Quantickle

Quantickle - Visualisation de graphes réseau pour le renseignement sur les menaces Un outil de visualisation de graphes réseau basé sur navigateur, construit sur Cytoscape.js. Quantickle permet de visualiser et d'analyser des données connectées de tout type, mais est orienté vers le renseignement...

xolo

XOLO Auteur : ET Lownoise Version : 1.0 Outil pour crawler, visualiser et interagir avec les liens des serveurs SQL dans un graphe D3 pour aider dans vos exercices d'équipe de pentest red/blue/purple/.../évaluations de risques. Prérequis : Requests==2.18.4 Flask==0.12.2 Json Pypyodbc...

epagneul

epagneul Epagneul est un outil pour visualiser et investiguer les journaux d'événements Windows. Déploiement Nécessite que docker et docker-compose soient installés. Installation make Déploiement hors ligne Sur une machine connectée à internet, construisez une version hors ligne : make release Ce...

hexcymatix

hexcymatix hexcymatix — это экспериментальный исследовательский проект, в общих чертах задуманный как инструмент реверс-инжиниринга бинарных файлов для извлечения структурной информации из повторяющихся байтовых последовательностей. Идея так и не воплотилась в полноценный инструмент, но по-прежне...

clairvoyance

🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; от французского clair, означающего ясный , и voyance, означающего видение из Википедии. Обзор clairvoyance создает красочную визуализацию защиты страниц всего 64-битного адресного пространства процесса user и kernel, работающего в 64-битном ядре Window...

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of...

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as $var and SqlparserUtils.handleVariableDefaultValue inserts them with String.replace without escaping or parameterizatio...

CVE-2026-46684

CVE-2026-46684 (DataEase) : Open-source data visualization tool DataEase prior to 2.10.23 is affected by an unauthorized command execution vulnerability. The issue stems from enterprise token handling where TokenFilter#doFilter() may pass X-DE-TOKEN values to TokenUtils.validate(), which only che...

CVE-2026-45320

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase dashboard SQL variables such as $deptId are processed by SqlparserUtils.transFilter, whose final branch returns raw user input for non-in and non-between operators before SubstitutedSql.replace"$var", valu...

PT-2026-59324

Untrusted Project Bootstrap Code Execution via CLAUDE PROJECT DIR Summary The Cortex MCP server neuro-cortex-memory treats the CLAUDE PROJECT DIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the open...

EUVD-2026-42099

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid...

EUVD-2026-42096

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota and Y-axis filters embed attacker-controlled filter values directly into generated SQL in Quota2SQLObj.getYWheres without applying the SQL literal validation and escaping used by other filter paths,...

PT-2026-56251

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description An authenticated attacker can bypass previous fixes for the H2 zip protocol and file dropper. By uploading a zip archive disguised with a .ttf extension via the FontManage.saveFile function, the...

PT-2026-56244

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The /de2api/share/proxyInfo share interface generates and returns an X-DE-LINK-TOKEN before validating the share password or ticket. This allows unauthenticated attackers who possess a protected...

Exploit for Deserialization of Untrusted Data in Facebook React

🎨 react2shellexploitvisualized - Visualize Vulnerabilities wit...

CVE-2025-64163

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

EUVD-2025-37957

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...

CVE-2025-64163: Server-Side Request Forgery (SSRF)

DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15...

EUVD-2025-6385

Malicious code in bioql PyPI...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version before 2.10.12 has a security vulnerability , the vulnerabilit...