528 matches found
CVE-2021-46363
CVE-2021-46363: Inyección de fórmulas en Magnolia CMS Un problema en la función Export de Magnolia v6.2.3 y versiones anteriores permite a los atacantes realizar ataques de inyección de fórmulas mediante archivos CSV/XLS manipulados. Estas fórmulas pueden provocar la ejecución de código arbitrari...
tgspyder
🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...
ConditionalAccessDocumentation
Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...
CVE-2026-105990
The Accept PayPal Payments using Contact Form 7 WordPress plugin, in versions prior to 4.0.7 , is vulnerable to an unauthenticated PII disclosure . The root cause is a lack of authorization checks when exporting stored form submissions. This flaw allows unauthenticated attackers to download sensi...
CVE-2026-105990 Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export
The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data name, email, telephone, postal address, message and payment metadata o...
CVE-2026-101947
The ExifTool for photo and video 5.0.1-gms by CellHubs is vulnerable to a Local OS command injection (CWE-78). The flaw exists in the CSV-export path because the application constructs shell command strings from file paths and invokes /system/bin/sh -c without properly escaping embedded single qu...
EUVD-2026-96030
ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped...
Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...
Tracgram
Trackgram Usa las funciones de ubicación de Instagram para rastrear una cuenta Uso At this moment the usage of Trackgram is extremly simple: 1. Download this repository 2. Go through the instalation steps 3. Change the parameters in the tracgram main method directly: + Mandatory: - NICKNAME: your...
wavecrack
Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...
TwitterSearch2Gephi
TwitterSearch2Gephi TwitterSearch2Gephi es una aplicación CLI para Windows que permite recopilar datos de redes sociales y convertirlos en un conjunto de datos CSV que se puede utilizar con Gephi. Actualmente es compatible con Twitter Reddit Youtube Dominios / URLs de WWW Se añadirán más...
creepy-plugins
creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...
IPGeoLocation
IPGeoLocation ==== Una herramienta para obtener información de geolocalización IP Desarrollado por ip-api Requisitos Python 3.x termcolor colorama Descarga/Instalación git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user si pip3 no está instalado: apt-get...
imago-forensics
imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...
creepy
creepy Versión actual 1.1 Autor Yiannis Kakavas Página principal http://www.geocreepy.com Instrucciones de instalación Consulte http://www.geocreepy.com Descripción Herramienta OSINT de geolocalización. Creepy es una herramienta OSINT de geolocalización. Recopila información relacionada con la...
HiddenNetworks-Python
HiddenNetworks-Python v0.9 Mayo 2020 Hidden Networks es una prueba de concepto basada en el paper del mismo nombre, programada en Python 3.4. Facilita la tarea de analizar máquinas locales y remotas dentro de un dominio, usando WMI para buscar rastros de conexiones de dispositivos USB. Con la...
ninja-forms-brute
Ninja Forms 3.6.8 - Divulgación no autenticada de direcciones de correo electrónico Descripción El plugin no elimina los archivos temporales creados al exportar los envíos, lo que podría permitir a atacantes no autenticados descargarlos y obtener información sensible, como la dirección de correo...
CVE-2024-55988
CVE-2024-55988 Navayan CSV Export = 1.0.9 - Unauthenticated SQL Injection Description The Navayan CSV Export plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...
Password-Strength-Evaluator
Password Strength Evaluator Password Strength Evaluator es una herramienta para evaluar la fortaleza de las contraseñas y proporcionar recomendaciones para mejorar su seguridad. Esta herramienta también comprueba si tu contraseña ha sido expuesta en alguna filtración de datos mediante la API de...