4333 matches found
CVE-2026-104391 WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
react-cve-2025-55182-lab
설정: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab cd react-cve-2025-55182-lab sudo docker build -t react-rsc-lab . sudo docker run -p 3000:3000 react-rsc-lab 익스플로잇: curl --path-as-is -i -s -k -X $'POST' \ -H $'Host: localhost:3000' -H $'User-Agent: Mozilla/5.0...
PT-2026-107456
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
CVE-2026-106033
A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...
EUVD-2026-93781
A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...
CVE-2026-106033 Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter
A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...
CVE-2026-106033
A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling in the redirect route . The application extracts a destination from the next query parameter and assigns it to location.href without proper format or scheme verification, bypas...
CVE-2026-106033 Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter
A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...
CVE-2026-106033
A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...
CVE-2026-94545
CVE-2026-94545 Next.js next/og 인증되지 않은 RCE ★ CVE-2026-94545 Next.js next/og SVG 주입을 통한 네이티브 RCE ★ https://github.com/user-attachments/assets/e297b40b-36ad-4a9a-b0c1-a64429bc0160 개요 next/og는 JSX를 Satori로 SVG로 렌더링한 다음 그 SVG를 래스터화하여 Open Graph 이미지를 생성합니다. Satori는 사용자가 제공한 텍스트를 이스케이프하지 않고 SVG에...
PT-2026-106853
A DOM-based Cross-Site Scripting XSS vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next query parameter and directly assigns it to the browser's...
CVE-2025-55182-GodzillaMemoryShell
CVE-2025-55182-GodzillaMemoryShell help usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable UTF-16 encodin...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: restore set elements when delete set fails From the abort path, nftmapelemactivate needs to restore refcounters to their original state. Currently, it uses set-ops-walk to iterate over these set elements. The...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an out-of-bounds write in triegetnextkey The triegetnextkey function allocates a node stack with a size of trie-maxprefixlen. However, it writes trie-maxprefixlen + 1 nodes to the stack when the stack is full, after...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fixed soft lockups in fib6selectpath under high next hop changes. Soft lockups were observed on a cluster of Linux-based edge routers located in a highly dynamic environment. Using the bird service, these routers continuous...
CVE-2025-24813_presentation
Next.js로 생성된 프로젝트이며 create-next-app을 사용하여 부트스트랩되었습니다. 시작하기 먼저 개발 서버를 실행하세요: npm run dev 또는 yarn dev 또는 pnpm dev 또는 bun dev http://localhost:3000을 브라우저에서 열어 결과를 확인하세요. app/page.tsx 파일을 수정하여 페이지 편집을 시작할 수 있습니다. 파일을 편집하면 페이지가 자동으로 업데이트됩니다. 이 프로젝트는 next/font를 사용하여 Vercel의 새로운 글꼴 모음인 Geist를 자동으로 최적화하고...
cve-2025-55182-poc
기본 정보 CVE-2025-55182는 2025년에 가장 광범위한 영향을 미친 웹 프레임워크 취약점 중 하나입니다. React Server ComponentsRSC는 현대 Next.js 애플리케이션의 주요 아키텍처가 되었으며, create-next-app으로 생성된 표준 프로젝트 대부분이 영향을 받으며 별도의 사용자 정의 코드 없이도 악용될 수 있습니다. 항목| 내용 ---|--- CVE 번호| CVE-2025-55182 별칭| React2Shell 취약점 유형| 인증되지 않은 원격 코드 실행Unauthenticated RCE...
CVE-2024-21793
CVE-2024-21793 출처: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...
CVE_6387
이것은 create-next-app으로 부트스트래핑된 Next.js 프로젝트입니다. 시작하기 먼저, 개발 서버를 실행하세요: npm run dev or yarn dev or pnpm dev or bun dev 브라우저에서 http://localhost:3000을 열어 결과를 확인하세요. app/page.tsx 파일을 수정하여 페이지 편집을 시작할 수 있습니다. 파일을 편집하면 페이지가 자동으로 업데이트됩니다. 이 프로젝트는 커스텀 Google 폰트인 Inter를 자동으로 최적화하고 로드하기 위해 next/font를 사용합니다....