cve-2026-85706

CVE-2026-85706 — Lectura arbitraria de archivos sin autenticación en GitLab CVSS 10.0 · Sin autenticación · Explotada activamente CISA KEV Una diferencia de análisis sintáctico parser differential entre GitLab Workhorse proxy inverso en Go y Puma/Grape Ruby permite a un atacante no autenticado...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF mediante diferencia de analizadores de URL Código del programa Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed ...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read...

xss2shell-check

xss2shell-check Detector no destructivo y sin dependencias para la primitiva de reflexión CVE-2026-64638 "XSS2Shell" en wp-login.php de WordPress. Antecedentes CVE-2026-64638 es un XSS reflejado preautenticado en el núcleo de WordPress , divulgado por PWN.AI el 2026-08-07 CVSS 8.9, CWE-79 y...

GitLabSniper

GitLabSniper CVE-2026-85706 — lectura arbitraria de archivos no autenticada en GitLab CE/EE detección · enumeración de proyectos públicos · recolección · shell interactiva · canalización subfinder/httpx Autor: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Sitio:...

CVE-2026-64638-PoC-XSS2Shell-

XSS2Shell — WordPress Pre-Auth XSS → RCE Chain PoC CVE-2026-64638 · Reflected XSS on wp-login.php · CVSS 8.9 v4.0 · Patched in WordPress 7.0.3 ⚠️ AUTHORIZED TESTING ONLY. This tool is for security research and authorized penetration testing against systems you own or have explicit written...

poc-CVE-2026-64638-

XSS2Shell — PoC del CVE-2026-64638 Cadena de explotación de XSS pre-autenticación → RCE en WordPress, basada en la investigación de pwn.ai publicada en ionsec.io. ⚠️ AVISO LEGAL : Solo para FINES EDUCATIVOS y PRUEBAS AUTORIZADAS. Úselo únicamente contra sistemas que le pertenezcan o para los que...

CVE-2026-64638-PoC-Exploit

🌀 CVE‑2026‑64638 – Suite de seguridad WordPress XSS2Shell ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, blue teams y probadores de penetración. El acceso no autorizado a sistemas informáticos e...

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell XSS reflejado de pre-autenticación → Ejecución remota de código en WordPress Core ⚠️ AVISO: Este repositorio es exclusivamente para investigación de seguridad autorizada y fines educativos. No lo utilices contra sistemas que no sean tuyos o para los que no tengas permiso...

CVE-2026-64638

PoC de Alerta XSS2Shell CVE-2026-64638 Prueba de concepto de XSS reflejado sin autenticación previa en WordPress Prueba de concepto en un único archivo HTML para el CVE-2026-64638 XSS2Shell, un XSS diferencial de analizador en el núcleo de WordPress. Demuestra la ejecución de JavaScript sin...

CVE-2023-24329-lab

CVE-2023-24329 — Laboratorio de Diferencial de Analizador Parser Differential Solo con fines educativos. Este laboratorio existe para demostrar una vulnerabilidad real en un entorno seguro y aislado. No lo ejecutes nunca contra sistemas que no te pertenezcan. No reutilices el código de filtro...

EUVD-2026-69225

xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content...

ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close

Summary A mutation-XSS / allowedTags bypass: when textarea or xmp is included in allowedTags, an input containing a literal a solidus right after the RCDATA end-tag name lets non-allowed markup such as pass through sanitizeHtml live and unescaped, even though img/onerror are not in the allowlist....

SUSE CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...

Linux Distros Unpatched Vulnerability : CVE-2026-83611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

AZL-99363 CVE-2026-83611 affecting package python-tensorboard 2.16.2-6

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...

DEBIAN-CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...

CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...

CVE-2026-83611

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...

CVE-2026-83611 xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, DOMParser.parseFromString can silently accept an end tag such as , close the element, and discard th...