fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

fileintel

fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...

excelpeek

ExcelPeek v0.2 ExcelPeek is a tool designed to help investigate potentially malicious Microsoft Excel files. Documentation Use the Installation Guide to get started. Go to the User's Guide for additional information...

CVE-2025-31324

SAP CVE-2025-31324 分析器 一个基于 Python 的安全扫描器，用于识别 SAP Visual Composer 系统中的 CVE-2025-31324 漏洞，并检测已知的入侵指标（IOC），例如恶意的 .jsp 文件。 🚀 功能特性 检测存在漏洞的 Visual Composer 端点 扫描已知的恶意 .jsp 文件（Webshell） 支持从 CSV 文件进行多目标扫描 支持自定义 IOC 文件 可选择将结果保存为 CSV 可选的详细输出模式 🛠 环境要求 Python 3.6+ requests 库（通过 requirements.txt 安装） 📦 安装...

arya

Arya - 逆YARA Aryaは、YARAルールをトリガーするための擬似的な悪意のあるファイルを生成するユニークなツールです。これは逆YARAと考えることができます。なぜなら、まったく逆の動作をするからです。つまり、あなたのルールに一致するファイルを作成します。 Aryaとその仕組みについての詳細は、ブログをご覧ください。 はじめに...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Vulnerabilidad de Día Cero en Microsoft Office Estado: Explotada activamente → Parche de emergencia publicado Gravedad: 🔴 Alta Tipo de Riesgo: Omisión de Funciones de Seguridad 🔍 ¿Qué es? CVE-2026-21509 es una vulnerabilidad grave en Microsoft Office que permite a los atacantes...

EUVD-2026-68575

Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files. This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.4.1...

VulnCheck KEV: CVE-2026-82970

Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Using Malicious Files. This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.4.1...

PT-2026-83851

Name of the Vulnerable Software and Affected Versions WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions prior to 4.4.2 Description An unauthenticated file upload flaw allows the unrestricted upload of files with dangerous types, which could enable the use of malicious files on the syste...

CVE-2026-32475

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

CVE-2026-32475

Elementor Pro WordPress plugin (≈6,000,000 active installations) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.2.1 . The root cause is a logic error in the Upload::validation() function where return is used instead of continue when the first array el...

CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

PT-2026-78533

Name of the Vulnerable Software and Affected Versions Elementor Pro versions prior to 4.2.2 Description An unrestricted file upload flaw exists in the Form widget of Elementor Pro, potentially affecting over 6 million active installations. The issue occurs when a public form contains at least one...

VulnCheck KEV: CVE-2026-32475

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

EUVD-2026-51588

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1...

JLSEC-2026-1063 ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null...

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

CVE-2026-64766

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to...

CVE-2026-64765

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to...

CVE-2026-64754

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service...