2202 matches found
excelpeek
ExcelPeek v0.2 ExcelPeek is a tool designed to help investigate potentially malicious Microsoft Excel files. Documentation Use the Installation Guide to get started. Go to the User's Guide for additional information...
CVE-2025-31324
SAP CVE-2025-31324 Analyzer A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise IOCs such as malicious .jsp. 🚀 Features Detects vulnerable Visual Composer endpoints Scans for known malicious...
fileintel
fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...
fuxploider
fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...
Ashwesker-CVE-2026-21509
🛡️ CVE-2026-21509 — Microsoft Office Zero-Day Status: Actively exploited → Emergency patch released Severity: 🔴 High Risk Type: Security Feature Bypass 🔍 What is it? CVE-2026-21509 is a serious vulnerability in Microsoft Office that allows attackers to bypass built-in security protections by...
CVE-2026-46429
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is...
GeoNode has Unrestricted File Upload
The upload service validation can be circumvented with specially crafted requests, allowing for the storage and serving of malicious files...
CVE-2026-46429 GeoNode: Unrestricted File Upload
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is...
CVE-2026-46429 GeoNode: Unrestricted File Upload
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is...
EUVD-2026-118478
GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is...
CVE-2026-46429
The geospatial content management system GeoNode is vulnerable to an unrestricted file upload vulnerability in versions prior to 5.0.3 . A low-privileged remote user can bypass the upload service validation by sending specially crafted requests , which allows them to store and serve malicious fil...
PT-2026-138420
Name of the Vulnerable Software and Affected Versions GeoNode versions prior to 5.0.3 Description GeoNode is a geospatial content management system used for managing and publishing geospatial data. A flaw in the upload service validation allows a low-privileged remote user to bypass security chec...
CVE-2026-76563
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4...
CVE-2026-76563 HTML Injection in Fileorbis
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4...
CVE-2026-76563
A basic XSS vulnerability exists in Fileorbis (Fileorbis Informatics Services Trade Inc.) due to the improper neutralization of Script-Related HTML tags in a web page. This flaw allows for the use of malicious files and affects versions prior to 12.5.4 . The vulnerability has a CVSS 3.1 base scor...
CVE-2026-76563 HTML Injection in Fileorbis
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4...
arya
Arya - El YARA Inverso Arya es una herramienta única que produce archivos pseudo-maliciosos diseñados para activar reglas YARA. Puedes pensar en ella como un YARA inverso porque hace exactamente lo opuesto: crea archivos que coinciden con tus reglas. Puedes leer más sobre Arya y cómo funciona en...
CVE-2026-91844
Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6...
EUVD-2026-94982
Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6...
PT-2026-107973
Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6...