CVE-2023-33410

CVE-2023-33410 Minical 1.0.0 は CSV インジェクションに対して脆弱です。 ベンダー: https://github.com/minical/minical デモアプリケーション: https://demo.minical.io/ PoC ステップ 1: Accounting モジュールに移動し、「Create New Customer」をクリックします。 ステップ 2: Name フィールドにペイロードを入力し、「Create」をクリックします。 Payload: =HYPERLINK"","ClickHere" ステップ 3: 「Download CSV...

remote-bitlocker-encryption-report

remote-bitlocker-encryption-report このPowerShellスクリプトは、PCのリストを入力として受け取り、リモートでBitLocker暗号化の種類を取得し、そのリストをCSVファイルとして出力します。これにより、CVE-2018-12038の緩和に役立ちます。 CVE-2018-12038脆弱性の防止 NISTによるCVE-2018-12038の説明： Samsung 840 EVOおよび850 EVOデバイス（「ATA high」モードのみで、 「TCG」または「ATA max」モードでは脆弱ではない）、Samsung...

IpGeo

IPGeo IpGeo는 캡처된 네트워크 트래픽 파일pcap/pcapng에서 IP 주소를 추출하고 패킷에 있는 각 IP의 지리적 위치 정보를 포함한 CSV 보고서를 생성하는 Python 도구입니다. 보고서는 다음을 포함합니다: 1. 국가: 2. 국가 코드. 3. 지역 4. 지역 이름 5. 도시 6. 우편번호 7. 위도 8. 경도 9. 시간대 10. ISP 11. 조직 12. IP 설치 필요한 모듈을 설치하려면 패키지 관리자 pip3를 사용하세요. root@kitploit: pip3 install colorama pip3...

PhishingKitHunter

PhishingKitHunter ブランド/組織のファイルや画像を使用するフィッシングキットを見つけます。 PhishingKitHunter （別名 PKHunter ）は、顧客を標的にし、顧客自身のウェブサイトファイル（CSS、JSなど）を利用するフィッシングキャンペーンで使用されるフィッシングキットURLを特定するために作られたツールです。 このツールはPython...

MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports

The MongoSQL Transition Readiness Tool writes database and collection names into its generated CSV reports without neutralizing leading characters that spreadsheet applications treat as formulas. A user with write privileges on the cluster can choose a namespace name that is later evaluated as a...

H4C-WEB

H4C-WEB !/bin/bash =======================================...

CVE-2021-47901 dirsearch 0.4.1 - CSV Injection

Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report...

CVE-2021-47901

Dirsearch 0.4.1 is affected by a CSV injection vulnerability exploitable via the --csv-report flag. An attacker can craft malicious server redirects with comma-separated paths containing Excel formulas, enabling manipulation of the generated CSV report. The issue is described across multiple sour...

dirsearch security vulnerabilities

dirsearch is a network scanner developed by Mauro Soria. Version 0.4.1 of dirsearch contains a security vulnerability. This vulnerability arises from improper handling of redirect endpoints when using the --csv-report flag, which may allow attackers to inject malicious formulas...

EUVD-2020-21405

Malware in sbrugna...

Exploit for CVE-2021-34527

A PrintNightmare CVE-2021-34527 Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, it does not actually...

Linux Distros Unpatched Vulnerability : CVE-2018-11652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header,...

Exploit for Use of Less Trusted Source in Apache Http_Server

CVE-2022-31813 Vulnerability Checker Author: Derek Odiorn...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919-Sniper !CVE-2024-24919 Sniper Screenshotsni...

CSV injection in macro name

...

IpGeo - Tool To Extract IP Addresses From Captured Network Traffic File

IpGeo is a python tool to extract IP addresses from captured network traffic file pcap/pcapng and generate csv report containing details about the geolocation of each ip in the packets. The report contains: 1. Country: 2. Country Code. 3. Region 4. Region Name 5. City 6. Zip 7. Latitude 8...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-remediation-tools Tools for finding and reproducing...

OS Command Injection

CSV is vulnerable to OS command injection. The vulnerability allows an attacker to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report...

Input validation

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...

dnsrecon 0.10.0 - CSV Injection

Exploit Title: dnsrecon 0.10.0 - CSV Injection Author: Dolev Farhi Date: 2021-01-07 Vendor Homepage: https://github.com/darkoperator/dnsrecon/ Version : 0.10.0 Tested on: ParrotOS 4.10 dnsrecon, when scanning a TXT record such as SPF, i.e.: spf.domain.com, outputs a CSV report -c out.csv with...