CVE-repository

Репозиторий CVE OCD Содержимое данного репозитория CVE предоставляется исключительно в информационных целях. Уязвимости и связанная информация, описанные здесь, предоставляются «как есть» и не подлежат какой-либо поддержке. Используя этот репозиторий, вы подтверждаете и соглашаетесь с тем, что...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server vulnerabilidade de upload arbitrário de arquivos Código por: Junsheng @Laboratório de Segurança Cibernética Orange Laboratório de Segurança Cibernética Orange https://0range.team/ 0x00 Visão Geral de Riscos Esta ferramenta deve ser usada apenas para testes de...

haiti

HAITI HA sh I denT ifI er Cos'è? Uno strumento CLI per identificare il tipo di hash di un dato hash. Caratteristiche Oltre 270 tipi di hash rilevati Riferimenti a Hashcat e John the Ripper Strumento CLI e libreria Hackable Riferimenti Homepage / Documentazione:...

Orange Forum 1.4.0 - Open Redirect

Orange Forum 1.4.0 contains an open redirect vulnerability in views/auth.go via the next parameter to /login or /signup. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-14474 info: nam...

bof

BOF BOF Boiboite Opener Framework è un framework di testing per implementazioni di protocolli di campo e dispositivi. È una libreria Python 3.6+ che fornisce i mezzi per inviare, ricevere, creare, analizzare e manipolare frame dei protocolli supportati. Attualmente la libreria fornisce funzionali...

rabid

RABID RA pid B ig I P D ecoder Cos'è Uno strumento CLI e una libreria che permettono di decodificare semplicemente tutti i tipi di cookie BigIP. Caratteristiche Supporta tutti e 4 i formati di cookie Strumento CLI e libreria Hackable Riferimenti Homepage / Documentazione:...

graphcat

graphcat.py Script semplice per generare grafici e diagrammi dal potfile e ntds di hashcat e john. Indice dei contenuti graphcat.py Indice dei contenuti Installazione Aiuto Utilizzo Formati Esempi di grafici Installazione root@kitploit: git clone https://github.com/Orange-Cyberdefense/graphcat cd...

ocd-mindmaps

Benvenuto nella mappa mentale di Orange Cyberdefense Sito web : https://orange-cyberdefense.github.io/ocd-mindmaps/...

ransomware_map

Orange Cyberdefense CERT - Mappa dell'Ecosistema Ransomware Ultima versione = 29 Gennaio 2026 - in arrivo Mappa che visualizza le relazioni e le timeline associate a oltre 300 gruppi ransomware, tra il 2015 e il 2026. Speriamo che sia utile! Team World Watch - CERT Globale Orange Cyberdefense Tut...

Security-Team---Workspace-

🛡️ Security Team Workspace El primer framework de cibersegur...

EUVD-2026-19855

OrangeHRM is a comprehensive human resource management HRM system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins directory, allowing an authenticated actor who can influence the template path to read arbitrary local files. This...

CVE-2026-1808

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-1808 Orange Confort+ accessibility toolbar for WordPress <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-1808

The CVE-2026-1808 entry concerns the Orange Confort+ accessibility toolbar for WordPress plugin. It is vulnerable to Stored Cross-Site Scripting via the style parameter of the ocplus_button shortcode in all versions up to 0.7 due to insufficient input sanitization and output escaping. Exploitatio...

CVE-2026-1808

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-5613

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-1808 Orange Confort+ accessibility toolbar for WordPress <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' parameter of the ocplusbutton shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping. This makes it...

WordPress Orange Confort+ accessibility toolbar for WordPress plugin <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Orange Comfort+ accessibility toolbar for WordPress versions = 0.7...

WordPress plugin Orange Confort+ 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-6680

Name of the Vulnerable Software and Affected Versions Orange Confort+ accessibility toolbar for WordPress plugin versions prior to 0.7 Description The Orange Confort+ accessibility toolbar for WordPress plugin is susceptible to Stored Cross-Site Scripting. This is due to insufficient input...