Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

Adobe Coldfusion - Cross-Site Scripting

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within th...

Nodejs Squirrelly - Remote Code Execution

Nodejs Squirrelly is susceptible to remote code execution. Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuratio...

EUVD-2026-91874

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

CVE-2026-105090

Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...

PT-2026-104575

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An issue exists where unauthenticated attackers can perform reflected cross-site scripting XSS by providing crafted parameters that are rendered without proper encoding on the OAuth2 authorization...

CVE-2018-14667

CVE-2018-14667 상세:https://xz.aliyun.com/t/3264 poc calcwindows：...

EUVD-2026-52744

@a2ui/webcore: openUrl permits javascript: URI execution via agent-supplied button actions...

GHSA-72QQ-P3R5-F7WQ @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Summary The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitra...

@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Summary The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitra...

windbg_js_scripts

WinDbg JavaScript 스크립트 WinDbg 갤러리로 설치 저장소를 클론하세요 git clone https://github.com/hugsy/windbgjsscripts windbgjsscripts\config.xml에서 Setting Name="LocalCacheRootFolder" 줄을 편집하여 저장소의 로컬 경로를 반영하세요. WinDbg에서 config.xml 파일을 로드하고 설정을 저장하세요: windbg .settings load \path\to\windbgjsscripts\config.xml...

browser-pwn

Browser-Pwn 브라우저 세계는 4개의 주요 플레이어가 지배하고 있습니다: Chromium/Chrome Blink 엔진 Firefox Gecko 엔진 Safari WebKit 엔진 Edge Blink 엔진 구 EdgeHTML 엔진 다음 내용은 두 부분으로 나뉩니다: 아키텍처와 구현을 이해하고 소스에서 빌드하는 데 도움이 되는 정보 계산기 실행 기능을 찾는 데 도움이 되는 정보 목차 1. 엔진 개요 Chromium Firefox Safari Edge 2. 익스플로잇 개요 Chromium Firefox Safari Edge ...

weaponised-XSS-payloads

무기화된 XSS 페이로드 alert1을 P1으로 바꾸도록 설계된 XSS 페이로드 블로그 게시물 이 저장소는 "How to Upgrade Your XSS Bugs from Medium to Critical"이라는 제목의 블로그 게시물과 함께 공개되었습니다. https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 이게 뭔가요? 이 저장소에는 인기 있는 CMS 플랫폼에서 피해자 브라우저의 컨텍스트로 민감한 기능을 수행하기 위해 XSS 페이로드에 로드할...

CVE-2026-104872 Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript applications. Prior to versions 0.66.0 of @opentelemetry/instrumentation-cassandra-driver, 0.65.0 of @opentelemetry/instrumentation-knex, 0.67.0 of @opentelemetry/instrumentation-mongoose,...

CVE-2026-104872

Several OpenTelemetry JavaScript Contrib instrumentation libraries versions are vulnerable to the inclusion of sensitive information. Specifically, versions prior to 0.66.0 of @opentelemetry/instrumentation-cassandra-driver, 0.65.0 of @opentelemetry/instrumentation-knex, 0.67.0 of @opentelemetry/...

CVE-2026-2766-but-with-wasm

CVE-2026-2766, 하지만 wasm을 사용한 상태: 검증된 크래시 PoC, 제어 흐름 하이재킹 시연 완료 디버그 셸에서 크래시pc = 해제된 셀 포이즌 0xcdcdcdcdcdcdcdcd — 엔진이 해제된 ICScript에서 읽어낸 포인터로 점프함. 남은 작업: 재점유된 바이트를 제어하는 것. research/README.md 참조. 2026년 버그에 대한 WasmBlazeFox 계열 체인: CVE-2026-2766, "JavaScript Engine의 JIT 오컴파일 / use-after-free: JIT 컴포넌트",...

CVE-2025-59528-PoC

CVE-2025-59528 PoC 격리된 실험실 환경에서 CVE-2025-59528 을 연구하기 위한 개념 증명PoC입니다. !WARNING 면책 조항 이 프로젝트는 교육 목적, 보안 연구, 그리고 귀하가 소유했거나 명시적 테스트 승인을 받은 시스템 테스트 를 위해서만 엄격히 사용해야 합니다. 소유자의 허가 없이 이 PoC를 제3자 서버, 공공 서비스 또는 인프라에 사용하지 마십시오. 저자는 이 프로젝트의 오용으로 인한 손해, 데이터 손실, 서비스 중단 또는 법적 결과에 대해 책임을 지지 않습니다. 설명 이 PoC는...

CVE-2026-102626 LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

EUVD-2026-91763

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

CVE-2026-102626

LimeSurvey Community Edition 7.4.0 is vulnerable to a Stored XSS flaw. An authenticated user with the global Surveys: create permission can inject a JavaScript-breaking value into the date_min attribute of a Date/Time question. Because the application fails to perform JavaScript-context encoding ...