EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2026-4367)

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missin...

CVE-2026-109352: Improper Neutralization of Input During Web Page Generation

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

CVE-2024-58391: Improper Neutralization of Input During Web Page Generation

Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remote attackers can craft a malicious printview URL that, when visited by a victim, injects HTML and executes script in the...

CVE-2026-109653: Improper Neutralization of Input During Web Page Generation

Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because record fields are rendered into an HTML attribute context without escaping. A low-privilege user can store a malicious payload in a record field that executes in the browser of any...

PT-2026-111109

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 Description A remote authenticated attacker can obtain sensitive information because session tokens are exposed within the HTML response. Recommendations At the moment, there is no...

EulerOS 2.0 SP11 : bison (EulerOS-SA-2026-4214)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Bison affected version not known and classified as critical. Affected by this issue is the function execvp of the...

gitcolombo

Gitcolombo Herramienta OSINT que extrae identidades — nombres, correos electrónicos y enlaces entre cuentas aparentemente no relacionadas — de repositorios git y GitHub. CLI de Python gitcolombo.py — clona repos, recorre git log y puede llamar a la API de GitHub para señales más ricas. Versión we...

r3con1z3r

R3CON1Z3R R3con1z3r es una herramienta ligera de recopilación de información web con funciones intuitivas escrita en Python. Proporciona un entorno potente en el que se puede realizar un rastreo web basado en inteligencia de fuentes abiertas OSINT de forma rápida y exhaustiva. El rastreo es la...

xss_vulnerability_challenges

Escenarios de Vulnerabilidad XSS desafíos Este repositorio es una aplicación PHP Dockerizada que contiene algunos desafíos de vulnerabilidad XSS. Las ideas detrás de los desafíos son: Bypass de validación de JavaScript Bypass de entidades HTML Bypass de WAF Bypass de validación de lista negra...

CVE-2026-108723 answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external...

CVE-2026-108723

The answer-me-with-html tool (versions through 0.5.0 ) is vulnerable to a link following vulnerability within the am CLI code block src= embedding functionality. The root cause is that the localPath() function validates the path text without resolving symlinks . An attacker can provide a reposito...

CVE-2026-108723 answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external...

CVE-2026-108723 answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external...

EUVD-2026-96889

answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing outside the checkout so am render embeds readable external...

EUVD-2026-96989

LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered target device. Restricted users permitted on a probe device can request smokepingin or smokepingout graphs with arbitrar...

morty

Morty Proxy de saneamiento de contenido web como servicio Morty reescribe páginas web para excluir etiquetas y atributos HTML maliciosos. También reemplaza referencias a recursos externos para evitar filtraciones de información a terceros. El objetivo principal de morty es proporcionar un proxy d...

nullscan

Descripción Un marco modular diseñado para encadenar y automatizar pruebas de seguridad. Analiza definiciones de objetivos desde la línea de comandos y ejecuta los módulos correspondientes y sus herramientas nullscan después. También puede tomar hosts e iniciar nmap primero para realizar un escan...

bluemonday

bluemonday bluemonday es un sanitizador HTML implementado en Go. Es rápido y altamente configurable. bluemonday toma contenido generado por usuarios no confiable como entrada, y devolverá HTML saneado contra una lista blanca de elementos y atributos HTML aprobados para que puedas incluir el...

cve-collector

CVE-Collector Simple recolector de las últimas CVE escrito en Python Existen varios métodos para recolectar información sobre las últimas CVE Common Vulnerabilities and Exposures. Este código fue creado para proporcionar orientación sobre cómo recolectar, qué información incluir y cómo codificar ...

custom-bytecode-analyzer

custom-bytecode-analyzer Analizador de bytecode de Java personalizable mediante reglas JSON. Es una herramienta de línea de comandos que recibe una ruta que contiene uno o más archivos Jar o War, los analiza utilizando las reglas proporcionadas y genera informes HTML con los resultados. Uso usage...