21 matches found
CVE-2022-46364-Poc
CVE-2022-46364 익스플로잇 MTOM XOP:Include를 통한 Apache CXF SSRF | CVSS 9.8 CRITICAL 취약점 Apache CXF -s -d -t, --target - 취약한 CXF SOAP 엔드포인트 필수 -s, --ssrf-url - 내부 URL 데이터 유출 대상 필수 -d, --domain - 대상 도메인 기본값: localhost --plain-soap - MTOM 대신 일반 SOAP 사용 예제 Read /etc/passwd python3 exploit.py -t...
CVE-2025-58179-Check
CVE-2025-58179-Check CVE-2025-58179-Check は、Astroフレームワークの/imageエンドポイントにおけるSSRF（Server-Side Request Forgery）/コンテンツスプーフィングの脆弱性を検証するためのシンプルなPythonスクリプトです。 この脆弱性は GHSA-qpr4-c339-7vq8 および CVE-2025-58179 として追跡されています。 脆弱性の背景 この脆弱性は、output: 'server' 設定で @astrojs/cloudflare...
CVE-2022-46364
CVE-2022-46364 — Apache CXF MTOM/XOP SSRF 파일 읽기 CVE-2022-46364 에 대한 개념 증명 익스플로잇 — Apache CXF의 MTOM/XOP 요청 처리에서 발생하는 서버 측 요청 위조SSRF 취약점입니다. 취약점 요약 CVE-2022-46364 는 Apache CXF 3.4.10 및 3.5.5 이전 버전에 영향을 미칩니다. SOAP 서비스에서 MTOM메시지 전송 최적화 메커니즘이 활성화되면 CXF 언마샬러는 요소 내의 href 속성을 잘못 검증합니다. W3C XOP 사양에서 요구하는 ...
CVE-2026-43887 Outline: Stored XSS via Comment Mentions
Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; however, the backend does not validate or sanitize the href attribute associated with these mentions. As a result, potentially dangerous...
Unhead Vulnerable to Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity
The link.href check in makeTagSafe safe.ts, line 68-71 uses String.includes, which is case-sensitive: typescript if key === 'href' if val.includes'javascript:' || val.includes'data:' return nextkey = val Browsers treat URI schemes case-insensitively. DATA:text/css,... is the same as...
EUVD-2019-4883
Malware in sbrugna...
GHSA-5M5X-9J46-H678 Element Plus Link component (el-link) implements insufficient input validation for the href attribute
Element Plus Link component el-link prior to 2.11.0 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol...
CVE-2025-57665
Element Plus Link component el-link through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol...
PT-2025-36908
Name of the Vulnerable Software and Affected Versions: Element Plus versions through 2.10.6 Description: The Element Plus Link component el-link does not sufficiently validate input for the href attribute, creating a security gap. This allows attackers to inject malicious URLs using dangerous...
CVE-2025-57665
The Element Plus UI component library (NPM) is vulnerable to insufficient input validation in the el-link component through version 2.10.6 . The component fails to perform protocol validation, URL sanitization, or security header enforcement on user-controlled href attributes, passing them direct...
CVE-2025-57665
Element Plus Link component el-link through 2.10.6 implements insufficient input validation for the href attribute, creating a security abstraction gap that obscures URL-based attack vectors. The component passes user-controlled href values directly to underlying anchor elements without protocol...
Element Plus 安全漏洞
Element Plus is an open source Vue.js 3 UI library from the China Element Plus organization. A security vulnerability exists in Element Plus 2.10.6 and earlier versions, which stems from insufficient input validation of the href attribute and could lead to cross-site scripting attacks and phishin...
CVE-2014-125128
'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting XSS. The function 'naughtyHref' doesn't properly validate the hyperreference href attribute in anchor tags , allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings...
UBUNTU-CVE-2014-125128
'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting XSS. The function 'naughtyHref' doesn't properly validate the hyperreference href attribute in anchor tags , allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings...
CVE-2014-125128
'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting XSS. The function 'naughtyHref' doesn't properly validate the hyperreference href attribute in anchor tags , allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings...
CVE-2014-125128
CVE-2014-125128 affects the sanitize-html library prior to 1.0.3. The root cause is the naughtyHref function not properly validating the href attribute in tags, allowing bypasses that rely on different casings, whitespace, or hexadecimal encodings. This leads to cross-site scripting (XSS) impact...
CVE-2014-125128
'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting XSS. The function 'naughtyHref' doesn't properly validate the hyperreference href attribute in anchor tags , allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings...
CVE-2014-125128
'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting XSS. The function 'naughtyHref' doesn't properly validate the hyperreference href attribute in anchor tags , allowing bypasses that contain different casings, whitespace characters, or hexadecimal encodings...
PT-2025-36454
Name of the Vulnerable Software and Affected Versions: sanitize-html versions prior to 1.0.3 Description: The 'sanitize-html' software prior to version 1.0.3 is susceptible to Cross-site Scripting XSS. The naughtyHref function inadequately validates the href attribute within anchor tags , enablin...