CVE-2026-102576

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

EUVD-2026-92519

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

CVE-2023-0264

CVE-2023-0264에 대한 PoC 권한 부여 코드 흐름 중 세션 하이재킹을 허용하는 Keycloak 취약점 https://github.com/advisories/GHSA-9g98-5mj6-f9mv 참조 전제 조건 Docker curl jq python3 또는 HTTP로 정적 파일을 제공하는 다른 도구 재현 단계 1. ./run-keycloak-container.sh로 Keycloak 컨테이너를 시작합니다. 2. ./create-users.sh로 사용자 alice와 mallory 두 명을 생성합니다. 3. 이 저장소의 정적...

EyouCms v1.6.2 - Cross-Site Scripting

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet. id: CVE-2023-41597 info: name: EyouCms v1.6.2 - Cross-Site Scripting author: ritikchaddha severity: medium description: | EyouCms v1.6.2 was discovered to...

trawl

TRAWL TRAWL에 오신 것을 환영합니다! 👋 애플리케이션과 AI 에이전트를 위한 자체 호스팅 웹 스크래핑. 네이티브 API를 통해 페이지를 가져오거나, MCP 클라이언트를 연결하여 깔끔한 Markdown을 읽고, 구조화된 데이터를 추출하고, 스크린샷을 캡처하고, 브라우저 활동을 검사할 수 있습니다. TRAWL은 빠른 HTTP 요청으로 시작하고, 해결된 브라우저 세션을 재사용하며, 사이트에 더 많은 작업이 필요할 때 Camoufox와 선택적 주거용 프록시로 에스컬레이션합니다. 지원되는 JavaScript 챌린지와...

CVE-2016-3113

CVE-2016-3113 PoC oVirt 웹 인터페이스RedHat의 반사형 XSS 취약점을 악용하기 위한 개념 증명PoC입니다. 이 PoC에서는 피해자의 브라우저 세션을 통해 oVirt IaaS 환경의 VM을 시작합니다. JS 코드는 급한 상황으로 인해 간단하게 유지했습니다. 자세한 정보는 여기: https://www.itskritis.de/uploads/jk17/StudentsFreigabeversion/DURMAZPraesentation.pdf 독일어 슬라이드...

EUVD-2026-89476

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

CVE-2026-71189

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

CVE-2026-57179

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted partialtoken as a bearer credential without binding it to the browser session that created it. Applications using resumable partial pipeline steps could all...

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-94372: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

AVEVA Pipeline Integrity Monitor

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to disclose information, brute-force hashes, or run arbitrary code in a browser session. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

CVE-2026-81824

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...

PT-2026-82842

A stored cross-site scripting XSS vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user...

CVE-2026-76367

In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting XSS vulnerability is possible because Splunk SOAR can treat...

UBUNTU-CVE-2026-52854

Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the displaymap parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the...

EUVD-2026-62200

Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the displaymap parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the...

Cross-site Request Forgery (CSRF)

Overview @fastify/oauth2 is a Perform login using oauth2 protocol Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to the OAuth state-check cookies in the index.js authorization flow. An attacker can log a victim into the attacker’s account by planting...

CVE-2026-19657

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...

CVE-2026-19657 ScadaLTS Unauthenticated Reflected XSS

ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session...