GeoSentinel

🌍 GeoSentinel GeoSentinel は、世界中の動きをリアルタイムで追跡する地理空間監視プラットフォームです。 航空機と船舶のルート、ライブ座標、地理データを統合システムに集約し、分析、可視化、意思決定のための明確な地理的・地政学的認識を提供します。🚀 !TIP 🚀 ブログを訪問 Geo Sentinel 更新情報 & インサイト 🌐 ブログを開く 🚀 公式ウェブサイト 🌍 サイトを訪問 🚀 公式ウェブサイト 🌍 サイトを訪問 !CAUTION 🚨 Geo Sentinel AI アップデート — 最新の Geo Sentinel AI リリースとお知らせをチェック。 📝...

Ominis-OSINT

Ominis-OSINT: 웹 헌터 🌐🕵️‍♂️ SURPRISE UPDATE SCHEDULED FOR DEVELOPMENT 일정이 변경되었습니다. WINTERGATE가 이 프로젝트를 확장할 예정입니다 Github Actions Visit actions/workflows and chose any of the 3 options to try out Ominis OSINT right from github! Web Search :...

querytool

QUERYTOOL - OSINT용으로 설계된 Google 스프레드시트 소개 QueryTool은 Google 스프레드시트에 통합된 전문 OSINT 프레임워크로, 다양한 검색 엔진에 대한 쿼리를 생성하여 특정 결과를 얻는 과정을 간소화하는 것을 목표로 합니다. 정찰의 초기 단계로 설계된 QueryTool을 통해 사용자는 용어, 사용자 이름, 이메일 주소, 파일 등에 대한 정교한 검색을 수행할 수 있습니다. 주로 검색 결과에 직접 액세스할 수 있는 리소스 집합으로 구성되어 있으며, 주관적인 도구 및 서비스 모음을 통해 사이버 수사...

robin

Robin: AI-Powered Dark Web OSINT Tool Robin is an AI-powered tool for conducting dark web OSINT investigations. It leverages LLMs to refine queries, filter search results from dark web search engines, and provide an investigation summary. Installation • Contributing • Acknowledgements Architectur...

CVE-2017-5638

CVE-2017-5638 Google Dork : "site:com filetype:action"...

Malicious code in @or-sdk/web-search (npm)

npm/@or-sdk/web-search is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-11738 Malicious code in @or-sdk/web-search (npm)

npm/@or-sdk/web-search is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the web search process. An attacker can gain unauthorized access to restricted operations by exploiting misconfigured input paths. Remediation Upgrade openclaw...

EUVD-2026-43538

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198

OpenClaw 2026.5.28 before 2026.6.6 contains an authorization bypass in native web search that lets lower-trust callers perform actions requiring stronger policy checks. Exploitation would involve misconfigured input paths to bypass intended authorization controls and execute restricted operations...

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-62198 OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

PT-2026-57900

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute...

CVE-2026-40516

OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the webfetch and websearch tools that allows attackers to access private and localhost HTTP services by manipulating tool parameters without proper validation of target addresses. Attackers can influence an...

Astra Linux – Vulnerability in Chromium

The use of “after free” in web searches in Google Chrome before version 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption through profile destruction...

CVE-2026-45331

CVE-2026-45331 concerns Open WebUI’s validate_url() in backend/open_webui/retrieval/web/utils.py, where a call to validators.ipv6(ip, private=True) raises a ValidationError due to the library not implementing the private keyword for IPv6. This causes IPv6 addresses to bypass the intended filter, ...

CVE-2026-45331 Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validateurl in backend/openwebui/retrieval/web/utils.py calls validators.ipv6ip, private=True, but the validators library does NOT implement the private keyword for IPv6 — the call...