YesWiki Archived Revision - Cross-Site Scripting

YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append an XSS payload after a valid revision timestamp. id: CVE-2026-52773 info: name: YesWiki...

Dashy <= 4.3.6 - Reflected XSS via Workspace

Dashy versions up to 4.3.6 contain a reflected cross-site scripting vulnerability in the workspace view. The url query parameter is passed directly to an iframe src attribute without scheme validation, allowing an attacker to inject javascript: URIs that execute arbitrary JavaScript in the contex...

gods-eye-view

🌐 God's Eye View A spy-satellite simulator in your browser — then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...

monikerlink-cve-2024-21413-writeup

Moniker Link CVE-2024-21413 Writeup Writeup de la sala Moniker Link de TryHackMe: explotación de CVE-2024-21413 para eludir la Vista Protegida de Outlook y capturar el hash NTLMv2 de una víctima mediante un Moniker Link manipulado. Parte de mi práctica continua de preparación para el OSCP...

cve-2024-37763

Descripción MachForm hasta la versión 19 está afectado por una vulnerabilidad de cross-site scripting almacenado sin autenticación que afecta a usuarios con sesiones válidas que pueden ver los resultados de formularios compilados. En la aplicación web objetivo, cuando se utiliza un formulario con...

CVE-2025-63499

XSS Reflejado Dirigido en el parámetro theme Investigadores: Arseniy Poblaguev, Daniil Khomichenok Versiones afectadas = 5.12.4 https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.4 Fecha: 02.12.2025 En el parámetro theme existe una vulnerabilidad de XSS Reflejado:...

D-Link D-View 8 v2.0.1.28 - Authentication Bypass

Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28 id: CVE-2023-5074 info: name: D-Link D-View 8 v2.0.1.28 - Authentication Bypass author: DhiyaneshDK severity: critical description: | Use of a static key t...

CVE-2026-100854 AzuraCast before 0.23.6 Metadata Injection via Liquidsoap API

AzuraCast before 0.23.6 lacks RequireInternalConnection middleware on the Liquidsoap API endpoint and incorrectly derives the AutoDJ flag from header presence rather than validated value. Users with View station permission can inject arbitrary now-playing metadata, disrupt live broadcasts, and...

CVE-2026-100854

AzuraCast versions before 0.23.6 are vulnerable to a metadata injection flaw via the Liquidsoap API . The root cause is the missing RequireInternalConnection middleware on the API endpoint and the incorrect derivation of the AutoDJ flag from header presence instead of a validated value. An attack...

CVE-2024-45058

CVE-2024-45058 PoC for CVE-2024-45058 Broken Access Control, allowing any user with view permission in the user configuration section to become an administrator changing their own user type. Grab the desired nivelusuario ID and run the exploit. Usage usage: CVE-2024-45058.py -h -t TARGET -u...

CVE-2026-100673 Grav Data Manager before 1.4.5 Stored XSS via item-detail view

The Grav Data Manager plugin getgrav/grav-plugin-datamanager versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view admin/templates/partials/item.html.twig without escaping, applying Twig's raw filter — in some cases after a striptags'' call that PHP's striptags bypasses ...

CVE-2026-100673 Grav Data Manager before 1.4.5 Stored XSS via item-detail view

The Grav Data Manager plugin getgrav/grav-plugin-datamanager versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view admin/templates/partials/item.html.twig without escaping, applying Twig's raw filter — in some cases after a striptags'' call that PHP's striptags bypasses ...

EUVD-2026-87767

The Grav Data Manager plugin getgrav/grav-plugin-datamanager versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view admin/templates/partials/item.html.twig without escaping, applying Twig's raw filter — in some cases after a striptags'' call that PHP's striptags bypasses ...

CVE-2026-100643 SiYuan before v3.8.4 Stored XSS via Attribute View textarea

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft Outlook 远程代码执行漏洞 PoC 本脚本展示了 CVE-2024-21413 的概念验证（PoC），这是 Microsoft Outlook 中一个 CVSS 评分为 9.8 的关键安全漏洞。该漏洞被称为 MonikerLink 漏洞，其影响范围广泛，包括可能泄露本地 NTLM 数据以及远程代码执行的风险。此外，它还突出了一种能够绕过 Office Protected View 的攻击媒介，从而将其威胁扩展到其他 Office 软件。 用法： 要使用此脚本： 1. 将仓库克隆到本地机器：...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Omisión de la función de seguridad de Microsoft Office CVE-2026-21509 es una vulnerabilidad de omisión de la función de seguridad de Microsoft Office CVSS 7.8 , explotada activamente por APT28 hackers rusos contra Ucrania Dependencia de entradas no confiables en decisiones de...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Sala: Moniker Link CVE-2024-21413 — TryHackMe Estado: ✅ Completado Fecha: 30 de mayo de 2025 🎯 Objetivo Entender y explotar CVE-2024-21413, una vulnerabilidad en Microsoft Outlook que evita la Vista Protegida usando Moniker Links para filtrar credenciales NTLM...

CVE-2026-71483

Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html in employee/templates/employeenav.html without HTML neutralization. An external attacker can craft and deliver a link that causes JavaScript to execute when an...

CVE-2026-71483

The Horilla HR and CRM software (prior to version 1.6.0 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the lack of HTML neutralization when the search parameter at /employee/employee-filter-view is reflected by jQuery's .html() function in employee/templates/emp...