reportly

Reportly es una herramienta de informes de actividad de usuarios de EntraID. Acerca de la herramienta Esta es una herramienta que ayudará a los equipos azules durante un incidente en la nube. Al ejecutar la herramienta, el investigador ingresará como entrada un usuario sospechoso y un período de...

REST-Attacker

REST-Attacker REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining the analysis of generic REST API implementations by completely automating the testing process - including test generation, access control...

CVE-2023-5561-PoC

PoC CVE-2023-5561 - WordPress User Email Disclosure Description This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint. Requirements Python 3.x requests library Install the required library: pip...

CVE-2026-107221

The Excelize Go library (versions 2.0.0 to 2.11.0 ) is vulnerable to an out-of-bounds write (CWE-787) during non-streaming worksheet read operations. The root cause lies in the checkRow function, which incorrectly sizes a target cell slice based on the last cell in XML document order. If a crafte...

EUVD-2026-94551

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107221 Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107220

The Excelize Go language library (versions 2.7.1 to 2.11.0 ) contains a vulnerability where the mergeCellsParser fails to perform a length check when handling an empty mergeCell ref . Specifically, it passes an empty slice to cellInRange , which is then accessed by GetCellValue . An attacker can ...

CVE-2025-4631

🚨 CVE-2025-4631 - Profitori WordPress Plugin Privilege Escalation Exploit 📌 Vulnerability Summary Profitori Plugin versions 2.0.6.0 to 2.1.1.3 is vulnerable to unauthenticated privilege escalation due to a missing capability check in the /wp-json/stocktend/v1/stocktendobject endpoint. This allows...

CVE-2023-2732

CVE-2023-2732 MStore API = 3.9.2 - Authentication Bypass https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Description The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

CVE-2026-86684

A flaw was found in Gitea. An improper authorization check in the push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When a repository owner has permission to use local paths, an administrator lacking that privilege can configure a pu...

CVE-2026-76471

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of data that is...

CVE-2026-76454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

CVE-2026-62253

Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions JWTMiddleware and JWTMiddlewareV4 immediately return nextc when jwtSecret == "". The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under...

CVE-2026-20321

A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...

CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...

Exploit for Interpretation Conflict in Wordpress

wp2shell-PoC ⚠ This tool is created solely for education...

CVE-2021-22214

CVE-2021-22214 GitLab CI Lint API Unauthorized SSRF Vulnerability CVE-2021-22214 This article and the tool are for technical sharing only. Strictly prohibited for illegal use, otherwise all consequences shall be borne by the user. Usage help $ python3 gitlabssrf.py...