PublicSafe

PublicSafe Votre navigateur, votre espace sécurisé PublicSafe est une extension de navigateur gratuite et open-source axée sur la confidentialité, le chiffrement et le contrôle utilisateur. Elle fournit des outils de chiffrement côté client conçus pour aider les utilisateurs à protéger les...

CVE-2024-48910-POC

CVE-2024-48910 Preuve de concept Ceci est une preuve de concept pour CVE-2024-48910. Il s'agit d'une vulnérabilité qui était présente dans DOMPurify, un sanitizer XSS pour HTML, SVG et MathML. Cette version de DOMPurify est vulnérable à la pollution de prototype, où un attaquant peut injecter des...

oopso

oopso Простой в использовании клиентский конструктор OSINT-запросов для поиска открытых файловых менеджеров через поисковые системы. Версия: 1.0 Возможности Поддержка нескольких движков: автоматически преобразует сигнатуры в нативный синтаксис запросов для Shodan, FOFA, ZoomEye и Censys Обширное...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Примечания: Вопрос типа «ползунок» также может быть уязвим при использовании большого целого числа вместо строки. Это не удалось подтвердить в моём локальном окружении. Шаги эксплуатации Откройте страницу опроса и найдите текстовое поле или поле комментария...

CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE RCE authentifiée dans MotionEye = 0.43.1b4 via un contournement de la validation côté client sur le champ imagefilename. Utilisation nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Options Option| Description ---|--- -t| Hôte/URL...

vi-bot

BotDetect v2 — Bibliothèque de détection de robots en production Bibliothèque de détection de robots et d'automatisation côté client avec score pondéré, analyse comportementale, empreinte numérique du navigateur et seuils configurables. Détecte les navigateurs sans tête, Selenium, Puppeteer,...

CVE-2023-45540

HTML-Injection...

CVE-2021-21220

Installez d'abord : https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Winx64/848005/ Version de Chrome : 90.0.4403.0 Installez chrome-win.zip 1. node server.js Exécutez ./chrome.exe --no-sandbox Rendez-vous sur localhost:8888 Notez que la CVE sur laquelle...

cs-get-last-error

cs-get-last-error Получение сообщений об ошибках из кодов GetLastError непосредственно внутри клиента Cobalt Strike без помощи поиска Google, net helpmsg или Microsoft Error Lookup Tool. Сообщения об ошибках включены в aggressor-скрипт, и взаимодействие с биконом не требуется. Aggressor-скрипт...

DEBIAN-CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

EUVD-2026-87923

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

CVE-2026-89102

In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...

JQueryingU

JQueryingU ПРИМЕЧАНИЯ: Базовый код обнаружения на стороне клиента создан Кристианом Людвигом https://jsfiddle.net/ChristianL/AVyND/ и использовался APT 29 в 2016 году. APT 29 модифицировал всплывающее окно, превратив его в POST-запрос, и использовал его во время кампании по слежке за конференцией...

CVE-2024-57175

CVE-2024-57175 : Cross-Site Scripting XSS stocké dans PHPGURUKUL Online Birth Certificate System v1.0 Description Une vulnérabilité de Cross-Site Scripting XSS stocké a été identifiée dans PHPGURUKUL Online Birth Certificate System v1.0 sur la page /user/certificate-form.php. Cette vulnérabilité...

CVE-2026-100306 TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

TDuck survey form through 6.0 fails to validate write passwords on submission endpoints, enforcing the check only on the front end. Remote unauthenticated attackers can submit form entries directly to public submission APIs without providing the password by using the form key from share links...

CVE-2026-88032

A flaw was found in the MongoDB Java Driver. A use-after-free vulnerability in the reactive client-side encryption component can occur when an encrypted operation is cancelled. An attacker able to cause such an operation to be cancelled may cause the hosting application process to terminate. This...

Linux Distros Unpatched Vulnerability : CVE-2026-96747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in .sock as a local Unix domain...

CVE-2026-48540

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing...

CVE-2026-48541

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the person name field. Attackers can craft a person name containing...

EUVD-2026-86446

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...