Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC

Vulnerabilidad de inyección en Paradox Security Systems IPR512 - CVE-2023-24709 PoC En la página del formulario de inicio de sesión de la consola web de Paradox Security System IPR512, un atacante puede ingresar una cadena de JavaScript, como , que sobrescribirá las configuraciones en el archivo...

BurpSuite_Pro_v1.7.37

更新burpsuiteprov2.0beta.jar root@kitploit: Burp Suite 2.0 beta现在可供专业用户使用。 这是一项重大升级，具有许多新功能，包括： 一个新的履带，能够自动处理会话，检测应用程序状态的变化，有多次登录抓取和处理挥发物含量。 一种新的扫描引擎，具有自动会话处理，多个扫描阶段，改进的存储输入检测，整合现场被动问题，有效处理频繁发生的插入点，以及优雅处理应用程序错误。 一种新的动态JavaScript分析器，可显着改善对基于DOM的漏洞的检测。 用于监视和控制自动化活动的新仪表板。 新的扫描启动器，以及执行多个并行扫描的能力。...

CVE-2025-1015

CVE-2025-1015: The Thunderbird Address Book contains unsanitized URI fields that could be exploited by attackers. By creating an address book with malicious links, an attacker may trick another user into importing the compromised address book. If the user clicks on the unsanitized link within...

metabase-cve-2023-38646

cd /metabase-poc cat README.md -p 4444 -P 8000 -u http://localhost:3000 -l — 攻击者回调 IP（当目标为本地容器时，通常为 Docker 桥接网关，例如 172.17.0.1） -p — 反向数据通道回连的端口...

CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner 沙箱逃逸 通过 host-realm 对象泄漏在 n8n JavaScript Task Runner 中实现沙箱逃逸。 | ---|--- CVE| CVE-2026-27495 CVSS| 9.4（严重） CWE| CWE-94 — 代码注入 受影响版本| n8n 1.123.22 / 2.0.0–2.9.2 / 2.10.0 已修复版本| 1.123.22 / 2.9.3 / 2.10.1 攻击面| 代码节点（已认证，Task Runners 已启用） 快速开始 1. 部署漏洞实验环境...

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 在用户账户创建过程中通过 name 字段允许 XSS TastyIgniter v3.0.7 的多个页面存在存储型跨站脚本漏洞，允许任意执行 JavaScript。https://vulners.com/cve/CVE-2021-38699 受影响页面： /account, /reservation, /admin/dashboard, /admin/systemlogs 受影响载荷： “ 由 Justin White 和 Matt Kiely | HuskyHacks 发现，2021 年 8 月...

CVE-2012-1889

CVE-2012-1889 这里保存着我学习CVE-2012-1889这个漏洞的利用所用到的文件 root@kitploit: 1.txt 第一次模块信息 2.txt 第二次模块信息 c2javascript.c 用于将C语言形式的shellcode转化成javascript形式的shellcode cve-2012-1889.html 漏洞利用网页 cve-2012-1889-test-poc.html 测试系统是否存在cve-2012-1889漏洞的poc网页 ImmunityDebugger185setup.exe...

cve-2014-0521

CVE-2014-0521 Vulnerabilidad de Adobe Reader Esta vulnerabilidad de Adobe Reader basada en JavaScript afecta a todas las versiones de Adobe Reader en todas las plataformas anteriores a la versión 11.0.07 publicada el 13 de mayo de 2014. El fallo fue encontrado por Gábor Molnár y fue reportado el ...

CVE-2024-37888

CVE-2024-37888 This repository documents vulnerability details and exploit for CVE-2024-37888 discovered and reported by myself. Metrics CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CVSS: 6.1 MEDIUM Vulnerability Overview This Proof of Concept POC...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc 此漏洞源于 js2py 中不完整的沙箱隔离，精心构造的 JavaScript 可以遍历 Python 的内部对象模型，并访问危险的类（如 subprocess.Popen），从而导致任意命令执行。 JSON-Parsers & RCE Exploit PoC 概述 本仓库包含一个概念验证（PoC）载荷，演示了通过js2py.disablepyimport 实现的沙箱逃逸——这是 js2py 0.74 及之前版本中的一个漏洞。 当应用程序不安全地评估或解析用户提供的 JSON/JavaScript...

CVE-2026-86440

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

CVE-2026-86431

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...

CVE-2026-86431

league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and

EUVD-2026-72389

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...

CVE-2026-86431 commonmark before 2.9.1 XSS via AttributesExtension form feed bypass

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...

CVE-2026-86440 MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

CVE-2026-86440 MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

EUVD-2026-72372

Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widget's URL is stored configuration controlled by a user. The previous renderer considered a URL safe if it appeared relative or if its parsed hostname matched the configured MIS...

CVE-2026-86440

MISP 's dashboard Button widget is affected by a stored XSS caused by insufficient URL validation. The prior renderer treated a URL as safe if it appeared relative or matched the configured MISP hostname, but failed to reject dangerous schemes such as javascript: or backslash-based authority form...

XSSFire

XSSFire Un script de Blind XSS independiente. Cómo funciona: El script es una combinación de PHP y JavaScript; captura los datos usando JS y los envía al propio script, luego genera archivos de informe y los entrega a través de Telegram. Requisitos: 1. Servidor web ejecutándose en Linux con un...