di grafi di rete per intelligence sulle minacce Uno strumento di visualizzazione di grafi di rete basato su browser, costruito su Cytoscape.js. Quantickle aiuta a visualizzare e analizzare dati connessi di qualsiasi tipo, ma è orientato verso l’intelligence sulle...

hexcymatix

hexcymatix hexcymatix è un progetto di ricerca esplorativo, vagamente concepito come uno strumento di reverse engineering binario per estrarre informazioni strutturali da pattern di byte ripetuti nei file binari. L'idea non si è mai concretizzata in uno strumento utilizzabile, ma produce comunque...

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...

CVE-2026-46684

CVE-2026-46684 (DataEase) : Open-source data visualization tool DataEase prior to 2.10.23 is affected by an unauthorized command execution vulnerability. The issue stems from enterprise token handling where TokenFilter#doFilter() may pass X-DE-TOKEN values to TokenUtils.validate(), which only che...

CVE-2026-45320

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

PT-2026-56251

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description An authenticated attacker can bypass previous fixes for the H2 zip protocol and file dropper. By uploading a zip archive disguised with a .ttf extension via the FontManage.saveFile function, the...

PT-2026-56244

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The /de2api/share/proxyInfo share interface generates and returns an X-DE-LINK-TOKEN before validating the share password or ticket. This allows unauthenticated attackers who possess a protected...

Exploit for Deserialization of Untrusted Data in Facebook React

🎨 react2shellexploitvisualized - Visualize Vulnerabilities wit...

CVE-2025-64163

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

EUVD-2025-37957

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...

EUVD-2025-6385

Malicious code in bioql PyPI...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version before 2.10.12 has a security vulnerability , the vulnerabilit...

VulnCheck KEV: CVE-2024-30269

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. The vulnerability has...

编号撤回

dtale is a pandas data structure visualization tool from Man Open Source. This CVE number has been withdrawn...

NagVis 安全漏洞

NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. NagVis has a security vulnerability that stems from vulnerability to cross-site scripting attacks...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase v1.18.19 before the version of a security vulnerability , the vulnerability stems from ClickHous...