CVE-2026-97723

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

CVE-2026-97723

The madpsy ka9q_ubersdr software, in versions before 0.1.58 , is susceptible to a stored cross-site scripting (XSS) vulnerability within the chat message rendering functionality. The root cause is the insufficient neutralization of user-controlled URLs before they are converted into HTML links. S...

CVE-2026-97723

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

CSRF-exploit-generator

CSRF-exploit-generator El generador de exploits CSRF permite a los usuarios generar un formulario de explotación CSRF con parámetros configurables. CSRF-exploit-generator Características URL de destino de entrada: Especifica la URL que se va a explotar. Parámetros POST de entrada: Permite añadir...

bleach

====== Bleach NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes. Bleach can also linkify text safely, applying filters th...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Bison vulnerability (USN-8777-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8777-1 advisory. It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker cou...

MiracleLinux 9 : skopeo-1.22.2-8.el9_8 (AXSA:2026-1913:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1913:05 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive...

attackmapper

AttackMapper Attack Path Visualization & Threat Intelligence Platform Features • Installation • Usage • Threat Intel • Contributing Overview AttackMapper is a CLI tool for red team operations that generates attack paths, maps techniques to the MITRE ATT&CK framework, and integrates real-time thre...

OutlookLeakTest

¡El Proyecto de Prueba de Fugas HTML de Outlook! Publicación del blog: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ ¿Qué hay en "./Schemes-List.xlsx"? Lista de esquemas de URI que podrían funcionar en Windows. Estos...

CVE-2025-52204

CVE-2025-52204 – XSS Reflejado / Inyección de HTML en el endpoint customer.pl de Znuny Resumen Existe una vulnerabilidad de Cross-Site Scripting XSS Reflejado e Inyección de HTML en Znuny, que permite a los atacantes inyectar JavaScript o HTML arbitrario a través del parámetro definido por la...

CVE-2025-25296

CVE-2025-25296 Prueba de Concepto POC Descripción Este proyecto demuestra una prueba de concepto POC para la vulnerabilidad CVE-2025-25296 que afecta a Label Studio, una herramienta de etiquetado de datos de código abierto. La vulnerabilidad reside en el endpoint /projects/upload-example, que no...

CVE-2025-70849-Podinfo

CVE-2025-70849: Stored XSS in Podinfo Summary A security vulnerability CWE-79 was identified in Podinfo , a web application for demonstrating Kubernetes microservices. The /store feature allows unauthenticated users to upload arbitrary HTML/JS content, leading to Stored XSS. Vulnerability Details...

CVE-2009-3036

CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Symantec IM Manager Console HTML Injection Vulnerability info discussion exploit solution references noexploitlink...

CVE-2026-57440

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, with $wgEmbedVideoRequireConsent disabled not the default, the urls for videos are passed into an iframe...

CVE-2026-48060

CVE-2026-48060 - Inyección HTML en Litestar a través del Token CSRF Este repositorio contiene la prueba de concepto del exploit y la aplicación vulnerable para demostrar la vulnerabilidad de inyección HTML presente en la versión 2.21.0 de Litestar. Cómo Ejecutar git clone...

chrome-vuln-scanner

Escáner de Vulnerabilidades de Chrome Una herramienta defensiva ligera y sin dependencias que verifica la versión instalada de Google Chrome frente a vulnerabilidades conocidas y genera un informe HTML visual fácil de entender. Herramienta defensiva ligera para verificar la versión de Google Chro...

CVE-2026-57440 Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, with $wgEmbedVideoRequireConsent disabled not the default, the urls for videos are passed into an iframe...

CVE-2026-57440 Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, with $wgEmbedVideoRequireConsent disabled not the default, the urls for videos are passed into an iframe...

CVE-2026-61825

The code16/sharp Laravel-based framework is vulnerable to stored cross-site scripting (XSS) in versions before 9.22.5 . The flaw exists within the SharpEditorFormField component, where attacker-controlled content using the data-html-content attribute can bypass HTML sanitization to preserve and e...

CVE-2026-61825 code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces. Versions before 9.22.5 contain a stored cross-site scripting vulnerability in SharpEditorFormField: attacker-controlled content bearing the data-html-content attribute can bypass HTML...