CVE-2026-97439

A flaw was found in the Linux kernel's NTFS3 file system. A local user can cause a Denial of Service DoS by manipulating extended file attributes on a mounted NTFS volume. Improper attribute handling clears internal compression flags without synchronizing file mapping operations, triggering a...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit 一个用 C 语言编写的 CVE-2021-3493 本地权限提升漏洞的概念验证利用程序。 📌 描述 本仓库包含 CVE-2021-3493 漏洞利用程序的 C 语言实现。 这是 Linux 内核中 OverlayFS 实现的一个本地权限提升（LPE）漏洞。由于在 overlay 挂载中设置文件时对扩展属性（xattrs）的验证不正确，它允许本地用户获取 root 权限。 🎯 受影响版本 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM...

CVE-2026-93758

A flaw was found in Mongoid. An authenticated remote attacker with basic application privileges could exploit an insecure direct object reference in the nested attributes handling. This vulnerability allows the attacker to reference and manipulate record identifiers belonging to other users,...

CVE-2026-97551

A flaw was found in the Linux kernel's XFS file system. A local user can trigger a Denial of Service DoS by forcing an unexpected filesystem shutdown. When updating parent pointer attributes, the kernel fails to properly initialize the block reservation counter, causing an integer underflow durin...

CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs 入站消息属性头注入 针对同一 Apache Camel 漏洞的可运行概念验证复现程序，每种运行时一个： 运行时| 目录| 技术栈| 被劫持的端点| 演示的影响 ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| 通过 CamelExecCommand 的 exec:| 远程代码执行 Camel Quarkus| camel-quarkus/| Quarkus 3.36....

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 ニュージャージー公式サイトの脆弱性レポート Bootstrap 4.1.2 以前では、メインの collapse データ属性で XSS が可能です。 data-target 属性、data-parent 属性、data-container がクロスサイトスクリプティング攻撃に対して脆弱です。 Test 推奨事項 この特定の問題に対する修正としては、getTargetFromTrigger 関数を以下のように変更することが考えられます： return $target から以下へ変更： return...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

CVE-2026-82326

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...

EUVD-2026-88240

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-82326 HTML Injection in Enocta Educational's Enocta Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-82326

The Enocta Platform by Enocta Educational Technologies Inc. is vulnerable to a cross-site scripting (XSS) flaw due to improper neutralization of input during web page generation. Specifically, the vulnerability allows for XSS targeting HTML attributes . The impact is categorized as LOW for integr...

CVE-2026-82326 HTML Injection in Enocta Educational's Enocta Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-87752

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6...

EUVD-2026-88222

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6...

CVE-2026-87752

A cross-site scripting (XSS) vulnerability exists in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis due to improper neutralization of input during web page generation. This flaw specifically allows XSS Targeting HTML Attributes . The vulnerability affects versions f...

CVE-2026-87752 HTML Injection in Rolantis Information Technologies' Agentis

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6...

macOSTriageCollectionScript

macOSTriageCollectionScript 一个用于 macOS 的取证数据收集脚本，利用 sysdiagnose 并附加少量功能来收集调查所需的取证数据。 该脚本收集哪些数据？ 收集的数据包括： sysdiagnose ，一种在多种 macOS/iOS 操作系统中可用的实用程序，用于收集“系统级诊断信息”。此处主要用于获取其收集的日志文件和实时数据。 文件列表，由于 APFS 不像 NTFS 那样拥有主文件表（MFT），为了了解文件系统上存在哪些内容，我们使用 stat 、 shasum 和 file 的组合创建多个 CSV...

CVE-2026-87752: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes. This issue affects Agentis: from 4.44 before 4.6...

CVE-2026-82326: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes. This issue affects Enocta Platform: through 2026-09-28...

CVE-2026-85002

The EmbedPress WordPress plugin before 4.6.7 does not escape one of its block attributes before outputting it inside an HTML attribute, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks against higher privileged users viewing the post...