CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89410

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

Kerberos_CVE-2022-33679

KerberosCVE-2022-33679 REQUISITOS impacket==0.10.0 arc4==0.3.0 CASO DE USO: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName...

Script-For-CVE-2024-20666

CVE-2024-20666 修复脚本 自动更新 WinRE 分区（无需先调整其大小）并修补 CVE-2024-20666 BitLocker 漏洞。 微软链接（脚本在此） 适用于 Windows Server 2022（服务器核心安装）（KB5034439：适用于 Azure Stack HCI 版本 22H2 和 Windows Server 2022 的 Windows 恢复环境更新：2024 年 1 月 9 日） Windows Server 2022（KB5034439：适用于 Azure Stack HCI 版本 22H2 和 Windows Server 2022 的...

Microsoft-2024-December-Update-Control

Windows 2024年12月安全补丁审计脚本 此 PowerShell 脚本用于检查系统中是否已安装 2024 年 12 月 Microsoft 安全公告中公布的特定漏洞（CVE-2024-49124、CVE-2024-49117、CVE-2024-49118 和 CVE-2024-49122）所需的 KB 更新。脚本通过检测操作系统版本来确定需要应用哪些补丁，并首先将检测到的操作系统显示在屏幕上。 功能特性 CVE 检查： 检查以下 CVE 对应的 KB 更新： CVE-2024-49124 CVE-2024-49117 CVE-2024-49118 CVE-2024-49122...

Protection Mechanism Failure

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Protection Mechanism Failure via insufficient keying of sandboxed preload script code cache entries, allowing a renderer...

cve-2020-5902

F5 BIG-IP "TMUI" RCE 漏洞的 NMAP 脚本 参考来源：https://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse...

CVE-2026-97711

A flaw was found in serialize-javascript. This vulnerability allows a remote attacker to conduct Cross-Site Scripting XSS attacks by supplying crafted function code containing unescaped script-closing tags. When the serialized function is embedded within an HTML script element, the unescaped tag...

CVE-2026-102675

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served through protocol.registerFileProtocol or protocol.registerHttpProtocol for a custom scheme registered with supportFetchAPI...

CVE-2022-27925

CVE-2022-27925 设置 git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 使用 用法：CVE-2022-2925.py -h -t TARGET -l LIST 选项： -h, --help 显示此帮助信息并退出 -t TARGET, --target TARGET 目标的URL，例如：http://127.0.0.1 -l LIST, --list LIST 以换行符分隔的目标URL列表...

CVE-2019-19393

Rittal CMC PU III – 存储型 XSS PoC 应用程序： Rittal CMC PU III Web 管理界面 受影响设备： CMC PU III 7030.000 软件版本： 从 V3.11.002 到 V3.15.704 硬件版本： 从 V3.00 到 V6.01 攻击类型： 存储型 XSS 解决方案： 升级到软件版本 V3.17.10 或更高版本 摘要： Web 应用程序未能在系统配置页面上对用户输入进行净化处理。这使攻击者能够使用 HTML 和浏览器解释的内容（如 JS 或其他客户端脚本）对设备进行后门植入，因为该内容在登录前后都会一直显示。持久性 XSS...

CVE-2020-1472-Easy

CVE-2020-1472-Easy 这绝对不是你会在任何你在乎的东西上运行的东西。 基于 @obfuscatee 和另一个来源的 writeup 及其工作成果构建 使用了以下代码： https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472 https://github.com/VoidSec/CVE-2020-1472 https://github.com/SecureAuthCorp/impacket 基本上会执行 zerologon 漏洞利用、转储...

monikerlinktest

monikerlinktest cve-2024-21413 1. 通过任意 ovpn 文件在路由器上使用 openvpn 设置 tun0 或其他 tun 接口 2. 如果尚未安装，安装 remmina 3. 使用 remmina 通过 ovpn 连接的端口 RDP 到目标桌面（如果有重复的接口，使用 ip link delete 删除已断开的接口） 4. 按照 exploit.py 命令中的说明替换任何占位符 5. 启动 responder 6. 运行 'python3 exploit.py' 并输入密码 7. 在 responder 终端中检查用户哈希...