CVE-2026-100172 Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes

The AIL Framework ail-project/ail-framework contains a stored cross-site scripting XSS vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagged content: var/www/templates/chatsexplorer/blockmessage.html and var/www/templates/objects/item/showitem.html. In both...

CVE-2026-100172

The AIL Framework (ail-project/ail-framework) is vulnerable to a stored cross-site scripting (XSS) flaw in two Jinja2 templates: var/www/templates/chats_explorer/block_message.html and var/www/templates/objects/item/show_item.html. The root cause is the interpolation of dynamic values (such as ic...

CVE-2026-100172 Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes

The AIL Framework ail-project/ail-framework contains a stored cross-site scripting XSS vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagged content: var/www/templates/chatsexplorer/blockmessage.html and var/www/templates/objects/item/showitem.html. In both...

CVE-2026-79090

A flaw was found in chromium-browser. Improper privilege management in the Actor component allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering techniques through a specially crafted HTML page...

CVE-2025-66470

NiceGUI XSS Scanner - CVE-2025-66470 📸 Screenshot A fast, simple scanner for detecting CVE-2025-66470 - XSS vulnerability in NiceGUI's ui.interactiveimage component. 🔍 Vulnerability Details Field| Value ---|--- CVE| CVE-2025-66470 GHSA| GHSA-2m4f-cg75-76w2 Component| ui.interactiveimage Affected|...

CVE-2020-11022

So here's the thing So here's the thing guys, CVE-2020-11022 is a vulnerability in jQuery versions below 3.5.0 or above, CVE-2020-11022 itself triggers an XSS by leveraging DOM Manipulation e.g., .html, .append, and others to execute malicious XSS code. 1. Verify jQuery Version: Make sure the...

CVE-2026-79181

A flaw was found in Google Chrome. An observable discrepancy in the Glic component allows a remote attacker to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-79088

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques and a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorized acces...

CVE-2026-79018

A flaw was found in Chromium's FoldableAPIs. A remote attacker could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive user information...

CVE-2026-64638

CVE-2026-64638 CVE-2026-64638 fast try root@kitploit: import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text or root@kitploit: POST /wp-login.php HTTP/1.1...

CVE-2026-79199

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, an attacker can gain unauthorized access within the network component...

CVE-2026-79099

A flaw was found in Google Chrome's Network component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, leading to unauthorized access or actions within the affected...

CVE-2026-88996

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'pagetitle' POST Parameter via pagetitle Smart Tag in all versions up to, and including, 2.0.2 due to insufficient input...

CVE-2026-79125

A flaw was found in Google Chrome. This information leak vulnerability, specifically within the XR component, allows a remote attacker to obtain sensitive information. The attacker can achieve this by enticing a user to visit a specially crafted HTML page. This could lead to the unauthorized...

CVE-2026-78974

A flaw was found in chromium-browser. This user interface UI misrepresentation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page. This could lead to unauthorized access to...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...

EUVD-2026-86590

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'pagetitle' POST Parameter via pagetitle Smart Tag in all versions up to, and including, 2.0.2 due to insufficient input...

CVE-2026-79197

A flaw was found in V8 in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-87477

A flaw was found in Core in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation would result in the leakage of sensitive information...