36 matches found
CVE-2024-6778-POC
CVE-2024-5836 / CVE-2024-6778 This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within the Chromium web browser which allowed for a sandbox escape from a browser extension. To run these, you must be on a version of Chromium older tha...
CVE-2026-34621
CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...
WEAPONIZING-CVE-2024-4367
WEAPONIZING-CVE-2024-4367 CVE-2024-4367 is a critical vulnerability CVSS 9.8 in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the FontMatrix object within PDF files. CVE-2024-4367 Exploit Wizard: User Guide CVE IDENTIFIER| CVE-2024-4367 ---|--- SEVERITY|...
cve-2024-4367-poc
CVE-2024-4367 POC for PDF.js POC for PDF.js' CVE-2024-4367 vuln - The pdf-modify.py script can be used to modify your PDFs and inject payloads. Usage 1. Ensure CVE-2024-4367-POC-base-placeholder.pdf is in the working directory. 2. Uncomment/modify the payloadnew variable in pdf-modify.py. 3. Run...
CVE-2024-4367
CVE-2024-4367 POC Usage root@kitploit: python poc.py mal.pdf "alert'0xr2r'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js POC scaner templates...
Linux Distros Unpatched Vulnerability : CVE-2026-88060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...
EUVD-2026-74074
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Duplicate Advisory: Grav: XSS Blueprint Validation Bypass via Twig String Concatenation
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2c4f-86xc-cr74. This link is maintained to preserve external references. Original Description Grav v2.0.0 contains a cross-site scripting vulnerability fixed in 2.0.1. The XSS blueprint validator...
CVE-2026-44670
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View AV / database names without any HTML escape, then a render template uses raw strings.ReplaceAlltpl, "$avName", nodeAvName to embed the name in HTML before pushing to all clients via...
CVE-2025-25477
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser...
GHSA-78VG-7V27-HJ67 auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
Summary Unescaped entity property enables Javascript injection. Details I think this is possible because %sourcelabel% in twig macro is not escaped. Therefore script tags can be inserted and are executed. PoC - clone example project https://github.com/DamienHarper/auditor-bundle-demo - create...
CVE-2024-29831
CVE-2024-29831 relates to an improper input validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server, potentially enabling remote code execution. Affected: DolphinScheduler; remediation guidance consistentl...
Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox
CVE-2024-4367 POC Usage bash python poc.py malicious.p...
CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...
CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...
HTML Injection
ethyca-fides is vulnerable to HTML Injection. The vulnerability arises due lack of of input validation coming from connected systems and data stores which is reflected in the downloaded data. This results in an HTML injection that can be abused to perform phishing attacks or malicious JS executio...
CVE-2023-30736
The CVE-2023-30736 entry concerns Samsung Assistant’s PushMsgReceiver, where improper authorization prior to version 8.7.00.1 allows an attacker to trigger a javascript interface. Affected software is Samsung Assistant on devices supporting versions before 8.7.00.1. The vulnerability requires use...
CVE-2023-22475
CVE-2023-22475 affects Canarytokens. The issue is a Cross-Site Scripting vulnerability in the history page of triggered Canarytokens prior to sha-fb61290, allowing an attacker who discovers an HTTP-based Canarytoken URL to execute JavaScript when the history page is viewed by the token’s creator....
