CVE-2026-54433

CVE-2026-54433：Roundcube 纯文本电子邮件存储型 XSS 本仓库包含针对 CVE-2026-54433 的可配置 Python 概念验证代码，这是 Roundcube 纯文本电子邮件渲染器中的一个存储型跨站脚本漏洞。未经身份验证的发送者可以发送精心构造的 text/plain 消息。当已认证的 Roundcube 用户打开或预览该消息时，攻击者控制的 JavaScript 会在 Roundcube 源（origin）中执行。 该 PoC 演示了具体的已认证会话影响，且不收集 Cookie 或消息正文：它会读取一条较早消息的主题，并将该值、Roundcube...

Ios-Safari-Mallicous-Extension-Example

Ios-Safari-Mallicous-Extension-Example 关于如何通过Safari扩展（该部分已完成）注入keylogger js（目前正在开发中）的示例。...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

jsluice

jsluice jsluice 是一个 Go 包和命令行工具，用于从 JavaScript 源代码中提取 URL、路径、机密以及其他有趣的数据。 如果你想立即执行这些操作：请查看命令行工具。 如果你想将 jsluice 的功能集成到你自己的项目中：请查看示例，并阅读包文档。 安装 要安装命令行工具，请运行： root@kitploit: ▶ go install github.com/BishopFox/jsluice/cmd/jsluice@latest 要将该包添加到你的项目中，请运行： root@kitploit: ▶ go get...

js-driveby-download-CVE-2006-4777

js-driveby-download-CVE-2006-4777 利用互联网浏览器6.0 SP1在Windows XP SP2上的漏洞的客户端恶意软件。 不需要用户同意，也不下载任何文件。 在Windows XP上通过IE的JavaScript在RAM中注入Shell代码。 无文件、驱动下载、客户端恶意软件。...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' 远程代码执行漏洞 视频演示：https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control 组件包含一个远程代码执行漏洞，因为它允许将 'javascript:' URI 作为参数传递，这通常是不安全的，因为在某些情况下可能允许在任意域中注入脚本代码（通用跨站脚本 - uXSS），进而可能被用来窃取 Cookie 等。通过将 'URL' 参数设置为 'javascript:' URI，并将 'target' 参数设置为...

CVE-2026-88060

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2020-18325

Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel. Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-siz...

CVE-2026-88060 Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88060 Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88058 Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...

CVE-2026-88058

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...

retire.js

Retire.js 你使用的东西，也必须退役 网络上和 Node.JS 应用中有大量的 JavaScript 库可供使用。这大大简化了开发，但我们需要及时了解安全修复。"使用已知漏洞的组件" 现已成为 OWASP Top 10 的一部分，不安全的库可能给您的 Web 应用带来巨大风险。Retire.js 的目标是帮助您检测使用了存在已知漏洞的 JS 库版本。 Retire.js 包含四个部分： 1. 命令行扫描器 2. Chrome 扩展 3. Grunt 插件 4. Burp 和 OWASP Zap 插件 命令行扫描器 扫描 Web 应用或 Node 应用，检测是否使用了存在漏洞的...

CVE-2026-88057 Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

CVE-2026-88057

Angular (versions prior to 20.3.28 , 21.2.20 , and 22.1.0 ) contains a sanitization bypass in @angular/core and @angular/compiler . The root cause is that the SecurityContext for directive host bindings was derived from the declaring directive or component selector rather than the concrete host e...

CVE-2026-88057

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...

CVE-2025-44998

CVE-2025-44998 摘要 在 TinyFileManager v2.4.7 的 /tinyfilemanager.php 组件中存在一个存储型跨站脚本（XSS）漏洞，攻击者可通过向 js-theme-3 参数注入特制有效载荷来执行任意 JavaScript 或 HTML。 PoC 要检查漏洞，请进入设置页面（网址：http://localhost/index.php?p=&settings=1）。 发送请求时，将 js-theme-3 参数的值修改为以下有效载荷：light“nav+a=” 注入的脚本随后将执行，并可在整个页面（包括登录界面）中运行。 影响 用作会话 ID 的...

CVE-2023-49974

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...

CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Backend - Dashboard in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...