34 matches found
PhishingKitHunter
PhishingKitHunter Find phishing kits which use your brand/organization's files and image. PhishingKitHunter or PKHunter is a tool made for identifying phishing kits URLs used in phishing campains targeting your customers and using some of your own website files as CSS, JS, .... This tool - write ...
remote-bitlocker-encryption-report
remote-bitlocker-encryption-report 이 PowerShell 스크립트는 PC 목록을 입력으로 받아 원격으로 BitLocker 암호화 유형을 확인하고, 결과를 CSV 파일로 출력하여 CVE-2018-12038 취약점을 완화하는 데 도움을 줍니다. CVE-2018-12038 취약점 방지 NIST의 CVE-2018-12038 설명: 삼성 840 EVO 및 850 EVO 장치"ATA high" 모드에서만 해당, "TCG" 또는 "ATA max" 모드에서는 취약하지 않음, 삼성 T3 및 T5 휴대용 드라이브,...
CVE-2023-33410
CVE-2023-33410 Minical 1.0.0 is vulnerable to CSV Injection. Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC Step 1: Navigate to the Accounting module and click on Create New Customer. Step 2: Enter the payload in the Name field and Click on Create...
IpGeo
IPGeo IpGeo is a python tool to extract IP addresses from captured network traffic file pcap/pcapng and generate csv report containing details about the geolocation of each ip in the packets. The report contains: 1. Country: 2. Country Code. 3. Region 4. Region Name 5. City 6. Zip 7. Latitude 8...
MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports
The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...
PT-2026-83275
The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...
CVE-2026-76797: Improper Neutralization of Formula Elements in a CSV File
The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...
H4C-WEB
H4C-WEB !/bin/bash =======================================...
CVE-2021-47901
Dirsearch 0.4.1 is affected by a CSV injection vulnerability exploitable via the --csv-report flag. An attacker can craft malicious server redirects with comma-separated paths containing Excel formulas, enabling manipulation of the generated CSV report. The issue is described across multiple sour...
CVE-2021-47901 dirsearch 0.4.1 - CSV Injection
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report...
dirsearch security vulnerabilities
dirsearch is a network scanner developed by Mauro Soria. Version 0.4.1 of dirsearch contains a security vulnerability. This vulnerability arises from improper handling of redirect endpoints when using the --csv-report flag, which may allow attackers to inject malicious formulas...
CVE-2021-47901: Improper Neutralization of Formula Elements in a CSV File
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report...
EUVD-2020-21405
Malware in sbrugna...
Exploit for CVE-2021-34527
A PrintNightmare CVE-2021-34527 Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, it does not actually...
Linux Distros Unpatched Vulnerability : CVE-2018-11652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...
Exploit for Use of Less Trusted Source in Apache Http_Server
CVE-2022-31813 Vulnerability Checker Author: Derek Odiorn...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware
CVE-2024-24919-Sniper !CVE-2024-24919 Sniper Screenshotsni...
CSV injection in macro name
...
IpGeo - Tool To Extract IP Addresses From Captured Network Traffic File
IpGeo is a python tool to extract IP addresses from captured network traffic file pcap/pcapng and generate csv report containing details about the geolocation of each ip in the packets. The report contains: 1. Country: 2. Country Code. 3. Region 4. Region Name 5. City 6. Zip 7. Latitude 8...