CVE-2026-64638-PoC-Exploit

🌀 CVE‑2026‑64638 – WordPress XSS2Shell Security Suite ⚠️ SOLO USO ETICO – TEST DI SICUREZZA AUTORIZZATI Questo repository fornisce strumenti esclusivamente per professionisti della sicurezza autorizzati, blue team e penetration tester. L'accesso non autorizzato a sistemi informatici è illegale ai...

CVE-2026-64638

XSS2Shell Alert PoC CVE-2026-64638 Proof of Concept für Pre-Auth Reflected XSS in WordPress Ein HTML-Proof-of-Concept in einer einzigen Datei für das Parser-Differenzial-XSS CVE-2026-64638 XSS2Shell im WordPress-Core. Es demonstriert die Ausführung von nicht authentifiziertem JavaScript im...

CVE-2023-24329-lab

CVE-2023-24329 — Laboratorio di Differenze di Parsing Solo a scopo didattico. Questo laboratorio esiste per dimostrare una vulnerabilità reale in un ambiente sicuro e isolato. Non eseguirlo mai contro sistemi che non possiedi. Non riutilizzare mai il codice di filtro volutamente difettoso in alcu...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth-XSS → RCE-Exploit-Kette, basierend auf Forschung von pwn.ai, veröffentlicht auf ionsec.io. ⚠️ RECHTLICHER HINWEIS : Nur für BILDUNGSZWECKE und AUTORISIERTE TESTS. Verwenden Sie es nur gegen Systeme, die Ihnen gehören oder für die Sie eine...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF durch URL-Parser-Differenz Programmcode Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

xss2shell-check

xss2shell-check Rilevatore non distruttivo e senza dipendenze per la primitiva di riflessione CVE-2026-64638 "XSS2Shell" in WordPress wp-login.php. Contesto CVE-2026-64638 è una XSS riflessa pre-autenticazione nel core di WordPress , divulgata da PWN.AI il 2026-08-07 CVSS 8.9, CWE-79 e corretta...

CVE-2026-5751

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

EUVD-2026-64655

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces SVG/MathML, dangerous content such as HTML integration points SVG , MathML and mutation-XSS parser-differential payloads could...

CVE-2026-6827 justhtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces SVG/MathML, dangerous content such as HTML integration points SVG , MathML and mutation-XSS parser-differential payloads could...

CVE-2026-5751

justhtml versions 1.13.0 and earlier are affected by a parser-differential / mutation XSS (mXSS) vulnerability. The issue occurs when a custom SanitizationPolicy preserves foreign namespaces (e.g., drop_foreign_namespaces=False with allowlisted SVG/MathML elements or raw-text containers such as )...

EUVD-2026-64654

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

CVE-2026-5751 justhtml before 1.14.0 Mutation XSS via custom sanitization policies

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

CVE-2026-5751 justhtml before 1.14.0 Mutation XSS via custom sanitization policies

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting mXSS vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces e.g., dropforeignnamespaces=False with allowlisted SVG/MathML elements or raw-text containers such as...

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell Reflektiertes XSS vor der Authentifizierung → Remote-Codeausführung im WordPress-Core ⚠️ HAFTUNGSAUSSCHLUSS: Dieses Repository dient ausschließlich autorisierten Sicherheitsforschungs- und Bildungszwecken. Verwenden Sie es nicht gegen Systeme, die Ihnen nicht gehören ode...

CVE-2026-54134

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-54134

OctoPrint (web interface for 3D printers) versions prior to 1.11.8 and 2.0.0rc3 are vulnerable to file exfiltration via parser differentials between its custom Tornado upload handler and Flask/Werkzeug. An attacker with FILE_UPLOAD permission can inject reserved internal form fields through query...

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-67201 V 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.http

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery SSRF bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a URL containing a backslash in the authori...

CVE-2026-67201

CVE-2026-67201 describes a SSRF bypass in V’s standard library between net.urllib and net.http up to version 0.5.2. By crafting a URL with a backslash in the authority section, net.urllib.parse() can extract a trusted host for allowlists, while net.http.get() normalizes the backslash and connects...