CVE-2026-87811

SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template paths that break out of the attribute context and execute JavaScript when a victim opens notebook configuration, enabling...

CVE-2024-4367-hands-on

!IMPORTANT 本仓库旨在用于学习漏洞。 本动手练习请务必在您自己管理的适当计算机上进行。绝对不要进行违法行为。 此外，对于因本仓库而发生的任何损害或责任，作者概不负责。 CVE-2024-4367-hands-on 体验 CVE-2024-4367 的动手练习 创建 poc.pdf root@kitploit: python CVE-2024-4367-PoC/CVE-2024-4367.py "alert'document.domain'" 引用来源：https://github.com/LOURC0D3/CVE-2024-4367-PoC 将创建用于攻击的 poc.pdf。...

CVE-2023-24278

CVE-2023-24278 - Squidex 中的反射型 XSS 漏洞 概述 CVE ID: CVE-2023-24278 受影响产品: Squidex 7.4.0 之前的所有版本 报告者: Ioannis Christodoulakos 本仓库提供了关于 Squidex 开源无头 CMS 软件中发现的两个反射型跨站脚本（XSS）漏洞的信息及利用方式。这些漏洞影响 7.4.0 之前的所有版本，攻击者可通过向 /squid.svg 端点的特定查询参数中注入代码，在受害者浏览器中执行恶意 JavaScript 代码。 漏洞详情 漏洞是由于 /squid.svg 端点的 text 和...

EUVD-2026-74839

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authenticated attackers can craft asset filenames containing malicious markup that executes JavaScript in the victim's...

CVE-2026-87813 SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escaping. Authenticated attackers can craft asset filenames containing malicious markup that executes JavaScript in the victim's...

CVE-2026-87813

SiYuan before v3.8.2 is affected by a stored cross-site scripting (XSS) vulnerability in the Search Assets result list , where asset filenames are interpolated into HTML without proper escaping. An authenticated attacker can craft asset filenames containing malicious markup that executes JavaScri...

CVE-2026-87812

SiYuan before v3.8.2 is affected by a stored cross-site scripting vulnerability in Bazaar package cards. The root cause is that the iconURL metadata is inserted directly into HTML img src attributes without escaping , allowing attackers to inject malicious URLs with embedded event handlers. When ...

CVE-2026-87812 SiYuan before v3.8.2 Stored XSS via Bazaar iconURL

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping. Attackers can inject malicious URLs with event handlers that execute JavaScript in the authenticated...

CVE-2026-87812 SiYuan before v3.8.2 Stored XSS via Bazaar iconURL

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attributes without escaping. Attackers can inject malicious URLs with event handlers that execute JavaScript in the authenticated...

CVE-2026-87811 SiYuan before v3.8.2 Stored XSS via notebook template paths

SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template paths that break out of the attribute context and execute JavaScript when a victim opens notebook configuration, enabling...

EUVD-2026-74837

SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template paths that break out of the attribute context and execute JavaScript when a victim opens notebook configuration, enabling...

CVE-2026-87811 SiYuan before v3.8.2 Stored XSS via notebook template paths

SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template paths that break out of the attribute context and execute JavaScript when a victim opens notebook configuration, enabling...

CVE-2026-87811

SiYuan before v3.8.2 is affected by a Stored XSS vulnerability in its notebook configuration feature. The root cause is improper attribute encoding when persisted notebook template paths are inserted into HTML input value attributes. An attacker can craft a malicious template path that breaks out...

firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...

CVE-2021-23639

概述 md-to-pdf 是一个用于将 Markdown 文件转换为 PDF 的 CLI 工具。 该包受影响版本存在远程代码执行（RCE）漏洞，原因是使用 gray-matter 库解析 front matter 内容时未禁用 JS 引擎。 用法： root@kitploit: python3 cve-2021-23639.py targerurl command 更多 md-to-pdf 的远程代码执行（RCE）...

CVE-2025-6554

CVE-2025-6554 漏洞概念验证 ⚠️ 安全研究项目 - 此项目仅用于安全研究和教育目的。请勿在生产环境中使用。 📋 项目概述 CVE-2025-6554是Chrome V8引擎中的一个严重漏洞，涉及JavaScript中的"Temporal Dead Zone"（TDZ）检查机制。此项目提供了完整的漏洞概念验证代码和演示工具。 🔍 漏洞描述 该漏洞存在于V8引擎处理可选链操作符（?.）时，没有正确检查变量是否已初始化，允许访问未声明的变量，绕过TDZ保护机制。 🎯 影响范围 类型混淆攻击 栈操作 作用域检查绕过 内存泄漏 🚀 快速开始 环境要求 Node.js 16+ 或...

CVE-2022-32118

CVE-2022-32118 - Arox-XSS Arox School ERP Pro 应用程序的多个页面（包括登录页面）存在存储型和反射型跨站脚本漏洞，可导致任意 JavaScript 命令的执行。该应用程序中有更多受跨站脚本影响的参数，但以下仅列出部分示例。 存储型 XSS 漏洞页面： localhost/officeadmin/?pid=74&action=dispatchcategoryedit&id=3 root@kitploit:...

CVE-2020-10128

CVE-2020-10128 - SearchBlox 产品在 V-9.2.1 之前版本存在存储型跨站脚本漏洞 产品描述： SearchBlox 为复杂组织简化企业搜索。SearchBlox 直观且智能的工具提供开箱即用的设置、安全加密和较低的总拥有成本。AI 驱动的解决方案优化搜索旅程的每一步，从而显著提升用户参与度。SearchBlox 是金融服务、医疗保健和政府领域领导者的轻松之选。 描述： 9.2.1 版本之前的 SearchBlox 存在存储型跨站脚本漏洞。 漏洞类型： 存储型跨站脚本 严重性评级： 高危 产品厂商： SearchBlox 受影响产品代码库：...

CVE-2020-6418-PoC

CVE20206418PoC 用于供養 不包括沙箱逃逸利用。 PoC环境 操作系统：Ubuntu 18.04 LTS V8：Release编译（8.0.426.23） 参考 https://github.com/saelo/jscpwn https://bugs.chromium.org/p/chromium/issues/detail?id=1053604 https://blog.exodusintel.com/2020/02/24/a-eulogy-for-patch-gapping-chrome/...