Lucene search
+L

371 matches found

Kitploit
Kitploit
•added 2026/10/04 12:47 a.m.•17 views

operative-framework

operative framework 는 디지털 조사 프레임워크로, 여러 대상과 상호작용하고, 여러 모듈을 실행하고, 대상과의 링크를 생성하고, 보고서를 PDF 파일로 내보내고, 대상이나 결과에 노트를 추가하고, RESTFul API와 상호작용하고, 자신만의 모듈을 작성할 수 있습니다. 중요 이 프로젝트는 Rust로 재설계되었으며, 지난 몇 달간 활발히 개발 중입니다. PR은 환영합니다. 로드맵 기능| 상태 ---|--- CRUD Targets| ✓ CRUD Links| ✓ CRUD workspace| ✓ dot 형식으로 내보내...

6AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/30 4:16 p.m.•5 views

CVE-2026-100257

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS0.00206EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 3:17 p.m.•6 views

EUVD-2026-90001

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 3:17 p.m.•11 views

CVE-2026-100257

In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists where Server-Side Request Forgery (SSRF) can occur via stored XHTML injection during the PDF export process. The provided documents do not specify the exact root cause or specific remediation steps beyond the affected v...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/30 3:17 p.m.•38 views

CVE-2026-100257

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS0.00206EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 3:53 a.m.•10 views

Masscan-Report

Masscan Report Generator masscan JSON 출력에서 대화형 React 기반 HTML 시각화를 생성하는 Python 도구로, D3.js 힘-기반 네트워크 그래프를 제공합니다. 스크린샷 기능 대화형 네트워크 그래프 힘-기반 D3.js 시각화 로 네트워크 토폴로지 표시 계층 구조 : 인터넷 → Class A /8 → Class B /16 → Class C /24 → 호스트 → 포트 드래그 및 확대/축소 로 네트워크 탐색 색상으로 구분된 노드 호스트, 포트, 네트워크 세그먼트 유형별 검색 및 필터 실시간 검색...

6.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•7 views

Telerik UI for ASP.NET AJAX 2008.3.1314 < 2026.2.708 RadEditor PDF Export SSRF

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is 2008.3.1314 or later and prior to 2026.2.708. It is, therefore, affected by a server-side request forgery vulnerability. Insufficient validation of content submitted to the RadEditor PDF export feature may...

6.5CVSS6.1AI score0.00419EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•3 views

CVE-2026-100257: Server-Side Request Forgery (SSRF)

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-63276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A...

6.9CVSS6AI score0.00187EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 12:17 p.m.•18 views

CVE-2026-63276

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 11:10 a.m.•14 views

CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS6AI score0.00187EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 11:10 a.m.•21 views

CVE-2026-63276

CVE-2026-63276 is a stack buffer overflow in LibreOffice 's CFF-to-Type 1 font conversion, which occurs when the application subsets fonts during PDF export. A glyph that emits many operators writes past the end of a fixed-size buffer with no bounds check. In fixed versions, remaining capacity is...

6.9CVSS6AI score0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/22 11:10 a.m.•39 views

CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS0.00187EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•4 views

CVE-2026-63276: Out-of-bounds Write

LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and CFF fonts may be embedded in documents. A stack buffer overflow existed in that conversion. The converted operators were written into a fixed size buffer with no check that they...

6.9CVSS6AI score0.00187EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•2 views

PT-2026-96705

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description A stack buffer overflow occurs during the conversion of CFF fonts to Type 1 fonts, a process that takes place when a document is exported to PDF and CFF fonts are embedded. The issue aris...

6.9CVSS6.1AI score0.00187EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/10 1:41 p.m.•16 views

EUVD-2026-75451

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

5.1CVSS6.1AI score0.00492EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/10 1:41 p.m.•17 views

CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

5.1CVSS6.2AI score0.00492EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 1:41 p.m.•55 views

CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

5.1CVSS0.00492EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•25 views

PT-2026-89414

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convert markdown to pdf module. The attribute, objectAttribute,...

5.1CVSS6.1AI score0.00492EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/28 5:16 a.m.•10 views

CVE-2026-82081

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export...

6.4CVSS0.00239EPSS
SaveExploits0References2
Rows per page
Query Builder