rabid

RABID RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI...

bof

BOF BOF Boiboite Opener Framework is a testing framework for field protocols implementations and devices. It is a Python 3.6+ library that provides means to send, receive, create, parse and manipulate frames from supported protocols. The library currently provides discovery and extended testing...

CVE-repository

OCD CVE リポジトリ このCVEリポジトリで提供されるコンテンツは、情報提供のみを目的としています。 ここに記載されている脆弱性および関連情報は「現状のまま」提供され、 いかなるサポートの対象でもありません。このリポジトリを使用することにより、 ここに含まれる情報を自己責任で使用することに同意し、承認したものとみなされます。 当社は、直接的、間接的、その他の種類の損害について 一切責任を負いません。...

ransomware_map

Orange Cyberdefense CERT - ランサムウェアエコシステムマップ 最新 = バージョン29（2026年1月 - 近日公開予定） 2015年から2026年までの+300のランサムウェアグループに関連する関係性とタイムラインを可視化するマップです。 お役に立てば幸いです！ World Watch チーム - Global CERT Orange Cyberdefense 無断転載を禁じます。 免責事項：...

Orange Forum 1.4.0 - Open Redirect

Orange Forum 1.4.0 contains an open redirect vulnerability in views/auth.go via the next parameter to /login or /signup. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-14474 info: nam...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Serverの任意ファイルアップロードの脆弱性 Code By:Junsheng @橘子网络安全实验室 橘子网络安全实验室 https://0range.team/ 0x00 リスク概要 本ツールは認可されたセキュリティテストのみに使用してください。未承認の不正なサイト攻撃は禁止します。 オンラインで読む：《中華人民共和国サイバーセキュリティ法》 0x01 ツールの使用方法 python cve-2021-22005.py -h で使用ヘルプを取得 0x02 バグ問題...

graphcat

graphcat.py hashcat（および john）の potfile と ntds からグラフやチャートを生成するシンプルなスクリプトです。 目次 graphcat.py 目次 インストール ヘルパー 使い方 フォーマット グラフの例 インストール root@kitploit: git clone https://github.com/Orange-Cyberdefense/graphcat cd graphcat pip install . ヘルパー root@kitploit: $ graphcat.py -h usage: graphcat.py -h -potfile...

ocd-mindmaps

欢迎来到 Orange Cyberdefense 思维导图 网站 : https://orange-cyberdefense.github.io/ocd-mindmaps/...

haiti

HAITI HA sh I denT ifI er What is it? A CLI tool to identify the hash type of a given hash. Features 270+ hash types detected Hashcat and John the Ripper references CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/haiti/ Author Made by Alexand...

Malicious code in early-orange-mule (npm)

Source: amazon-inspector 786a66000246e9f58983e11ce65f3321990748f793638c79a64eeb2e88d71bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dwarf-orange-puti (npm)

The package dwarf-orange-puti was found to contain malicious code. --- Credit: OpenSSF source...

Security-Team---Workspace-

🛡️ Security Team Workspace El primer framework de cibersegur...

EUVD-2026-19855

OrangeHRM is a comprehensive human resource management HRM system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins directory, allowing an authenticated actor who can influence the template path to read arbitrary local files. This...

CVE-2026-1808

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-1808 Orange Confort+ accessibility toolbar for WordPress <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-1808

The CVE-2026-1808 entry concerns the Orange Confort+ accessibility toolbar for WordPress plugin. It is vulnerable to Stored Cross-Site Scripting via the style parameter of the ocplus_button shortcode in all versions up to 0.7 due to insufficient input sanitization and output escaping. Exploitatio...

CVE-2026-1808 Orange Confort+ accessibility toolbar for WordPress <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-5613

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-1808

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

WordPress Orange Confort+ accessibility toolbar for WordPress plugin <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Orange Comfort+ accessibility toolbar for WordPress versions = 0.7...